Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/OHRptNvQN7btyzlZYvC9PKCpnpY.roa
File: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (raw, json)
Hash identifier: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=
Subject key identifier: 38:74:69:B4:DB:D0:37:B6:ED:CB:39:59:62:F0:BD:3C:A0:A9:9E:96
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 019426D9244B2BFC5F08A470D716793C7250
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/OHRptNvQN7btyzlZYvC9PKCpnpY.roa
Signing time: Thu 02 Jan 2025 11:49:12 +0000
ROA not before: Thu 02 Jan 2025 11:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31374
IP address blocks: 193.200.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:24:4b:2b:fc:5f:08:a4:70:d7:16:79:3c:72:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Jan 2 11:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=387469b4dbd037b6edcb395962f0bd3ca0a99e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:6c:83:c7:c8:23:c7:c4:2a:40:a2:6c:b5:
d8:86:45:72:a5:af:8c:95:34:6d:23:5b:cc:cf:58:
3a:1b:f9:4b:94:bd:92:2f:3e:2e:da:e8:9e:88:93:
d1:3e:93:a5:67:ff:ff:6a:c2:74:64:6e:89:d6:23:
54:fe:8a:87:26:2f:21:f9:39:7a:b7:bd:df:f7:bb:
c0:44:74:7e:c0:e4:bc:3a:c5:81:12:63:bb:8e:de:
05:8f:40:10:f5:90:f2:de:37:fe:ad:e4:c9:33:a4:
8a:e8:ba:dd:13:dc:aa:cb:57:9c:65:0e:c8:60:86:
80:8e:59:f3:70:a4:6b:bf:05:95:b2:5a:7f:09:49:
85:b2:d1:5b:90:4f:01:d3:3c:f8:46:6e:0a:5c:3e:
7f:35:78:c4:ca:74:92:e3:2f:95:12:32:3b:e4:23:
96:54:0e:f0:42:3b:4d:d8:46:7a:a9:fa:a4:aa:ed:
35:aa:c2:35:88:1d:d0:1d:09:51:c3:46:63:82:25:
45:0f:43:be:ec:e9:de:f3:e1:ae:b0:4b:6d:77:1d:
3c:54:6c:aa:8b:81:43:ca:68:34:c8:ad:6a:f0:49:
1b:16:d9:90:85:3a:50:53:06:49:43:5d:03:c5:98:
2f:14:04:04:bc:80:af:af:b0:d2:11:8a:79:19:1d:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:74:69:B4:DB:D0:37:B6:ED:CB:39:59:62:F0:BD:3C:A0:A9:9E:96
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/OHRptNvQN7btyzlZYvC9PKCpnpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:93:c3:18:42:13:44:be:62:a8:e1:72:38:e6:cb:08:79:7f:
b2:fe:bd:ac:b2:ed:61:41:8b:74:e2:f7:6b:f2:3e:4e:93:93:
7f:a2:72:fb:b4:35:4b:98:03:95:ae:a2:98:45:f6:a5:b1:ed:
f8:73:2c:29:67:ce:15:07:4a:6b:99:46:f5:35:48:84:25:8d:
de:3b:8f:07:3c:55:8e:51:13:1a:4e:f6:9d:22:5a:50:dd:cc:
77:b6:c0:14:97:49:b1:0e:db:2e:8f:2a:f4:5b:a9:af:b9:6b:
7a:8e:ab:ba:0d:8b:05:08:c9:c2:cd:f6:38:c5:c0:a3:a4:2c:
51:7f:f4:07:2f:b1:8a:72:eb:b6:90:3b:10:07:07:2f:da:d8:
2b:5a:e2:86:0a:ae:09:1c:47:83:1d:66:83:29:18:b9:d3:29:
be:da:b9:d8:7b:62:b5:0c:61:14:17:f6:eb:21:73:76:e9:0e:
f4:8f:86:97:be:08:12:3f:83:77:50:b2:17:f8:ce:b8:ce:66:
bf:10:8b:cc:ed:69:00:a7:16:72:80:8e:28:19:d0:71:67:0c:
e6:c6:b6:98:7d:6d:38:3b:6b:cf:93:fb:9f:e1:49:c3:22:aa:
fc:d2:38:54:11:1b:93:88:21:33:03:b7:31:b9:82:3a:93:85:
3d:fe:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:56 2025 by rpki-client