Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/92LlPsnUIAq2_qCu90vUr2n0raU.roa
File: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (raw, json)
Hash identifier: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=
Subject key identifier: F7:62:E5:3E:C9:D4:20:0A:B6:FE:A0:AE:F7:4B:D4:AF:69:F4:AD:A5
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 0194258F775C7F21CEAF3E3339F6C0FF40DE
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/92LlPsnUIAq2_qCu90vUr2n0raU.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 193.8.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:77:5c:7f:21:ce:af:3e:33:39:f6:c0:ff:40:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f762e53ec9d4200ab6fea0aef74bd4af69f4ada5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:4e:be:1a:f3:fa:80:cd:98:15:62:5f:88:
c1:f4:26:80:a3:b6:ff:7e:5e:38:8c:b3:13:e0:15:
36:fe:bf:33:e2:3f:3a:3c:28:ce:4c:d8:95:03:a3:
c2:23:32:52:33:37:cb:52:e8:2d:41:63:28:16:cd:
ac:d1:73:17:45:30:97:72:dd:dd:2d:f1:1d:97:24:
8d:0b:4e:3d:cf:ce:9c:8b:e1:75:02:cd:98:51:8b:
72:0a:ce:ae:ad:cf:a1:7b:27:59:0e:78:f3:0e:28:
d5:5a:51:e7:3c:e8:f1:bf:b1:3c:cb:f6:54:1f:e0:
95:4c:af:92:4c:ff:b0:78:aa:1a:5a:22:c1:a5:7e:
47:84:3f:b9:66:32:d5:39:45:e8:ee:d2:18:96:53:
25:b2:45:24:b8:0b:80:3c:5a:f0:06:15:77:53:8d:
05:6b:12:39:3d:1d:75:b3:07:b5:d2:24:cd:f7:78:
85:7e:c3:b0:08:89:d4:4e:92:c5:96:b2:86:9b:4d:
b0:d9:47:6a:04:12:34:00:a4:fe:de:e3:e7:6f:66:
9a:b4:6b:ef:66:23:53:18:37:0c:86:9b:2a:40:eb:
38:43:a5:3a:a2:4b:da:70:10:a7:89:9f:33:64:9c:
3e:7d:c2:fd:9d:80:f3:44:b7:e6:05:fc:fb:2f:18:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:62:E5:3E:C9:D4:20:0A:B6:FE:A0:AE:F7:4B:D4:AF:69:F4:AD:A5
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/92LlPsnUIAq2_qCu90vUr2n0raU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:11:57:44:ff:d2:53:e8:35:f4:91:1c:69:7a:fd:52:b2:07:
9a:f5:1a:4c:bb:a2:7f:08:d3:d4:73:d6:7b:70:7f:e9:b4:2e:
14:8a:ab:e9:f2:47:ca:a5:85:aa:6c:6d:c5:b3:6c:82:da:5e:
f1:88:7a:f6:98:bc:f8:8c:dc:96:56:3a:63:63:ea:1f:90:80:
04:e1:15:c8:9b:0f:94:a8:69:b0:12:a4:96:18:e6:62:64:03:
db:79:4e:d7:b2:48:72:9e:0e:05:e3:3a:59:f0:82:7a:8b:ea:
7d:3d:e9:3b:86:83:18:3d:d3:18:bf:48:79:00:a2:9d:a8:0a:
b1:21:53:19:b5:03:36:6d:70:87:05:01:d2:05:aa:0c:91:63:
d1:48:84:47:e9:d9:e5:e9:50:3b:19:e5:a2:13:62:c8:23:68:
5d:7d:53:b0:07:c6:8e:84:cc:f3:4b:37:ae:75:51:87:2f:3c:
24:dc:f1:fe:eb:99:1b:be:8c:0d:e6:66:e7:fd:cd:9b:a4:0f:
b5:06:84:b3:6c:ef:c6:44:69:2a:6d:97:4b:30:48:fc:cd:3e:
ed:1c:fd:cd:1d:10:f1:4e:7c:51:a4:0f:6c:33:75:44:42:3d:
22:30:f8:0f:96:f2:31:e3:51:5d:f2:78:14:82:1e:fd:ab:57:
e2:0a:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:24:39 2025 by rpki-client