Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/8weSLoMuWV3usouK6kCYa4DYS08.roa
File: 8weSLoMuWV3usouK6kCYa4DYS08.roa (raw, json)
Hash identifier: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=
Subject key identifier: F3:07:92:2E:83:2E:59:5D:EE:B2:8B:8A:EA:40:98:6B:80:D8:4B:4F
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 0194D5F7AFFA6039EB77A8BB241C54E3106E
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/8weSLoMuWV3usouK6kCYa4DYS08.roa
Signing time: Wed 05 Feb 2025 11:56:06 +0000
ROA not before: Wed 05 Feb 2025 11:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 193.39.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:f7:af:fa:60:39:eb:77:a8:bb:24:1c:54:e3:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Feb 5 11:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f307922e832e595deeb28b8aea40986b80d84b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0d:d4:e2:a4:ca:76:5d:ea:c8:0d:b5:3a:31:
7c:83:5e:6c:ed:54:b6:d0:ac:51:43:ce:56:8c:8d:
93:db:c2:b6:bb:3c:1d:1a:f0:52:ee:d5:f8:d4:4f:
eb:ac:a7:24:1e:4a:d2:b2:14:50:65:b3:75:3c:c5:
5c:a9:d9:bd:b8:9b:eb:2e:db:1c:be:1d:66:ea:75:
00:af:b1:9d:32:22:75:7f:b3:34:dc:12:74:63:68:
00:34:d4:9c:d4:4b:c6:14:bf:f0:7d:23:02:55:21:
54:c6:59:00:85:38:84:4c:e3:02:cc:b3:0a:f2:8b:
62:f9:c9:0f:c8:6d:4d:ea:db:ca:08:b5:d3:47:b3:
03:64:b9:f4:83:52:3e:ca:e3:78:d7:b9:e1:88:af:
0e:7e:44:b4:99:b7:58:19:06:40:8b:86:a2:ad:83:
38:a5:c0:de:23:7d:5c:c6:e2:59:db:fb:40:f2:83:
d0:67:0e:72:fe:a0:3f:25:58:a2:52:b2:55:c3:c2:
10:36:79:3c:a5:b4:d6:76:13:02:46:a0:03:13:b7:
2d:d5:04:26:8f:05:97:06:57:1e:3f:22:b5:78:ea:
6d:b0:db:36:fb:8c:c9:40:74:d4:d2:9d:3e:f6:7b:
1c:77:80:82:3a:d9:43:db:3d:34:74:99:ba:90:e2:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:07:92:2E:83:2E:59:5D:EE:B2:8B:8A:EA:40:98:6B:80:D8:4B:4F
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/8weSLoMuWV3usouK6kCYa4DYS08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.183.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2c:a5:aa:12:03:b3:d3:bc:73:ee:6e:f9:d3:f0:57:6f:61:
6e:dd:5f:59:cb:2a:42:8d:76:12:ac:77:41:65:ad:1c:2d:85:
81:a3:61:05:d7:6e:e3:73:2e:0e:0a:da:ec:d9:34:5d:49:98:
7c:92:b1:41:ac:28:36:48:79:cd:24:0b:cf:ce:ba:20:1c:f0:
a1:78:a7:40:ab:44:e6:47:70:f7:1c:2b:b8:56:00:13:83:c3:
7a:55:49:08:7e:25:20:58:22:1f:91:60:67:1e:ba:81:96:51:
25:2c:6b:cc:4d:6a:d1:d9:4f:5f:1d:76:69:f0:29:b7:b8:09:
67:81:ba:c3:5e:da:f7:e4:22:5c:2f:8a:74:62:7f:e2:a1:b5:
8d:11:51:e2:a2:aa:9c:32:eb:39:25:da:cc:98:6f:88:a2:ba:
71:11:6a:93:3d:19:33:ac:bc:5f:06:eb:6d:1e:5b:6f:de:86:
4f:a7:02:91:7d:69:c9:43:2a:e9:5b:80:7a:41:9d:e5:40:f6:
ab:45:af:c9:68:73:25:7c:4c:f2:36:b3:3f:17:c9:77:84:25:
ab:37:4a:59:3b:8b:b2:69:60:d6:51:7b:ab:88:c5:81:01:68:
59:0f:69:8e:83:4c:4a:64:8a:62:94:de:ff:12:05:8a:7c:5d:
c6:1d:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:46:34 2025 by rpki-client