Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9dG9caoBjuSv3RrW4x1OCWVldc0.roa
File: 9dG9caoBjuSv3RrW4x1OCWVldc0.roa (raw, json)
Hash identifier: FIEgC8EeRVsmQ93D+FsutLjtYTne41ZL9Fo3iwfFxxE=
Subject key identifier: F5:D1:BD:71:AA:01:8E:E4:AF:DD:1A:D6:E3:1D:4E:09:65:65:75:CD
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018291DEEBEF6FF8C48032EEA1648839D357
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9dG9caoBjuSv3RrW4x1OCWVldc0.roa
Signing time: Fri 12 Aug 2022 11:44:41 +0000
ROA not before: Fri 12 Aug 2022 11:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43431
IP address blocks: 193.29.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:de:eb:ef:6f:f8:c4:80:32:ee:a1:64:88:39:d3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 12 11:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5d1bd71aa018ee4afdd1ad6e31d4e09656575cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:51:db:c7:43:7d:c9:0d:2a:62:1e:22:67:
32:75:57:31:39:87:cd:dc:61:09:ad:3c:89:e5:a0:
c3:b5:76:44:eb:95:8e:be:90:6c:ed:af:10:83:43:
d0:33:5f:ed:7a:ef:96:2a:22:af:a8:b2:0a:a6:89:
e7:ab:8b:01:9c:3e:f7:27:e6:55:7c:f0:d2:a7:79:
cd:1f:b4:29:90:9f:78:e8:15:bc:c7:6b:32:ac:4a:
b8:19:7b:c5:27:a5:88:22:ec:2e:3e:27:74:84:13:
2e:12:1c:5a:59:21:6b:bf:ea:d0:da:ac:e4:73:f8:
e6:6e:3d:4a:ee:96:ca:f9:34:b1:f4:00:b2:d6:f7:
d2:de:a1:2c:4a:f1:4b:b1:6e:7c:ac:84:a1:db:d2:
65:3f:bd:9a:5c:be:a1:c4:f9:b1:59:ea:be:54:95:
ee:d6:99:11:a2:5d:e0:a1:f7:6b:95:40:6c:b8:0f:
9b:2b:2b:b0:de:e5:4c:94:8b:5c:bc:c6:77:e4:04:
bf:3a:f7:6d:54:a2:3c:57:21:a3:70:a9:76:37:9a:
ba:31:03:b1:bf:b8:f3:92:2e:10:67:9b:0c:c1:93:
b8:54:b9:0c:3f:f8:3e:84:a5:42:23:56:eb:24:cc:
99:c9:e4:fa:31:d7:b8:56:a6:4c:ba:81:bd:95:27:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D1:BD:71:AA:01:8E:E4:AF:DD:1A:D6:E3:1D:4E:09:65:65:75:CD
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9dG9caoBjuSv3RrW4x1OCWVldc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.96.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f7:64:58:6b:de:ce:b9:5f:6e:ab:91:88:3c:a5:7e:2f:dc:
bb:29:25:dd:1f:4b:1e:2c:10:0d:ee:5a:77:8c:46:9b:aa:6b:
a6:60:d7:4d:b5:a8:b5:87:0e:e6:bd:61:ae:43:8e:ec:f5:52:
8d:61:36:e1:a1:34:8f:4f:cd:13:94:e3:26:4f:e6:2e:0b:1d:
3b:9b:d5:72:79:5a:d0:9b:0d:5f:89:93:ab:da:a6:f1:91:e9:
7a:1c:b8:0b:37:a8:92:08:21:dd:80:d1:6c:32:9b:8d:5b:99:
c6:7f:65:00:11:60:a1:d0:69:a6:61:fa:63:33:3b:8e:e1:7b:
3f:e2:73:26:b2:0f:16:66:4e:9c:76:e9:d1:6e:0c:cd:b8:69:
d8:44:1c:f1:cf:da:d8:ca:92:4b:2d:77:25:82:01:61:69:19:
98:c2:9f:2e:fc:8c:6b:a6:72:8e:a6:7a:ab:71:57:97:82:f5:
83:bd:d5:c2:e5:56:2e:74:fc:43:09:0d:13:79:3b:63:4d:91:
2e:76:8e:43:31:aa:1e:02:1d:c0:74:de:53:03:4e:e1:e0:ad:
16:a0:28:67:c4:69:08:c8:0c:9e:53:62:34:22:73:31:e7:d7:
ac:11:0c:0d:cb:bd:61:0e:ff:54:d6:d9:e7:7b:c0:fc:1a:8c:
d8:19:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:51 2025 by rpki-client