Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Es9DToahcsj0ahEtb--Fy2u42F4.roa
File: Es9DToahcsj0ahEtb--Fy2u42F4.roa (raw, json)
Hash identifier: nfMwvWvI1T9eF9JsdtFDjnCaRTVkyNEeCBV5LJRL/I0=
Subject key identifier: 12:CF:43:4E:86:A1:72:C8:F4:6A:11:2D:6F:EF:85:CB:6B:B8:D8:5E
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 01942143D4A96C645A208B2AFFAE65253756
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Es9DToahcsj0ahEtb--Fy2u42F4.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.227.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d4:a9:6c:64:5a:20:8b:2a:ff:ae:65:25:37:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12cf434e86a172c8f46a112d6fef85cb6bb8d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:db:4c:dc:46:d6:a4:ec:1d:ac:69:5e:81:
16:97:bb:bf:0f:29:7b:2c:a5:89:51:1e:5d:61:ac:
a2:e4:23:32:c9:6a:a4:33:40:a8:6e:ea:4b:cd:b6:
96:67:ef:3f:fe:e7:a5:1f:86:d5:b7:a4:cb:60:b1:
31:8c:31:8e:52:4e:6b:6d:15:a6:ac:38:53:4c:66:
cd:52:a4:f1:1a:5e:61:50:3c:f8:08:4b:33:f1:b2:
62:9d:11:86:fd:6b:c2:f2:38:20:6f:51:5f:04:3c:
6f:ae:27:26:d0:7b:74:52:94:41:f6:14:bb:04:ad:
67:4f:96:64:d4:92:d1:96:ec:93:b5:c1:40:c6:14:
84:28:e2:f7:4e:4d:d1:39:29:b0:75:83:eb:e8:30:
e6:78:84:b3:af:bc:81:1c:f7:df:aa:14:b8:9a:d3:
96:00:aa:8d:66:a2:e4:4e:f8:e9:6f:e5:ed:62:8a:
81:a2:42:ed:89:b2:e2:7c:74:e9:a6:52:68:4e:90:
7f:40:08:7f:7a:f9:f3:61:3b:2c:73:05:39:57:44:
25:9e:d4:48:c1:e8:27:04:63:7c:eb:03:8e:2b:c3:
d2:e9:ac:1e:60:16:31:fb:c8:33:1f:a7:b2:1d:86:
81:26:c0:2a:30:90:12:b4:96:d7:44:3e:34:9a:8a:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CF:43:4E:86:A1:72:C8:F4:6A:11:2D:6F:EF:85:CB:6B:B8:D8:5E
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Es9DToahcsj0ahEtb--Fy2u42F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.246.0/23
Signature Algorithm: sha256WithRSAEncryption
28:47:41:75:e2:61:a5:9b:38:88:74:0e:04:d3:32:f0:6d:56:
51:22:5f:46:5c:f7:d3:a3:e1:04:b4:47:ae:e3:a4:d7:ce:94:
8e:14:05:e9:8d:4c:52:bb:07:79:4d:ce:6c:bc:8d:d0:a2:cf:
52:33:20:cf:03:87:8c:c2:bf:74:7b:23:56:8d:f3:0e:d1:01:
af:97:b3:d0:a4:83:59:05:67:8b:5c:75:d9:e3:4b:82:01:55:
3c:dc:1a:80:55:35:94:84:0c:2d:77:9d:da:c4:78:09:d0:54:
31:cd:7c:0b:73:96:4b:23:e7:b6:25:72:8a:b2:e9:c2:74:1d:
33:4a:2b:7c:6c:f8:99:99:51:c7:2a:26:6e:38:9f:99:70:dd:
6e:83:28:62:23:5f:3e:d2:5e:94:07:3d:03:91:85:80:03:a6:
e9:62:6c:0b:cb:c5:b9:f7:c8:16:ce:db:6a:e6:f1:fc:07:8d:
76:ac:0f:c5:3f:15:d8:79:27:32:40:08:d6:fd:aa:60:05:d8:
12:85:9d:b7:ae:f7:67:a2:0a:d9:ed:9a:da:1f:6b:1e:99:f0:
82:2a:02:ab:76:2b:a9:08:95:53:0a:5f:1e:61:24:f1:71:12:
b2:24:3f:18:e7:5c:67:cf:bf:0c:5a:11:d7:e6:e9:92:9f:b4:
bc:00:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:48:52 2025 by rpki-client