Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/J98Ier5tOmD40cVboxwiMrR7TqM.roa
File: J98Ier5tOmD40cVboxwiMrR7TqM.roa (raw, json)
Hash identifier: AgPK8t5eSfO/1ogoAho/l4IjWjLYkYNTd1EFqRx0nGs=
Subject key identifier: 27:DF:08:7A:BE:6D:3A:60:F8:D1:C5:5B:A3:1C:22:32:B4:7B:4E:A3
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068530ACB14AC9040BC2EBD979902B8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/J98Ier5tOmD40cVboxwiMrR7TqM.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207447
IP address blocks: 193.233.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:0a:cb:14:ac:90:40:bc:2e:bd:97:99:02:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27df087abe6d3a60f8d1c55ba31c2232b47b4ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:58:98:f1:26:97:03:8e:4c:19:92:66:37:
76:4e:84:3e:f7:b8:20:6b:95:cf:a7:81:ed:7d:bd:
6a:8a:2b:15:b2:cb:68:95:28:18:45:31:86:1e:27:
8d:ae:8a:db:39:25:59:16:fb:cd:da:72:62:f1:5f:
ba:66:bd:31:26:5d:a4:a7:d6:b0:fd:c3:d4:91:e1:
50:89:c1:c7:f1:22:c1:8d:38:f0:d6:01:c1:2d:ea:
e9:6a:33:b9:f8:f0:41:fb:91:78:d8:59:c7:99:69:
74:31:0b:21:c9:5d:30:e8:9e:59:13:15:b1:a6:92:
88:11:f4:c1:ef:f8:bb:cc:c8:51:1f:65:7b:09:eb:
78:e5:2c:53:65:fd:b6:06:54:8a:e6:29:76:2b:a0:
b9:a6:2a:02:8d:6f:d0:ec:ff:6b:0d:1f:ad:42:3e:
96:f7:fc:37:61:df:85:6b:45:4c:94:c7:0d:a1:22:
32:1b:a3:a9:5c:e0:31:c4:52:3b:ad:a7:1c:a6:6e:
39:a8:80:70:fc:51:09:96:07:c1:db:ed:6b:7e:4f:
23:d8:c3:20:e0:a2:f5:b8:63:fb:5b:f3:80:a9:dd:
2c:8c:41:16:0e:40:65:53:08:d5:0a:99:dc:3c:48:
d1:41:47:b7:e8:96:79:a0:f6:a2:72:87:4e:cc:71:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DF:08:7A:BE:6D:3A:60:F8:D1:C5:5B:A3:1C:22:32:B4:7B:4E:A3
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/J98Ier5tOmD40cVboxwiMrR7TqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:d1:67:89:1b:15:02:9c:59:bf:65:6c:49:da:be:00:7b:13:
7c:04:0e:bf:19:c0:d9:ce:07:85:10:00:b2:8a:e2:32:f2:16:
9a:35:7f:ff:6d:cb:5f:ed:b6:1e:6e:52:b8:67:5a:09:b3:55:
30:e2:22:fc:ef:56:20:81:9d:00:1a:85:12:32:e5:c0:e6:8b:
c9:76:37:11:2d:9b:72:b2:22:54:c8:23:44:99:35:1d:05:d8:
67:73:f2:19:92:f6:ed:d2:de:77:70:b8:8a:9d:0a:46:ac:d2:
41:f7:23:94:23:06:c8:20:6b:0e:5f:bb:ae:61:42:31:69:90:
9b:07:4c:72:c1:30:78:50:80:54:95:26:a0:e2:a8:c1:b7:fa:
19:18:6e:73:30:dc:f2:9f:6c:9a:bc:cc:c6:b1:e5:a2:53:03:
f9:9e:66:bd:6f:b9:bd:f4:62:ac:a4:63:56:73:27:e9:84:71:
74:ad:5e:88:61:98:67:fa:ba:5f:66:96:3e:35:6f:75:bb:ca:
11:bb:4a:c5:3a:e2:58:44:b2:91:0b:d5:f2:df:de:77:d2:43:
1e:8f:05:26:cc:15:71:4b:e7:43:69:55:4c:bf:9c:35:5e:46:
88:a5:35:8a:ad:c0:1b:56:fd:dd:01:d4:07:66:f5:25:20:8b:
f9:e0:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:02:08 2025 by rpki-client