Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/qUCp0opTOHroH30GQ1OTL8eEDZ0.roa
File: qUCp0opTOHroH30GQ1OTL8eEDZ0.roa (raw, json)
Hash identifier: fwbi1gADqxyuyQEu6s4S/RhF6jaV4myQdSGvVhvF9Jw=
Subject key identifier: A9:40:A9:D2:8A:53:38:7A:E8:1F:7D:06:43:53:93:2F:C7:84:0D:9D
Certificate issuer: /CN=a0e709fe6c5018b64aabf1540e73d9eed49db0e2
Certificate serial: 018820867299C8E4A8CE58B8A09BA34581D3
Authority key identifier: A0:E7:09:FE:6C:50:18:B6:4A:AB:F1:54:0E:73:D9:EE:D4:9D:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/qUCp0opTOHroH30GQ1OTL8eEDZ0.roa
Signing time: Mon 15 May 2023 17:47:41 +0000
ROA not before: Mon 15 May 2023 17:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.201.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:72:99:c8:e4:a8:ce:58:b8:a0:9b:a3:45:81:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e709fe6c5018b64aabf1540e73d9eed49db0e2
Validity
Not Before: May 15 17:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a940a9d28a53387ae81f7d064353932fc7840d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:23:7c:d8:5c:b7:9c:6b:c7:16:60:d5:8d:
04:94:d8:c4:e8:0c:2c:d1:14:10:88:77:a1:07:b1:
11:b8:aa:1d:04:ab:45:3a:b6:bf:93:d1:d1:30:b2:
a8:9a:d0:6a:a9:37:a9:54:6a:f8:70:45:07:91:4b:
2c:81:e3:fe:fd:ce:1e:f2:98:01:1f:71:60:91:90:
52:f9:6a:fc:4e:cd:2f:6d:7e:29:86:30:66:7e:9a:
fa:88:01:17:48:d3:42:50:18:61:b1:79:ef:00:b3:
1b:14:6e:4c:ae:4e:56:f4:73:7f:28:d5:f1:38:81:
75:55:94:4b:6e:2c:12:d0:98:25:33:ed:bc:f6:96:
e6:4a:8a:ba:d2:2a:57:4a:d5:11:92:92:56:cc:31:
c8:bf:c7:2b:03:54:71:1b:9a:94:f7:88:af:61:45:
59:e7:2a:da:19:ee:4d:7f:6d:40:4b:0c:0a:5c:2a:
9d:01:f0:87:8a:21:ea:56:ac:90:ea:40:cb:c8:b9:
36:9b:9e:1e:f4:39:cd:40:c4:a1:50:47:78:0b:3a:
fd:87:a5:68:6e:b0:ae:3a:67:3e:58:9d:d9:ac:33:
f4:4e:3c:b0:70:80:18:ab:50:8c:fd:e7:aa:8f:55:
5b:75:4e:00:5a:bb:1b:7b:5d:22:a6:76:47:b0:dc:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:40:A9:D2:8A:53:38:7A:E8:1F:7D:06:43:53:93:2F:C7:84:0D:9D
X509v3 Authority Key Identifier:
keyid:A0:E7:09:FE:6C:50:18:B6:4A:AB:F1:54:0E:73:D9:EE:D4:9D:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/qUCp0opTOHroH30GQ1OTL8eEDZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c8:09:46:a4:61:e7:ed:15:be:9d:17:5a:70:1e:67:4b:8c:
88:85:81:95:30:d3:64:b4:63:01:d3:6f:a7:d6:a9:98:f8:7a:
c1:5d:7b:19:f9:50:0a:4d:05:d4:70:77:51:d6:6e:71:d8:0a:
c7:a0:bc:41:b2:a9:96:6f:3e:7c:65:64:c0:46:c5:77:17:ab:
f1:f5:40:47:7d:e5:10:dd:be:15:3e:e2:7c:3b:27:51:d7:2d:
cd:d0:5f:28:86:5b:67:13:0b:bb:ed:fc:bd:2c:1e:2e:a1:4e:
c9:15:02:d8:57:4b:25:12:bb:90:8e:1f:9c:e5:74:b7:a0:74:
b5:bf:38:5f:28:f1:18:03:bf:2b:d5:53:cd:7c:0c:ed:ea:6e:
7a:47:c2:8e:80:aa:55:95:13:8c:6a:2b:61:ae:27:31:64:01:
e4:97:ab:3b:02:4b:69:8d:bb:99:2b:93:0b:5a:c9:bd:87:17:
c4:3f:99:af:30:70:84:f3:6d:b4:20:ba:3b:58:76:ea:f3:25:
72:5d:a1:f8:de:bc:17:58:52:78:02:27:9a:b7:26:90:ac:27:
81:7b:1e:8f:64:ed:1e:07:cb:3e:59:6f:dd:9f:c7:21:45:ad:
1e:ea:d5:65:1e:68:b4:8e:54:67:46:89:ec:e2:d5:d1:88:dd:
36:d9:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:01 2025 by rpki-client