Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/pV6U6t20LPmoE06QzHTKIt1mCdk.roa
File: pV6U6t20LPmoE06QzHTKIt1mCdk.roa (raw, json)
Hash identifier: 4w6WEHf882+u2XxLJjz6oTPtOsIJ8lQmZFWVpNl8GG0=
Subject key identifier: A5:5E:94:EA:DD:B4:2C:F9:A8:13:4E:90:CC:74:CA:22:DD:66:09:D9
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 019424B389926E898F80687CF73030F924B3
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/pV6U6t20LPmoE06QzHTKIt1mCdk.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12808
IP address blocks: 193.242.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:89:92:6e:89:8f:80:68:7c:f7:30:30:f9:24:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a55e94eaddb42cf9a8134e90cc74ca22dd6609d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:17:55:4f:07:77:f3:e9:35:ca:11:ac:e4:b5:
e6:b5:ab:af:d2:33:02:bc:5e:98:a2:e8:b4:c3:af:
34:2c:b7:c5:4e:a8:55:a2:05:16:e1:24:fe:1b:da:
87:22:f1:51:64:7d:16:74:c4:fd:a0:72:25:28:00:
76:82:b8:87:6d:f0:6a:ad:86:65:48:92:99:46:1c:
0c:b0:cf:83:c8:f8:ad:6f:68:bf:6f:ea:b4:4f:da:
63:00:93:94:22:dd:2d:ab:aa:89:a5:fe:4c:9b:a6:
fe:1d:69:be:62:cb:73:8f:8e:04:4a:d8:de:b8:d7:
9f:b8:a6:5e:1a:76:50:d1:2b:67:cd:c5:b7:b7:fa:
16:4c:8a:04:dd:db:a7:4a:d3:f4:f0:5a:db:ef:5b:
4d:8e:4f:2f:96:63:33:d3:b2:fe:c1:9c:4c:ba:e4:
95:4d:f2:80:9c:2d:d3:17:db:1b:25:53:dd:0c:e1:
85:8b:67:f1:2c:8c:ac:6a:6b:ba:18:cf:7b:0d:c0:
8f:59:90:02:91:70:92:44:b1:a0:73:b8:f2:6f:21:
8d:9d:f1:33:d3:bf:f8:54:20:17:a1:07:b0:2c:23:
f4:f4:6d:3c:89:08:f0:50:80:ec:c7:8a:3f:ee:d3:
63:1e:76:15:e3:28:67:10:53:fb:32:c8:d7:2e:1f:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:94:EA:DD:B4:2C:F9:A8:13:4E:90:CC:74:CA:22:DD:66:09:D9
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/pV6U6t20LPmoE06QzHTKIt1mCdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.123.0/24
Signature Algorithm: sha256WithRSAEncryption
80:02:4d:ca:0c:81:d3:fb:a3:12:40:b5:62:78:5f:d8:16:30:
46:4a:2c:09:6a:02:72:86:e5:98:14:b3:09:d5:1c:3a:e2:00:
59:14:49:3d:dd:de:06:b4:d3:01:41:d7:b3:0b:17:c8:3a:12:
6f:8b:36:a2:76:c4:67:99:f3:29:e7:39:77:4d:d5:34:68:f6:
b0:0e:84:01:53:67:5f:e4:cd:44:da:2d:84:33:4b:d2:44:1f:
3a:74:73:8b:aa:7d:97:38:8a:d4:31:5f:fe:9f:20:bc:12:db:
4e:cc:e8:05:ea:6c:28:a7:9b:df:7d:86:e3:9a:8d:12:23:32:
d7:97:a1:90:4f:b6:43:8d:b4:37:9f:e9:44:ae:d2:51:dd:da:
43:c2:5d:0d:96:1d:a0:4c:d2:c6:e7:85:f8:f1:a9:4b:cb:66:
c7:d5:b5:05:77:c9:64:36:2b:ee:7f:70:c8:3b:d6:19:e9:55:
51:fa:f6:0a:a3:59:79:8c:c2:77:c4:b6:1a:e4:21:e5:c6:1c:
9b:e3:d3:86:91:27:e6:ab:7e:73:dd:48:01:1b:5d:49:73:c7:
9e:88:aa:d3:3f:2a:ee:68:fa:4f:76:02:2a:11:6c:08:5f:49:
da:8d:39:9c:19:52:51:c7:1b:54:19:6a:b0:4a:b0:c2:6c:f1:
8a:a8:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:14 2025 by rpki-client