Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/0Gn2XcQjh7tgxpMvF6pM-B0XHgU.roa
File: 0Gn2XcQjh7tgxpMvF6pM-B0XHgU.roa (raw, json)
Hash identifier: OfeP4cA1tr5XpCNjd4WO79hdDK5vJP0jcY38OKDx27c=
Subject key identifier: D0:69:F6:5D:C4:23:87:BB:60:C6:93:2F:17:AA:4C:F8:1D:17:1E:05
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019409346FFAC1DD3599D081FBD441DDF55C
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/0Gn2XcQjh7tgxpMvF6pM-B0XHgU.roa
Signing time: Fri 27 Dec 2024 17:40:18 +0000
ROA not before: Fri 27 Dec 2024 17:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 193.187.134.0/24 maxlen: 24
193.187.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:09:34:6f:fa:c1:dd:35:99:d0:81:fb:d4:41:dd:f5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 27 17:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d069f65dc42387bb60c6932f17aa4cf81d171e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:8b:17:a2:79:a8:67:1b:7f:51:98:ea:82:
c8:0f:5a:d7:52:c0:e0:d9:8e:57:75:8c:df:24:97:
23:f6:46:97:1a:18:43:5a:33:da:6b:61:04:bb:a1:
13:86:ee:6c:4f:c7:06:71:9b:ad:ec:bd:df:a6:42:
43:c3:0d:27:0a:0e:14:b9:f5:9e:e1:c3:11:41:07:
6e:fa:39:16:d6:3d:19:03:fb:0c:28:c4:42:d2:03:
27:9b:62:69:4f:75:21:43:83:21:6d:91:23:51:d9:
bf:f7:5a:03:40:44:e1:b7:e3:6b:45:e5:d6:1e:cb:
b9:96:5a:a7:c4:cb:ac:b9:7d:99:88:7a:e1:63:70:
30:6a:85:25:31:ef:da:14:f2:59:1d:f6:5e:97:b2:
b1:03:5f:3e:d7:b9:37:73:56:b9:1f:d7:e4:a3:af:
79:99:bf:50:d0:66:20:7f:3f:bc:a6:87:07:9d:49:
68:b1:f7:a0:02:8d:19:c7:4b:71:55:b4:ae:e9:3b:
ea:a7:fe:83:01:12:52:ce:0c:13:84:74:73:52:4a:
5a:35:49:bb:9e:13:10:84:7e:df:3e:c1:6c:4e:ce:
5c:50:f4:10:53:60:b7:e3:82:17:b7:f4:6e:6c:f4:
27:eb:c7:ea:a6:34:31:28:00:87:47:db:32:55:38:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:69:F6:5D:C4:23:87:BB:60:C6:93:2F:17:AA:4C:F8:1D:17:1E:05
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/0Gn2XcQjh7tgxpMvF6pM-B0XHgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.134.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:e2:ec:f2:41:e3:36:8b:6f:29:49:81:84:92:c2:a6:9e:db:
75:1c:d2:62:98:f3:22:4f:2f:8d:43:eb:1c:2e:3b:d0:a4:73:
bb:ff:a1:e0:c3:22:ea:98:bb:23:26:5e:0a:ed:c4:ba:c8:f4:
6d:e7:97:49:50:21:6f:e1:dd:0c:2d:36:07:30:e2:18:ce:31:
17:39:4c:83:e8:4d:ea:8f:a3:cc:27:c6:ca:23:59:b2:4e:c5:
d0:9b:5f:4d:29:ff:a0:29:31:71:31:64:17:33:a7:61:fa:56:
31:77:10:27:46:6b:f1:29:0f:49:9b:ee:41:8c:c3:57:e6:12:
b5:8e:e5:b6:d9:51:40:ca:18:0b:61:5c:bb:45:f5:3f:d9:f2:
4c:76:bd:7e:67:15:6a:6f:6f:93:89:1f:6c:35:f9:d9:33:b8:
14:f3:0d:31:07:0e:1d:a1:6a:94:46:c9:8f:58:1e:10:18:a0:
d6:1c:70:2a:02:d7:14:6d:3d:46:7b:59:52:41:f5:23:55:9d:
26:ad:ab:bc:16:40:8e:68:56:43:65:cc:dc:1c:ea:37:2e:2c:
ba:38:67:fb:6e:c5:3a:bc:62:cc:16:6b:25:18:40:62:80:3b:
0c:7e:8a:3b:7b:7a:66:79:37:37:e1:a0:01:62:c1:5f:2c:42:
1b:64:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:38:38 2025 by rpki-client