Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/siJjmLBZP9diFC7BYX9p7SQAfZw.roa
File: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (raw, json)
Hash identifier: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=
Subject key identifier: B2:22:63:98:B0:59:3F:D7:62:14:2E:C1:61:7F:69:ED:24:00:7D:9C
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 01942444C50BDE8B315FECA4C9E4CBAED523
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/siJjmLBZP9diFC7BYX9p7SQAfZw.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21203
IP address blocks: 193.109.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c5:0b:de:8b:31:5f:ec:a4:c9:e4:cb:ae:d5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2226398b0593fd762142ec1617f69ed24007d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:58:93:02:7a:b0:40:4b:9b:b2:a7:b7:21:
af:fa:57:f0:49:98:8a:cf:5b:aa:be:47:d7:d9:58:
67:11:f8:6f:3c:3d:2c:d8:de:89:27:3b:fc:b1:37:
f0:ef:b1:91:b4:d3:eb:1b:6f:d4:cd:b5:59:7c:b0:
31:10:13:3d:3b:c5:92:41:f1:47:d8:43:88:cc:57:
9e:61:7c:8b:1c:0a:14:fc:52:44:f1:12:a0:65:29:
e5:ce:47:54:82:32:9f:ac:ed:40:d3:35:38:e3:61:
00:a3:4f:e7:fc:e5:5f:3d:72:ff:c5:17:36:0e:6c:
74:d1:c2:bc:70:30:71:6f:3f:03:b6:b2:1e:20:c7:
ff:58:eb:c0:7e:cc:aa:36:de:90:35:ee:9a:53:7a:
f8:1c:d3:d0:49:0d:69:5a:05:72:6a:e9:05:3b:14:
2a:a9:73:61:b5:67:8e:43:2f:18:d3:47:0c:13:cb:
5f:90:7b:3e:a7:db:a0:85:e5:67:34:1e:23:e7:bd:
d8:bb:94:cd:05:3d:4a:f1:c7:ef:96:99:23:f1:d2:
77:9a:75:9c:78:2b:95:f5:7e:5a:fa:8f:b2:15:75:
64:08:b7:84:6b:82:11:b6:c9:ad:46:5c:c3:3a:0f:
d3:ce:84:22:4d:72:6a:24:e0:5f:a0:52:31:b6:4c:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:22:63:98:B0:59:3F:D7:62:14:2E:C1:61:7F:69:ED:24:00:7D:9C
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/siJjmLBZP9diFC7BYX9p7SQAfZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:62:72:91:a3:f5:69:96:82:3f:c3:62:0d:a2:a6:7f:83:4f:
26:ec:8a:b4:03:22:0d:de:59:ff:43:92:45:c6:5a:35:4d:9c:
e3:0b:f2:be:d5:0f:1d:94:c4:14:12:60:4f:e8:a2:bf:c0:e7:
94:51:9c:22:2e:46:bb:73:59:b1:33:46:7b:fa:e3:db:f4:7c:
12:1a:03:ca:a9:b0:2d:6d:c1:61:49:12:88:30:92:54:c9:9a:
e6:e0:f5:ed:e1:73:3a:be:d3:ac:26:23:f1:bb:b8:6e:d5:b2:
b2:b4:30:57:d5:7d:2f:72:a7:69:6c:60:e0:2f:8b:77:c3:e6:
e7:f8:24:2b:c3:ef:88:b5:25:86:c2:1e:a9:39:6f:0f:a1:f3:
2a:18:e5:d8:35:f2:62:b9:ca:14:6a:ed:98:59:ac:fb:ea:c5:
83:8f:1e:e8:e0:7d:64:89:10:83:b9:87:22:76:02:b3:ea:9f:
c1:61:f9:c4:4e:d7:03:f5:34:2c:86:9e:e2:d1:8b:d0:29:de:
17:5a:be:97:e7:b1:a5:6a:d6:c7:a2:f4:27:42:cd:f1:e6:09:
af:b1:b2:fd:1a:41:67:d2:ab:8f:60:92:c0:da:6e:7e:b9:a6:
7f:2b:1f:83:ef:76:1c:fb:29:14:2e:97:a2:36:cc:4c:1d:4a:
c1:02:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:25 2025 by rpki-client