Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa
File: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (raw, json)
Hash identifier: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=
Subject key identifier: F6:9C:24:BD:51:94:C5:91:D4:B7:03:65:BB:76:3C:DC:DC:5A:CF:FF
Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial: 01942521BAD04F78E279CC19822A4D62102D
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa
Signing time: Thu 02 Jan 2025 03:49:15 +0000
ROA not before: Thu 02 Jan 2025 03:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15675
IP address blocks: 193.5.240.0/21 maxlen: 24
193.5.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ba:d0:4f:78:e2:79:cc:19:82:2a:4d:62:10:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Validity
Not Before: Jan 2 03:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f69c24bd5194c591d4b70365bb763cdcdc5acfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:28:fd:c1:f3:3a:14:8b:51:09:f7:d3:15:
46:cd:69:1b:48:62:81:d1:1b:87:8d:d9:91:9c:ef:
6e:9b:bb:7e:12:e9:35:64:ff:c8:c9:68:48:06:ad:
e1:56:b7:ba:e4:bd:ef:ef:4d:df:8c:6b:08:51:4c:
38:aa:64:90:93:5d:75:f1:e3:1d:95:f9:3c:c8:3f:
5c:60:40:d7:8c:7e:6a:63:9c:a5:2a:20:d6:09:8e:
91:89:42:47:ad:65:f4:5a:9c:0e:f3:24:dc:26:25:
0b:2a:17:ab:a3:7b:62:2c:74:65:c0:98:6e:4b:85:
80:2d:16:a5:b0:39:29:ae:a4:c4:03:a2:ed:35:b2:
1c:7d:7a:3c:22:1b:fe:57:9d:b5:0c:58:7e:a7:35:
8c:f6:04:f1:80:c7:09:62:1a:94:8b:6e:68:d7:53:
2c:93:51:21:cb:e3:ab:e4:97:32:d8:95:12:11:25:
0e:59:56:56:d1:77:5c:a0:c6:34:e9:ba:6c:9c:ad:
11:34:78:22:1d:0b:67:cd:bf:d0:9b:fe:92:60:97:
f2:74:a7:4e:27:e5:a8:f3:f4:76:a3:89:84:52:fa:
ed:7d:d1:9c:93:ae:07:52:a1:d4:b1:04:80:25:86:
68:a8:db:a5:f0:43:11:27:71:fc:60:4c:f8:62:1f:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:24:BD:51:94:C5:91:D4:B7:03:65:BB:76:3C:DC:DC:5A:CF:FF
X509v3 Authority Key Identifier:
keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.240.0-193.5.249.255
Signature Algorithm: sha256WithRSAEncryption
d6:3a:d0:fc:c8:83:db:c9:34:12:7d:d3:97:b6:f5:2d:64:d3:
1b:8b:2e:70:38:01:c9:ff:ae:6a:c0:90:30:e6:06:6f:a0:a0:
e8:9b:1d:c6:bb:25:4e:09:f8:2f:9d:82:1c:ef:9a:25:ff:fa:
16:f3:79:43:a6:a1:32:fe:b4:c9:ce:d0:40:2f:56:bf:c6:45:
fd:45:ba:c3:f3:ba:78:6e:4b:09:60:a3:f8:61:26:79:67:72:
8f:9f:3c:f4:7b:87:3e:6e:b7:6e:fe:d9:26:70:e2:e5:fd:38:
44:ba:1f:04:51:87:b3:ba:a0:71:d9:2a:91:c7:68:bd:c7:6d:
83:98:3d:4a:6d:a8:d0:8b:7c:8f:9e:b5:49:62:3c:b1:0c:51:
0d:0a:14:ef:37:ee:7d:c2:c3:d2:a5:ed:87:e8:e5:bb:4a:c9:
2b:a4:6e:bc:ed:a9:10:16:57:4e:19:6c:ed:48:15:5f:09:36:
2c:2e:e6:3a:5c:c4:12:15:0a:f7:40:f4:24:db:3c:58:4d:35:
2c:4b:71:07:ab:bb:2a:b1:d4:4b:ce:73:75:87:89:8d:87:8e:
cf:8b:d0:a4:67:6c:bd:27:e0:ec:95:07:b4:d3:93:bd:6e:82:
0c:a7:34:19:fb:eb:a1:a1:ce:2c:b1:32:b0:f5:12:b8:7d:1d:
49:16:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:24 2025 by rpki-client