Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/M06N0gwo3JL6GFlpwhETdttP9PQ.roa
File: M06N0gwo3JL6GFlpwhETdttP9PQ.roa (raw, json)
Hash identifier: JdKy18XjO1bCDj++PIiRzZGq0fdEiBKbHucnCQRbUms=
Subject key identifier: 33:4E:8D:D2:0C:28:DC:92:FA:18:59:69:C2:11:13:76:DB:4F:F4:F4
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 01942747D148E40ECA1169BC4F8C3B1104B8
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/M06N0gwo3JL6GFlpwhETdttP9PQ.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204341
IP address blocks: 193.200.52.0/24 maxlen: 24
193.200.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d1:48:e4:0e:ca:11:69:bc:4f:8c:3b:11:04:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=334e8dd20c28dc92fa185969c2111376db4ff4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:3a:62:ee:43:4b:9f:f0:d2:03:37:79:07:
3a:6c:a1:a3:fe:51:79:74:2f:28:05:94:11:e8:19:
77:11:6e:a0:6d:00:02:3e:36:c3:30:98:49:bb:3c:
0b:71:b5:cb:1f:b8:20:7e:f3:7a:d0:c0:30:27:4c:
e3:3f:36:c1:ef:02:a5:9f:76:49:62:44:dd:b3:96:
a3:58:fc:20:f9:8b:d1:03:bc:7b:40:07:cb:a0:a4:
26:87:20:50:da:80:0d:4c:28:fd:4e:d4:b4:ed:33:
3a:8c:3d:3b:dd:ff:64:08:58:1b:16:3a:73:d9:03:
6c:5a:64:a5:d1:52:b2:ff:96:51:12:ee:c7:e0:07:
63:ff:1d:1c:df:6c:df:a7:ce:d2:66:74:f9:59:79:
9d:0b:71:ef:1f:66:8c:f7:01:bc:ef:8c:5f:71:3f:
d5:87:2b:30:53:8d:a2:03:7c:80:d5:38:13:cb:26:
c5:19:3e:5a:89:ca:8a:01:c9:82:cc:0d:e0:30:08:
9d:0e:dd:b7:8f:aa:10:9a:5d:57:36:d0:91:64:df:
2c:6e:14:99:2e:18:22:6c:a4:8f:2f:4c:7b:62:39:
28:ff:68:f8:d9:c9:93:f9:d0:c5:e5:d0:9e:4e:1e:
89:a6:bb:44:99:7d:43:71:79:35:16:9e:a5:b5:d7:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4E:8D:D2:0C:28:DC:92:FA:18:59:69:C2:11:13:76:DB:4F:F4:F4
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/M06N0gwo3JL6GFlpwhETdttP9PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.52.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:37:97:fc:42:43:22:b7:22:51:70:94:89:87:7c:06:cb:2f:
8d:07:59:95:5a:82:09:71:2e:84:33:a6:ed:d1:c2:3e:98:68:
99:23:11:b9:bd:84:c2:4c:34:07:ec:4c:da:74:aa:62:14:c6:
5f:d0:31:d8:5b:8b:cd:2c:8e:3c:ee:12:3f:25:25:e8:01:0c:
8d:e4:83:61:8d:be:22:62:b2:69:ac:e6:e7:9d:2b:37:a0:8f:
e4:6e:31:36:9a:86:ff:9d:a2:7c:7f:98:45:61:25:03:66:1a:
a1:38:3b:de:b0:74:dc:83:9a:c4:41:38:93:b2:bd:64:7d:9d:
99:64:bb:11:78:09:02:bf:c7:d9:25:2b:8b:5d:d1:e0:47:e3:
87:d7:09:f4:e3:11:78:3b:92:07:74:6c:d6:fc:24:60:b1:b3:
dd:a4:3e:9f:15:32:d6:74:9e:e8:d2:21:a3:23:0f:7f:4b:ad:
7b:3a:a4:1d:d8:ac:2f:6f:df:2e:07:7a:aa:2e:7f:91:5a:fa:
2e:d6:85:1b:7d:09:6f:8a:4a:fa:c1:4f:4c:88:13:1b:b7:fa:
16:7b:53:98:67:cc:55:50:2c:b2:3b:49:ed:cc:ac:70:bc:f6:
c7:1d:a4:4c:6d:52:32:a7:bf:91:c3:ac:5e:d0:9b:3d:0b:ce:
cb:68:30:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:15 2025 by rpki-client