Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/g0yMZ7il9emhd1JLy44dXjFFySY.roa
File: g0yMZ7il9emhd1JLy44dXjFFySY.roa (raw, json)
Hash identifier: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=
Subject key identifier: 83:4C:8C:67:B8:A5:F5:E9:A1:77:52:4B:CB:8E:1D:5E:31:45:C9:26
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 0194937A32DC7B591D60FAD7C074A8E2B7A6
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/g0yMZ7il9emhd1JLy44dXjFFySY.roa
Signing time: Thu 23 Jan 2025 14:04:06 +0000
ROA not before: Thu 23 Jan 2025 14:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41354
IP address blocks: 193.39.182.0/24 maxlen: 24
193.39.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:7a:32:dc:7b:59:1d:60:fa:d7:c0:74:a8:e2:b7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Jan 23 14:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=834c8c67b8a5f5e9a177524bcb8e1d5e3145c926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e8:51:c9:4c:30:04:bf:be:d7:46:c4:48:b7:
69:8b:66:76:ff:f0:8d:03:b6:7b:fc:81:62:1d:98:
5f:09:e9:f0:94:f4:e3:1f:ca:b3:7d:ce:fa:1e:e5:
b9:9f:8d:6d:85:a0:f2:75:1b:f8:ef:2a:51:4a:92:
39:89:5b:90:a0:ca:07:31:75:e5:c7:9e:94:1d:ad:
7e:f0:4f:d8:c2:fe:36:c2:9d:d4:ab:6d:49:b1:ca:
10:89:a4:88:36:c0:bc:03:3a:ff:78:5e:f4:32:70:
ab:5c:29:45:b9:c1:45:cc:13:0a:c7:e9:37:b9:c3:
d4:49:27:70:4c:bd:e1:40:96:af:41:ed:fb:07:b4:
3b:ee:39:d0:0e:b4:c4:39:34:fc:37:2e:27:12:a1:
0b:22:84:b8:59:24:c7:9c:58:6b:d6:4c:83:03:5f:
1f:8a:8d:0a:a9:85:89:3c:b1:19:3f:a6:2d:6a:c6:
a3:f6:cb:4b:1d:ea:c6:4c:8b:52:08:b9:b1:7e:ad:
0c:73:00:40:59:fd:92:50:fc:27:b9:06:6f:06:8f:
23:f7:2a:c0:b2:bc:f1:ef:ec:7a:e0:d3:b5:b2:cb:
98:54:27:7e:68:6f:2c:71:a0:8a:b3:4e:3e:6e:7a:
54:e8:49:2c:0c:84:1c:f5:1e:27:60:1a:1a:bf:c3:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:8C:67:B8:A5:F5:E9:A1:77:52:4B:CB:8E:1D:5E:31:45:C9:26
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/g0yMZ7il9emhd1JLy44dXjFFySY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.182.0/23
Signature Algorithm: sha256WithRSAEncryption
40:6b:9a:86:ef:71:40:b8:e7:be:5b:c4:ba:36:cb:60:5a:27:
d3:02:d6:c9:36:c0:39:b2:2c:8d:d4:ef:96:44:8d:62:5f:29:
a4:bb:a4:13:2f:7a:c7:85:f2:06:2c:96:73:ad:90:c5:f9:73:
64:bc:74:ce:78:4f:a7:65:09:32:57:db:1f:39:e5:04:c8:53:
fe:c0:65:f7:74:be:f7:f8:ee:89:71:7a:d7:37:71:b1:80:d0:
94:a4:d3:6f:99:52:10:14:72:a3:b4:4b:cc:c6:d5:e3:3f:54:
5b:24:76:50:83:3e:35:4d:7a:16:bc:a9:2b:77:15:92:d6:d9:
3d:8b:cf:df:a1:bd:66:82:37:62:a2:7e:50:d4:cb:c1:6d:80:
af:cc:c0:83:85:90:1f:c8:eb:37:aa:89:d6:56:7d:95:01:73:
0a:e6:54:5b:65:d0:cb:be:81:60:10:5b:9c:96:61:8f:a0:23:
a0:b2:f4:54:e5:dc:2d:55:b2:04:95:65:8c:89:24:fc:07:c4:
9b:96:2a:69:91:93:93:05:7e:e8:94:79:3a:90:ae:ac:79:0c:
19:6b:ec:bd:bb:2c:c9:ae:1f:51:a6:6b:69:2e:19:f8:b3:9b:
45:64:b8:f9:f5:3c:97:0e:8f:ee:ee:71:91:f2:1f:3f:b4:10:
68:13:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:19:00 2025 by rpki-client