Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa
File: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (raw, json)
Hash identifier: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=
Subject key identifier: 83:08:FD:3F:C6:6E:11:13:3E:48:24:F3:8C:8A:06:7E:7D:11:96:7D
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019427B3B9F5C8BF43EE7F917AE0F50411FB
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa
Signing time: Thu 02 Jan 2025 15:47:57 +0000
ROA not before: Thu 02 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 193.108.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:b9:f5:c8:bf:43:ee:7f:91:7a:e0:f5:04:11:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jan 2 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8308fd3fc66e11133e4824f38c8a067e7d11967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:ff:e1:fa:ad:68:ce:d8:98:fe:a8:b9:36:
9c:dc:ba:42:0e:53:48:fa:f9:31:17:b9:8c:7d:ce:
26:82:92:b1:f4:20:2c:3d:22:11:18:c7:d6:56:56:
b8:b6:b3:93:8e:00:3a:83:19:3e:05:9e:16:3a:3d:
bf:04:03:49:ea:42:87:da:a9:85:9a:0a:8f:ee:5f:
a4:82:39:09:4f:c7:94:11:48:7d:87:3b:e2:39:7a:
de:e0:e2:97:8e:73:fc:12:40:fb:36:28:67:ac:a8:
af:2c:54:c2:45:36:bd:ec:cc:e0:bb:f3:8e:64:7d:
19:b4:57:45:64:b7:eb:71:72:80:11:f1:fa:34:82:
a2:3b:fd:13:56:05:70:ad:11:14:11:1f:a7:92:e2:
5c:36:74:8c:3e:96:00:cc:b8:4d:4f:71:d4:9d:eb:
9d:ec:b4:ec:0c:85:ac:5b:d2:81:7a:5f:33:d9:2a:
a8:48:b5:11:34:90:7a:47:19:04:f5:d0:54:93:25:
3f:6f:12:48:00:a8:c0:5e:6b:c8:82:8a:7c:10:97:
80:01:77:c8:1a:03:a6:7a:6d:37:b1:db:ae:b5:56:
65:90:e0:b2:fb:c5:ee:cb:4d:55:1f:ba:59:6a:79:
68:f6:f3:4f:c8:c6:74:78:9f:b2:5c:8e:fa:11:88:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:08:FD:3F:C6:6E:11:13:3E:48:24:F3:8C:8A:06:7E:7D:11:96:7D
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.136.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:a8:ae:93:b2:6c:3d:b2:27:96:13:2f:cb:f5:17:b0:f9:04:
b3:ab:27:17:df:ea:04:fb:d3:b3:d4:2e:06:cf:0d:3a:9f:8c:
81:89:f2:e1:80:2c:e3:4d:c2:26:96:2a:37:d0:27:ca:13:8c:
a8:d3:fd:0c:3a:0f:42:5b:3a:97:25:5e:4c:15:54:17:77:26:
78:e4:62:4d:33:ef:42:9e:b4:73:4b:cb:a0:62:fb:de:1d:92:
10:5d:14:58:fa:8a:d1:1a:86:ee:95:0e:5a:4f:c5:03:ea:b2:
4a:04:15:e2:4e:9c:63:a0:1e:b5:a5:1b:1c:61:c3:74:b0:02:
fc:bd:cd:45:92:65:56:fb:de:b0:4d:cf:1c:93:16:1b:26:04:
ba:1c:ee:e0:81:39:18:05:6e:ec:1f:65:ba:19:35:46:0e:35:
8d:8d:a1:8f:ff:22:58:b8:47:4a:a6:fa:6c:cf:bb:72:2f:08:
6b:00:b7:bc:98:67:56:e6:56:04:f4:e3:5e:f6:ef:41:d6:b5:
b2:47:a0:e9:fd:39:b8:a7:e3:dc:21:09:df:48:2b:33:a6:bc:
12:59:f0:a3:10:b6:88:b4:bb:e1:b7:30:e6:74:4d:45:42:d4:
20:53:8c:dd:30:67:82:1b:4f:31:c9:a2:e4:e4:17:e9:0a:71:
56:53:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:59:44 2025 by rpki-client