Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9dPSGDqXQLG0BkHOqmQcIpWhhQE.roa
File: 9dPSGDqXQLG0BkHOqmQcIpWhhQE.roa (raw, json)
Hash identifier: BDLqSegPsf8u7H7Zo1P0BxMqw33cvpG+8Cirq3zfJmk=
Subject key identifier: F5:D3:D2:18:3A:97:40:B1:B4:06:41:CE:AA:64:1C:22:95:A1:85:01
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421441B9D6AA5D3D4833353BE493FC988
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9dPSGDqXQLG0BkHOqmQcIpWhhQE.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215346
IP address blocks: 193.42.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1b:9d:6a:a5:d3:d4:83:33:53:be:49:3f:c9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5d3d2183a9740b1b40641ceaa641c2295a18501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:64:67:01:ba:9f:d1:1b:a2:2c:00:44:d5:
59:e1:37:c9:56:d0:0e:fa:41:c5:e7:10:82:c3:60:
40:e9:67:44:a5:20:99:ba:dc:b7:07:59:fa:eb:a7:
df:4b:b3:54:0e:8b:3b:86:dc:fe:29:2f:3e:d8:f6:
c1:8a:29:de:8e:27:8c:5c:69:d0:60:ba:98:ce:0b:
c7:19:ee:96:d4:6e:1f:0c:80:75:21:35:ba:70:b6:
93:ac:33:08:a0:b4:5e:7b:14:02:1b:0d:41:7e:2a:
68:2e:2f:f1:c8:b5:a9:48:c0:8d:b4:b3:ef:46:fe:
0f:b7:ae:26:35:a6:92:3a:55:84:bf:31:f0:1e:22:
3d:5c:bf:06:91:c1:a2:a9:76:71:86:29:d9:34:f6:
b5:cc:db:a5:0f:97:3b:3d:3a:73:a8:cf:d9:d5:3d:
8e:1a:cd:43:5f:19:09:6e:9f:78:cc:32:6a:62:0f:
39:e5:72:36:52:ab:94:1e:a5:46:c3:19:a3:8c:20:
22:e0:41:88:f9:7f:1a:74:5e:a7:6e:c3:52:8d:4e:
45:82:52:5e:cb:9b:bc:2d:dd:8b:98:76:89:95:1e:
c6:3c:ed:b0:01:6d:14:ec:c2:d8:f2:e5:ff:70:e7:
28:68:0f:b6:55:14:f2:f4:df:f6:6b:da:76:66:97:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D3:D2:18:3A:97:40:B1:B4:06:41:CE:AA:64:1C:22:95:A1:85:01
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9dPSGDqXQLG0BkHOqmQcIpWhhQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c4:48:db:75:b3:cf:69:70:40:2d:c7:8a:b7:fb:27:6b:9c:
75:d2:51:7f:78:9f:33:5c:fa:09:4f:97:84:c2:5f:e5:7c:fe:
c4:f5:62:2c:39:6b:9d:88:2f:ff:fb:c7:ed:e7:bb:63:e2:92:
da:91:5b:98:5c:d0:89:df:8d:ac:e1:bd:8b:df:51:38:8a:2f:
54:68:ad:bd:6c:b2:82:95:2a:a3:98:a5:7b:d4:4c:b2:9f:5a:
19:09:62:ba:d8:35:fa:42:ec:17:0d:12:66:e0:f1:86:35:67:
ed:01:88:da:96:44:fb:f7:fb:46:1d:da:59:a7:b2:9d:e3:a1:
57:7c:53:d1:92:53:a2:24:31:84:39:52:c4:52:b0:db:b7:5d:
11:f8:17:bb:cb:76:da:53:f7:a3:84:06:c8:41:8d:a9:b0:86:
51:97:d3:d0:56:cc:4f:30:d8:af:c9:0a:27:0b:bd:74:f1:c2:
bd:53:9f:55:45:f8:b2:0d:6e:3d:d4:3b:af:d1:8c:ec:1b:ee:
d9:5c:08:52:37:0f:17:e8:03:77:4a:2b:30:8d:b6:b1:6f:51:
d6:9c:19:95:23:db:97:c6:fe:1b:35:44:35:23:f6:8d:73:bb:
62:5e:bd:b7:ad:9b:be:4c:ec:07:4a:47:b4:f7:f2:b6:3b:c8:
88:d0:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:07:04 2025 by rpki-client