Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/_JE8lnLT-86sHVAHJKlkVaAyjr4.roa
File: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (raw, json)
Hash identifier: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=
Subject key identifier: FC:91:3C:96:72:D3:FB:CE:AC:1D:50:07:24:A9:64:55:A0:32:8E:BE
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 01942444B836EF84C0CCB3B2D628360144AC
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/_JE8lnLT-86sHVAHJKlkVaAyjr4.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.33.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b8:36:ef:84:c0:cc:b3:b2:d6:28:36:01:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc913c9672d3fbceac1d500724a96455a0328ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:c2:30:e6:01:1e:67:49:a9:3d:87:c1:e8:
cd:39:d8:47:d2:23:cb:d8:f3:16:74:b0:9f:26:7b:
fd:92:90:70:68:44:09:92:2b:1f:aa:05:59:3a:28:
54:7a:c3:78:da:5c:27:db:4a:a5:3f:9e:57:c3:8d:
f8:01:82:62:ec:76:59:e4:de:e4:2d:b4:be:c6:64:
0b:c9:c7:e0:f0:c0:d1:2f:07:19:31:28:5e:7c:ee:
1d:f9:65:de:59:82:3e:e8:33:63:f1:52:6e:84:91:
05:53:4b:0b:bd:46:68:09:0c:e8:8b:21:b1:22:0f:
dc:fc:49:1a:7a:b6:22:c1:4f:e3:4b:1b:f2:29:9c:
00:bf:12:4c:c2:cb:ec:f5:70:d8:b6:98:47:67:e4:
d9:8d:a9:23:90:88:94:e6:e4:5f:d3:b0:fe:c4:29:
2e:66:74:8f:18:c0:75:09:49:65:8e:a9:61:a8:83:
05:4e:d0:d1:ab:4a:dd:33:ed:88:f9:2e:55:06:27:
f0:30:65:ed:1c:39:71:bf:61:9c:21:a5:bd:90:cb:
75:9e:ec:ff:b2:d0:47:c9:59:11:96:8d:9c:8f:8a:
83:9d:62:39:37:a0:4e:14:40:85:c9:81:4f:84:e3:
e7:3a:b7:b0:60:73:34:6c:f5:93:b7:c1:6f:d6:46:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:3C:96:72:D3:FB:CE:AC:1D:50:07:24:A9:64:55:A0:32:8E:BE
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/_JE8lnLT-86sHVAHJKlkVaAyjr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.137.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:26:26:1c:ff:27:e9:6f:c4:2c:99:25:92:b1:58:c6:ba:88:
63:f9:a8:71:31:98:0a:b1:bb:b7:a8:5e:87:da:07:7c:f6:bc:
3f:26:54:d1:3a:38:d9:fd:74:1f:75:bf:61:1f:06:12:72:7f:
60:d4:da:35:43:dd:71:64:ae:2b:73:0f:3b:0a:d5:5e:3c:03:
9c:55:d8:11:a0:dd:66:3a:6c:a3:df:0e:03:be:d7:a3:e7:c8:
2d:52:45:95:17:17:4e:26:c9:55:4e:30:1b:8d:83:44:94:b3:
48:6a:5f:6a:d1:21:77:b5:56:e9:f1:74:09:6f:04:67:e2:30:
8e:83:3b:61:ad:f6:34:aa:49:aa:04:6e:7f:20:af:fe:b9:8d:
60:59:c8:c2:be:39:5a:4f:8b:02:f0:34:00:53:bf:30:13:67:
1e:1a:c2:ff:35:9e:09:3a:84:eb:7d:76:84:4e:a4:7c:fa:91:
de:bb:09:36:4c:0e:b8:ef:45:50:69:b7:51:ca:39:e1:d9:c0:
d9:b2:38:e3:75:ae:ae:ce:7c:5f:18:e1:24:42:28:ea:f9:e6:
ff:de:d6:df:d9:25:d2:a8:4c:e4:95:c6:f4:09:5b:00:bb:01:
0e:af:85:d3:f7:70:14:9a:a5:91:4a:db:69:03:cf:40:9b:e2:
3c:98:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:35 2025 by rpki-client