Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/23icudjGJdZrjnIPU0deFpFafyc.roa
File: 23icudjGJdZrjnIPU0deFpFafyc.roa (raw, json)
Hash identifier: MivqixI1vYdIuq7/TnSsd8jxhxbX61oCTl+OP1Nkfzw=
Subject key identifier: DB:78:9C:B9:D8:C6:25:D6:6B:8E:72:0F:53:47:5E:16:91:5A:7F:27
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194A3BBAFFF6D2DD17099293E084D54F842
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/23icudjGJdZrjnIPU0deFpFafyc.roa
Signing time: Sun 26 Jan 2025 17:49:33 +0000
ROA not before: Sun 26 Jan 2025 17:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 193.8.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:bb:af:ff:6d:2d:d1:70:99:29:3e:08:4d:54:f8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 26 17:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db789cb9d8c625d66b8e720f53475e16915a7f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:28:9c:22:10:fa:b5:c0:e2:0d:04:ea:fa:2c:
36:4c:37:c4:cf:41:ca:59:38:2d:fe:00:f0:36:ec:
c9:07:33:f3:45:3c:d4:14:ca:fe:40:60:d4:c9:9b:
0e:1a:da:0e:27:f4:5c:d8:fe:a3:f6:b1:f5:ae:42:
41:c8:4a:1a:eb:cf:25:24:b5:73:ae:00:0b:96:36:
8b:63:4b:ac:23:ed:b3:dc:3b:6a:2e:a4:12:f3:4e:
77:76:92:12:6d:2d:06:a4:92:19:37:ac:f0:07:2a:
eb:dc:79:ad:5d:18:21:d6:a4:27:ba:de:91:dc:cf:
eb:6d:40:1e:9f:d8:52:e2:43:45:1a:49:8c:99:4d:
0f:35:6c:e9:4a:ad:24:d6:ff:7e:46:5d:31:ef:43:
fe:9b:c2:e3:19:20:4a:7d:79:c1:01:99:79:85:a9:
2e:63:72:89:61:cd:69:5c:b1:b6:d2:49:f6:52:f5:
c4:51:db:0e:5f:9f:84:3c:6d:51:1f:90:e1:b2:ac:
8a:9f:be:0b:3a:1d:70:0d:a9:d5:de:51:07:c0:bf:
97:37:85:8a:bf:ce:bc:67:da:29:b5:2c:b6:4f:8f:
67:40:63:c9:dc:65:a9:30:33:50:54:bb:43:b1:50:
fe:61:1a:cb:9b:3c:28:96:30:45:8b:b0:90:b2:a3:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:9C:B9:D8:C6:25:D6:6B:8E:72:0F:53:47:5E:16:91:5A:7F:27
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/23icudjGJdZrjnIPU0deFpFafyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d7:15:e3:e6:b9:8a:aa:0a:1b:0b:2e:d4:0b:97:48:5a:41:
39:1d:32:db:c9:d4:68:59:5d:86:84:3b:21:67:5a:f3:0e:c3:
ec:10:78:d8:88:9d:3f:82:4a:e1:29:89:3f:8b:14:c0:ff:e0:
11:c0:6a:6c:5b:fd:28:fa:2f:9d:54:f6:ce:88:3c:79:0d:61:
1d:cd:75:38:dd:dc:5a:14:7a:c1:f4:23:01:e4:84:1c:d9:21:
0f:ad:48:ef:cb:31:88:58:a7:27:c1:5b:ff:5b:d8:e8:24:0a:
83:46:13:8b:51:15:81:49:15:5e:50:66:68:1b:a8:c3:8a:3e:
ca:4a:54:7a:94:7c:1e:18:bc:08:f5:fa:b0:83:65:cf:53:33:
94:38:89:7f:1a:52:e8:e2:83:06:06:e5:cb:9f:4b:2f:d8:b6:
7c:c7:90:75:c0:d6:49:f3:c2:34:5a:4c:25:3d:d7:33:cd:07:
78:e4:87:5c:2f:5f:19:67:3b:1f:f2:60:8c:23:ab:09:06:9e:
b9:60:85:d0:34:b9:b1:02:1c:bc:c3:52:4a:8b:03:d5:36:8c:
6f:12:fa:5a:ad:69:87:56:ac:be:af:a2:62:99:ac:07:08:59:
7d:57:05:47:3f:20:6a:ff:a7:fa:ae:70:a0:55:60:df:be:cc:
32:df:54:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:11:27 2025 by rpki-client