Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/9PyDwM7vTqQy0OxY5Gwbjp0HxrM.roa
File: 9PyDwM7vTqQy0OxY5Gwbjp0HxrM.roa (raw, json)
Hash identifier: YuDd5mLvC8E5yA1GNXrQKhm8Pn3V90qmEkNVSDPHprI=
Subject key identifier: F4:FC:83:C0:CE:EF:4E:A4:32:D0:EC:58:E4:6C:1B:8E:9D:07:C6:B3
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0188E72D76126BF6452C5269E1256D61D5FD
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/9PyDwM7vTqQy0OxY5Gwbjp0HxrM.roa
Signing time: Fri 23 Jun 2023 07:34:56 +0000
ROA not before: Fri 23 Jun 2023 07:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.209.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:2d:76:12:6b:f6:45:2c:52:69:e1:25:6d:61:d5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 23 07:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4fc83c0ceef4ea432d0ec58e46c1b8e9d07c6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:fa:2a:78:b3:c2:99:dd:9e:26:17:d9:e5:
b5:41:19:78:50:09:dc:e8:7c:0f:c1:b4:0a:e1:ea:
c3:a0:3a:9a:ca:f2:ea:bd:32:92:37:de:36:63:c0:
7d:b0:ff:ef:b4:20:cb:97:5c:cd:54:bf:c9:51:09:
65:55:17:e1:d8:2c:66:49:42:62:e7:a0:3f:e9:20:
78:a8:b3:17:41:5b:06:b9:ff:b2:1a:c6:0f:fa:72:
d5:bb:07:48:95:17:46:6c:2c:6e:fb:a0:bc:67:58:
55:b0:dc:96:8f:18:5e:68:d7:6e:6f:9b:22:5d:71:
b7:c2:61:77:9e:a6:2f:11:b2:d9:fb:de:0a:c4:4e:
24:3a:5e:df:35:f5:13:14:93:eb:12:1a:b1:e5:28:
14:47:b8:61:fc:8b:5c:2a:80:bd:45:26:31:86:40:
a0:f9:1b:02:9b:a4:46:d8:b9:6f:6f:3a:07:ab:4c:
df:15:91:0f:b0:b9:c9:25:e8:e7:14:c5:95:2e:12:
a6:1c:30:56:59:0e:02:7c:78:0e:4d:f9:e4:36:6c:
c9:53:e1:12:23:0e:e5:a6:67:7b:b9:25:bb:e4:e9:
fd:58:12:98:06:2b:55:d1:50:c6:53:96:f7:ac:94:
ec:6a:00:13:93:9a:6d:f3:22:a5:e1:21:83:3a:08:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:83:C0:CE:EF:4E:A4:32:D0:EC:58:E4:6C:1B:8E:9D:07:C6:B3
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/9PyDwM7vTqQy0OxY5Gwbjp0HxrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
59:8a:34:58:35:09:38:62:df:52:5a:ad:7f:b1:d6:5a:16:83:
e2:01:2a:15:5e:ea:bc:3d:22:0a:c7:eb:2d:91:3c:eb:64:55:
0d:95:81:84:0d:4b:09:54:db:68:53:43:b6:29:bb:71:59:69:
98:d5:bc:20:f5:4d:d7:d3:76:c8:04:1d:bd:ea:06:58:c7:b6:
95:55:c6:67:eb:6a:4b:40:fc:ab:c7:37:d8:8c:08:f5:5d:b5:
3f:1b:9a:92:c4:5d:04:2e:f2:d3:35:4e:3d:42:0a:04:a8:07:
6e:9a:6d:56:ac:90:c4:f8:31:52:48:c9:3f:d4:80:fa:03:12:
fd:d8:4d:a3:63:3f:43:9b:5d:b8:b3:28:ee:80:6b:02:01:3a:
56:35:7a:7e:fc:66:ce:c5:13:ca:6f:eb:25:29:58:61:02:57:
bd:4b:85:7c:31:db:54:e6:56:3a:3b:33:2f:f6:92:f1:ee:93:
16:4a:32:96:49:ee:ed:26:89:22:52:cc:ad:9f:d0:b6:95:26:
d8:7b:24:24:f9:88:bc:8d:74:90:d1:9a:a2:03:95:3f:60:3a:
8f:12:60:1f:1a:e0:15:9a:ee:f5:e9:b0:11:89:59:2a:8c:ce:
9f:2a:a5:b4:dc:a1:eb:93:2b:9e:44:bb:9e:c2:ce:04:7f:39:
cf:3b:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:57:04 2025 by rpki-client