Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/CS45ol94FSh_Y9jvauVA2QKhr9Y.roa
File: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (raw, json)
Hash identifier: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=
Subject key identifier: 09:2E:39:A2:5F:78:15:28:7F:63:D8:EF:6A:E5:40:D9:02:A1:AF:D6
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 019422FBE50EA4C97357337438B237E85EE4
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/CS45ol94FSh_Y9jvauVA2QKhr9Y.roa
Signing time: Wed 01 Jan 2025 17:48:41 +0000
ROA not before: Wed 01 Jan 2025 17:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34538
IP address blocks: 193.239.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e5:0e:a4:c9:73:57:33:74:38:b2:37:e8:5e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Jan 1 17:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=092e39a25f7815287f63d8ef6ae540d902a1afd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:a2:ce:57:73:74:55:f0:b7:56:0d:9e:fa:
e0:5d:cb:b9:9f:73:0a:06:fd:51:6e:27:30:d4:3d:
e4:e5:cf:06:8f:8f:70:b0:7d:e7:1c:73:9d:d2:9c:
f1:ca:fc:9b:56:4a:40:d5:a9:bf:99:0f:f4:78:d9:
54:fa:70:ad:f4:6d:a8:46:77:87:23:a9:08:57:4e:
49:2a:1d:9b:bb:bf:67:ff:90:5f:9d:05:fd:16:3d:
eb:60:b6:78:7d:10:7a:f9:e7:e3:98:58:38:ac:d7:
f5:2e:e2:ec:e4:2e:e0:4c:aa:ea:cd:cf:3b:1e:5e:
1b:5d:cf:5c:1f:7a:d2:f0:bf:6b:88:90:af:4a:fb:
30:d3:cf:39:f7:ad:f4:bf:c9:09:45:99:8b:bd:60:
c4:dd:37:fb:f9:4c:96:2c:c2:b0:3d:df:4f:d4:26:
df:d1:65:34:c3:44:f2:77:46:33:76:7b:cb:be:b4:
a2:b6:b7:a6:61:25:a2:3b:20:ae:f1:b0:09:35:07:
e0:7c:3b:ab:73:1d:63:02:1f:ba:b0:0a:39:06:52:
1c:6f:47:d1:63:98:05:fc:30:f3:66:a7:77:ba:fa:
a7:da:7f:3f:58:02:75:77:6a:9d:c8:80:01:5c:ea:
03:d2:1b:7e:1e:23:aa:8d:24:58:b2:a2:44:26:49:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:39:A2:5F:78:15:28:7F:63:D8:EF:6A:E5:40:D9:02:A1:AF:D6
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/CS45ol94FSh_Y9jvauVA2QKhr9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.158.0/23
Signature Algorithm: sha256WithRSAEncryption
36:bb:2c:cc:73:42:17:71:11:4e:64:b9:c7:e4:29:0f:bb:38:
55:b8:57:15:e5:e0:e8:a9:97:fc:90:a9:9a:ce:42:12:1c:e7:
95:f3:8a:e4:f9:5e:9c:b5:c9:06:c6:16:de:02:18:f7:45:d0:
04:00:e6:aa:4a:20:d8:34:cb:8d:f2:4e:a3:e4:a3:95:c0:9d:
56:b1:63:f4:f7:3f:19:1a:78:4b:2b:8a:4a:92:48:4b:f4:91:
15:5d:b8:6e:f0:a4:fb:8c:77:46:b4:98:b9:b8:bb:ee:90:4d:
01:99:3f:c9:55:c9:90:35:80:53:8a:94:86:5c:4b:5f:aa:ac:
1b:21:4d:08:c9:13:9b:1c:10:40:c5:f7:33:c9:2b:ff:26:b2:
ca:3b:7e:ea:ed:df:c8:11:31:b3:0e:5f:f5:bf:af:12:33:87:
57:6e:51:5f:24:40:20:70:66:fb:ce:a9:f6:e2:de:4e:03:04:
fd:94:91:57:16:e8:76:da:82:dc:05:a7:99:1f:ca:26:5e:f9:
c7:2b:12:49:55:56:bf:ba:14:17:16:14:6d:2a:33:e6:d8:91:
e5:3c:ab:76:39:ec:89:70:6f:c9:14:be:97:d3:8e:2a:34:bf:
d5:55:0d:b0:ec:3e:fe:24:70:ec:df:d7:46:d2:34:3c:1a:bb:
33:52:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:47 2025 by rpki-client