Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/9QnDkxV0-5vbum3ReIObVEkcGRE.roa
File: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (raw, json)
Hash identifier: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=
Subject key identifier: F5:09:C3:93:15:74:FB:9B:DB:BA:6D:D1:78:83:9B:54:49:1C:19:11
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019420683C58C40DF29B0AD44B47A58AB71D
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/9QnDkxV0-5vbum3ReIObVEkcGRE.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207400
IP address blocks: 193.29.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3c:58:c4:0d:f2:9b:0a:d4:4b:47:a5:8a:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f509c3931574fb9bdbba6dd178839b54491c1911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:24:19:75:6b:74:d5:63:21:07:ac:11:62:
ca:9e:85:85:97:b1:54:82:90:ce:45:91:7f:88:0a:
2a:d5:c7:05:93:d7:a0:50:17:73:25:16:e1:e7:af:
5a:62:9d:22:76:8d:d3:15:3e:4d:d1:2c:7b:22:9d:
b1:9d:54:98:dd:ae:86:4e:8c:b7:c5:4e:06:77:17:
e6:67:1e:15:c9:42:75:7f:c3:c6:69:53:40:2b:b4:
24:59:98:f2:72:29:72:32:2b:3c:63:b2:14:f4:52:
03:9d:48:f4:39:37:8e:1c:d4:72:e4:cf:88:d0:42:
c9:94:cb:71:ee:47:54:e7:6a:17:c7:91:8f:59:0d:
fb:91:eb:74:46:d0:b1:79:14:24:b4:ed:24:a3:27:
91:fd:50:ae:0b:19:9a:b1:0c:39:f1:62:e7:4f:29:
71:4d:1f:6c:d0:f2:46:93:c4:5d:ac:01:71:db:85:
7d:b2:2d:e5:f2:e4:ea:4d:08:e8:d2:54:a0:e0:c6:
34:01:3a:09:42:59:e0:3d:c3:46:b9:7c:9e:a0:f9:
24:5b:70:7b:76:90:68:3a:24:d4:cb:34:09:af:f4:
83:b0:1c:96:6b:c0:f9:e5:6b:ca:97:6d:94:5e:b9:
de:fa:c8:1c:9c:d6:ae:bf:94:27:71:70:98:88:60:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:09:C3:93:15:74:FB:9B:DB:BA:6D:D1:78:83:9B:54:49:1C:19:11
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/9QnDkxV0-5vbum3ReIObVEkcGRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.226.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f3:7f:2e:7b:0d:34:01:17:95:48:52:09:80:a2:9c:18:49:
5e:f7:cb:ce:d4:cf:4f:fd:4a:51:14:9a:3f:55:85:40:7f:b0:
53:b1:51:04:53:1a:06:2e:e0:e2:e8:2d:b1:a1:9b:36:05:20:
78:e8:cd:22:f7:e3:80:e5:2d:f4:94:d5:7d:31:a2:94:b9:6a:
e1:47:ff:6b:19:c6:67:12:de:7c:41:2b:14:34:73:29:00:5d:
4b:26:83:8f:5d:72:9f:df:2d:05:79:5a:6b:39:1d:54:24:c1:
14:8a:b0:b5:f4:ba:c8:19:fd:a1:4a:71:50:f0:34:da:eb:a9:
c5:dd:25:65:10:e9:6f:95:ae:61:28:c8:de:a8:14:2a:75:ba:
f7:79:f2:84:bd:33:2c:32:5b:2b:e9:0d:ef:b4:ba:72:f7:5c:
46:3f:dd:a9:97:27:1f:65:63:da:82:a1:96:c9:e5:28:cb:47:
b6:9d:50:48:c6:61:9a:fa:0a:25:dc:cf:8b:66:d7:da:23:16:
56:66:82:c5:b8:40:68:11:3f:38:93:de:52:36:48:97:f0:35:
7b:76:02:1b:03:64:e2:3a:ee:55:65:b7:b1:67:1d:cc:5d:aa:
6a:5b:70:ae:13:c9:e2:dc:4c:32:b4:00:24:99:e7:7a:06:68:
3f:6a:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:23 2025 by rpki-client