Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/nbO8mLJoP1deh_pYPoYMxTo0jPA.roa
File: nbO8mLJoP1deh_pYPoYMxTo0jPA.roa (raw, json)
Hash identifier: IVg0E6KnXDQrobgGNDRR0Hrh/jAaCGmevj3qGsTngXw=
Subject key identifier: 9D:B3:BC:98:B2:68:3F:57:5E:87:FA:58:3E:86:0C:C5:3A:34:8C:F0
Certificate issuer: /CN=1a3bfeb521f66e57248326cfff55becefddd0fcd
Certificate serial: 01856F7974593646C504EF383F22A161C79C
Authority key identifier: 1A:3B:FE:B5:21:F6:6E:57:24:83:26:CF:FF:55:BE:CE:FD:DD:0F:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjv-tSH2blckgybP_1W-zv3dD80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/nbO8mLJoP1deh_pYPoYMxTo0jPA.roa
Signing time: Sun 01 Jan 2023 22:35:08 +0000
ROA not before: Sun 01 Jan 2023 22:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24843
IP address blocks: 193.8.206.0/24 maxlen: 24
193.8.206.0/23 maxlen: 23
193.8.220.0/23 maxlen: 23
193.8.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:74:59:36:46:c5:04:ef:38:3f:22:a1:61:c7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3bfeb521f66e57248326cfff55becefddd0fcd
Validity
Not Before: Jan 1 22:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db3bc98b2683f575e87fa583e860cc53a348cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:e6:c5:29:f2:34:59:ee:8b:fb:88:b0:a2:
92:00:b1:0a:07:94:0b:20:56:46:5c:cd:13:98:3f:
f4:ea:35:2e:23:ce:33:f6:ff:e9:ed:22:55:3c:58:
a3:c5:9f:69:bb:b7:d1:38:66:4e:e4:5d:2c:37:f3:
7f:a9:50:e6:55:18:4d:bd:13:cc:83:ec:7d:77:f2:
fb:b6:7c:a3:fb:0d:25:07:b6:97:88:cd:4d:bb:d0:
4b:23:d7:0b:e2:62:68:bd:1d:65:3d:3e:74:1f:fa:
03:2a:4d:04:61:7b:21:9a:3f:77:e6:5e:1a:79:c3:
82:9e:2e:1b:71:68:2d:dc:5f:d5:5e:73:dc:40:bc:
c0:6e:71:00:67:1a:b0:11:df:b7:5c:58:a9:3b:64:
15:ff:c2:d7:09:0b:ac:b3:d3:00:01:29:06:90:b5:
9c:d6:af:46:bf:6d:32:4c:91:34:6c:ab:11:af:41:
83:bf:33:7a:6e:c8:28:0d:83:9f:22:d9:c5:f8:1d:
ab:fb:ac:53:d7:da:0b:51:65:10:aa:4a:d8:d8:27:
0b:d1:45:65:d2:00:4d:f7:82:6b:81:eb:d3:33:32:
d2:4e:ca:ea:c1:72:b3:c7:16:6a:a3:b0:34:93:b4:
7b:ff:86:c7:0b:84:ac:8e:53:42:b2:c6:dd:d4:a1:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:BC:98:B2:68:3F:57:5E:87:FA:58:3E:86:0C:C5:3A:34:8C:F0
X509v3 Authority Key Identifier:
keyid:1A:3B:FE:B5:21:F6:6E:57:24:83:26:CF:FF:55:BE:CE:FD:DD:0F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjv-tSH2blckgybP_1W-zv3dD80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/nbO8mLJoP1deh_pYPoYMxTo0jPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/Gjv-tSH2blckgybP_1W-zv3dD80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.206.0/23
193.8.220.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:b9:31:34:83:48:e0:90:86:66:48:a2:de:fb:5b:92:47:c0:
30:39:61:4b:93:4a:56:01:72:e5:f5:f7:d3:aa:04:b7:61:20:
8c:e1:5d:af:d3:84:a5:eb:da:f8:14:51:8f:df:87:60:59:d5:
bb:0a:cd:9c:58:cf:5a:ee:86:ff:03:6c:d6:3a:91:0c:1b:db:
8e:46:02:75:9e:25:12:9d:91:91:7b:17:0a:7c:ab:ed:b2:93:
29:77:6f:0b:7d:ee:7d:40:b8:60:3a:19:83:4e:07:db:ab:b9:
f4:a8:ae:ea:b9:07:6a:1a:e4:da:db:ca:d8:00:32:7a:73:ba:
ff:2e:b0:21:a9:6a:a0:bd:be:73:0b:98:f4:cf:9e:b7:6b:b1:
e6:66:ae:e9:40:28:49:5f:eb:e8:3f:b1:42:62:cb:46:11:d7:
37:24:1a:a5:07:4c:c7:ee:34:60:b8:7f:2b:f3:e9:14:46:75:
d4:d0:9a:c4:d4:9f:e5:f2:07:8a:6a:bd:8c:37:b8:96:ba:70:
09:bb:50:0a:1d:94:2e:68:3f:e2:de:ef:57:92:fc:9f:26:2a:
3f:1c:c2:ef:29:f0:29:26:e2:de:69:78:be:a4:89:2c:a9:92:
85:8f:53:52:3e:2a:96:b2:57:05:90:05:2d:3d:0a:66:5f:ae:
28:f9:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:01 2025 by rpki-client