Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/h8JOFdoRpj6qGDNJuivBHNvrSRk.roa
File: h8JOFdoRpj6qGDNJuivBHNvrSRk.roa (raw, json)
Hash identifier: Vj2EQ4BWrvbCavVD4y/JlI7mb4cVKOnw+wqYqtWQ88Y=
Subject key identifier: 87:C2:4E:15:DA:11:A6:3E:AA:18:33:49:BA:2B:C1:1C:DB:EB:49:19
Certificate issuer: /CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Certificate serial: 019423699D2197E7ACCF6E39D31367539637
Authority key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/h8JOFdoRpj6qGDNJuivBHNvrSRk.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 193.27.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9d:21:97:e7:ac:cf:6e:39:d3:13:67:53:96:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87c24e15da11a63eaa183349ba2bc11cdbeb4919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:f3:12:24:64:e4:ed:ea:a3:19:3b:40:01:
e0:d1:23:c4:61:31:f5:80:7c:32:2d:78:e1:bb:cf:
54:34:33:1f:15:30:20:4f:00:0a:96:eb:c1:7b:cf:
69:78:47:3a:60:f5:ed:67:1d:39:0b:1e:af:d9:9b:
29:a4:d7:b7:17:bb:c2:6b:54:a7:dc:1a:ae:54:6d:
04:1d:f0:77:7e:76:8a:43:82:b9:82:a7:a9:67:b1:
eb:67:b5:e5:71:63:5c:c1:a2:4a:f6:b4:3b:af:88:
96:ad:2c:4b:5a:0c:dc:ee:78:a7:96:4e:90:1f:d5:
f2:70:3e:f4:91:4f:69:e4:7b:e5:ae:22:42:5a:50:
93:6e:bd:71:b7:eb:c2:83:0f:91:3a:f7:5e:cc:fe:
29:ec:48:79:fe:61:94:ef:61:6d:36:fb:7a:ff:d4:
27:28:4b:b8:8b:20:2e:54:99:b3:69:aa:65:fb:37:
b3:d1:b0:9d:bf:97:c2:72:35:d1:6c:a8:b4:81:81:
91:c2:09:6c:a8:f7:61:4f:24:59:ec:d9:0b:b1:f1:
f5:8f:ce:dd:27:05:7f:f1:11:f9:c0:24:55:9e:7a:
d3:8d:97:ab:9a:91:d3:fe:06:17:7f:da:a7:e6:27:
76:f2:10:ca:c0:ec:af:09:40:60:20:25:69:bf:72:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:4E:15:DA:11:A6:3E:AA:18:33:49:BA:2B:C1:1C:DB:EB:49:19
X509v3 Authority Key Identifier:
keyid:81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/h8JOFdoRpj6qGDNJuivBHNvrSRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:df:78:40:b2:b7:1d:c7:4b:f6:b1:bb:34:66:a6:05:3c:56:
ae:53:a6:90:3b:25:1f:a9:9c:83:8d:93:84:27:63:5a:80:71:
21:58:07:ab:87:83:1d:87:11:9b:fd:1f:05:86:74:9e:39:f3:
89:14:2b:c7:31:a6:56:07:17:3b:42:a0:29:59:81:57:66:c6:
5e:22:1c:77:51:ed:22:71:c9:94:c2:56:15:ff:ac:59:1e:47:
35:eb:cc:bb:f9:d2:ec:76:31:16:5d:0e:32:dc:fa:13:7f:b7:
e8:82:23:4a:0f:b1:57:cb:80:e7:73:de:f2:fc:0d:8b:d0:a3:
37:54:44:d4:aa:a3:50:09:44:be:cb:e4:6c:36:86:17:91:47:
51:d3:03:92:f0:cf:7b:61:7a:ba:0d:ba:f8:b1:cf:ac:b6:83:
51:05:5c:d4:ba:12:22:01:46:d3:56:67:05:94:0b:73:b7:7a:
87:a5:fe:a9:b9:8b:28:fe:48:86:1b:da:5b:1a:04:ca:75:c6:
50:8b:a8:e5:5b:f4:ac:db:e7:39:0c:54:fc:f6:97:89:01:c0:
81:d9:39:95:a9:3e:38:f9:48:d4:dc:1a:c0:db:65:81:89:2c:
29:c8:fc:05:c7:24:65:6e:db:c7:68:19:50:b1:06:74:f6:d7:
9f:67:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:42 2025 by rpki-client