Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa
File: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (raw, json)
Hash identifier: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=
Subject key identifier: 17:6A:72:5F:80:16:D3:23:4F:FC:3C:64:27:2D:9C:EF:3D:CC:C4:A8
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019427B47460EB9002C78158BDA3FD10A8C0
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa
Signing time: Thu 02 Jan 2025 15:48:45 +0000
ROA not before: Thu 02 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.151.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:74:60:eb:90:02:c7:81:58:bd:a3:fd:10:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jan 2 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=176a725f8016d3234ffc3c64272d9cef3dccc4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:4e:b1:09:5c:42:89:89:3b:c9:dd:fa:08:
44:cf:e7:09:25:91:05:73:a0:9b:4a:48:6b:c8:b6:
f6:1c:85:96:62:47:f0:f4:d8:9a:15:b2:42:45:fd:
27:37:f4:58:39:23:97:5a:ad:15:94:87:5f:6b:55:
38:f7:01:de:3a:96:de:50:e5:df:91:3c:d3:40:9f:
65:cd:b5:da:b5:96:5a:09:f0:dc:b7:47:99:b9:8e:
8e:42:77:48:d2:0c:f5:1a:58:15:ac:d5:89:75:53:
65:31:c9:68:8f:3c:84:3c:56:39:a1:03:80:a3:6e:
60:bb:f0:b9:e8:16:17:76:3d:a1:d5:97:5e:81:2c:
a3:86:8d:a1:45:8d:27:32:41:b8:86:a0:0b:3d:b6:
14:f2:43:3f:cd:4d:ea:6e:87:f4:9d:7d:bd:9e:07:
38:f5:83:1f:20:06:ff:55:06:f5:8b:20:ee:9f:5f:
d2:ff:22:53:6b:52:91:3e:9c:d1:94:ac:9d:84:80:
fd:0c:7d:39:3f:54:7e:61:4a:5b:85:fd:14:f9:26:
14:30:d9:55:7a:e1:9d:52:3d:0e:a3:12:19:a9:33:
b2:82:fc:e5:75:01:06:dc:f0:df:e0:94:56:2d:1b:
6f:dc:fd:17:39:ec:99:f3:76:bf:93:ca:5b:c4:e7:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6A:72:5F:80:16:D3:23:4F:FC:3C:64:27:2D:9C:EF:3D:CC:C4:A8
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e8:bd:2e:1f:5c:98:af:0a:1d:54:20:62:9f:25:51:7d:0c:
59:d8:0c:dd:9e:85:ad:5b:11:25:40:b3:1c:f4:14:ad:9e:cc:
8d:44:7c:94:75:0d:74:20:2b:c1:8f:ca:8d:60:8c:af:f7:0f:
7c:96:b1:8e:fb:4d:d3:7a:e2:32:c3:67:4a:89:bb:6e:81:0b:
07:e6:98:51:ae:7a:69:30:0c:f5:83:1b:50:fa:2a:c6:8a:5b:
2c:80:77:dc:b3:56:9d:1c:26:4d:31:37:aa:d4:fd:96:e4:19:
eb:46:4d:3f:67:99:29:61:9e:65:6c:eb:13:02:c8:e5:fd:02:
39:e7:15:9d:89:30:ce:35:3c:a6:a4:b2:4b:b3:a1:2a:13:8f:
ed:07:18:e1:69:ff:e7:c3:7b:e6:33:8d:ae:82:1f:65:59:05:
30:b3:63:a3:f4:38:ad:98:27:60:bf:dc:f9:d6:29:0a:72:2b:
6e:74:1d:94:04:06:db:1e:83:d3:9e:c1:e1:99:aa:88:39:3e:
41:e4:56:92:74:20:1d:fe:14:de:91:df:65:34:bc:e4:7d:c1:
0f:4c:68:df:ed:6f:46:7a:1c:26:6b:ff:07:2d:d6:ba:cc:a6:
43:db:1d:f6:21:a4:4e:30:f9:36:24:c1:d9:03:51:9e:e0:bd:
cc:5e:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:45 2025 by rpki-client