Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/69j8k9W_Kz202mE3W0ylnRGyMyQ.roa
File: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (raw, json)
Hash identifier: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=
Subject key identifier: EB:D8:FC:93:D5:BF:2B:3D:B4:DA:61:37:5B:4C:A5:9D:11:B2:33:24
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 019420D6062D091A67AA0288282E9AE50D7B
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/69j8k9W_Kz202mE3W0ylnRGyMyQ.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21441
IP address blocks: 193.109.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:06:2d:09:1a:67:aa:02:88:28:2e:9a:e5:0d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebd8fc93d5bf2b3db4da61375b4ca59d11b23324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:19:8b:1c:3e:18:ba:24:a7:68:0c:86:7a:3b:
d5:c8:4e:81:68:85:c5:f7:9a:d1:57:c7:85:2f:62:
b3:0d:d6:04:1f:39:ea:67:58:4b:1a:5c:02:22:f3:
cd:93:67:05:86:9b:46:80:15:ed:5b:25:70:32:72:
26:09:f0:96:51:97:1a:ff:8e:b2:fe:67:60:02:ac:
8f:89:13:4e:3b:2e:3a:83:3a:50:27:fc:44:d1:b3:
f0:e7:4b:dd:b7:2f:4f:96:a6:86:61:d4:b7:b7:bf:
d3:11:ed:53:c7:1a:88:e7:5a:93:e1:16:ff:ff:ba:
b6:1a:bf:1b:68:27:ca:42:0f:5c:2a:81:76:fb:92:
af:fe:5b:cc:86:3f:fb:fa:32:89:d2:6f:1f:e9:51:
9b:62:ff:d1:78:cc:59:1c:f1:76:ba:fd:8c:33:6e:
b1:20:1d:c9:f9:9b:1c:7f:8d:5e:fb:5b:ae:e1:f5:
e4:7b:bb:44:8e:4b:45:e5:63:5e:58:01:d8:62:ad:
f9:05:c1:ed:13:0d:ae:44:d6:09:0f:9b:e2:26:1d:
3a:ac:0b:78:3a:c2:5f:66:f0:24:10:53:9f:e8:bf:
5b:44:b7:e5:9f:2a:7a:cd:b4:54:a4:52:49:ed:f0:
73:82:5f:d3:80:b9:32:44:e6:56:c5:b4:7e:61:53:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D8:FC:93:D5:BF:2B:3D:B4:DA:61:37:5B:4C:A5:9D:11:B2:33:24
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/69j8k9W_Kz202mE3W0ylnRGyMyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.227.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:f0:a6:f8:06:11:10:e1:f4:6a:18:27:1a:1d:6c:36:f9:f6:
47:29:c0:de:38:e5:f7:b9:66:c1:9e:85:ea:32:5b:77:0a:e8:
86:91:c7:d5:2e:ef:9a:a2:01:63:bd:fd:d1:23:13:f4:9f:62:
9d:1c:16:d0:de:c6:02:7f:5d:51:62:8e:a0:c8:82:6d:50:55:
26:10:74:8a:e8:79:3e:87:ca:79:46:f4:12:0e:78:d6:40:4d:
d0:f7:91:d0:69:00:87:55:2c:de:80:59:dc:ce:0f:6d:e1:d3:
fa:f9:c7:ec:26:55:f0:c4:8b:f7:51:f2:d7:c5:3c:4e:2a:fe:
29:a5:b2:3a:ee:0a:ca:8c:35:27:6a:55:86:1c:ff:d3:75:37:
8b:6b:12:67:91:d7:2f:a9:a1:bb:1e:ca:c2:92:67:09:16:7a:
d3:d7:a8:3f:63:5f:71:2b:db:d7:c2:d3:fa:ac:74:21:bf:dc:
ee:a5:ea:3a:e8:2b:28:ef:e4:5c:bc:95:af:71:da:df:11:b0:
b6:25:8c:fd:0b:bc:63:aa:9d:6b:08:c7:6b:ed:f8:df:bd:95:
c6:8b:eb:ae:c0:79:5e:42:ca:72:70:fa:e5:74:ac:4e:13:57:
9f:40:f3:01:85:dc:b3:da:76:ab:d5:9d:b8:3b:40:a5:a5:a6:
84:76:d7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:48 2025 by rpki-client