Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/V_-x2aKLhcS9MSFMdV5XhJN6ZSU.roa
File: V_-x2aKLhcS9MSFMdV5XhJN6ZSU.roa (raw, json)
Hash identifier: kaukggR9QYWen6wtzdufLeYU4xhRtyEwDFibiTPVNFo=
Subject key identifier: 57:FF:B1:D9:A2:8B:85:C4:BD:31:21:4C:75:5E:57:84:93:7A:65:25
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018C343A8D8540B905DB1068F88B194EE58E
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/V_-x2aKLhcS9MSFMdV5XhJN6ZSU.roa
Signing time: Mon 04 Dec 2023 09:48:21 +0000
ROA not before: Mon 04 Dec 2023 09:48:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42366
IP address blocks: 193.9.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:3a:8d:85:40:b9:05:db:10:68:f8:8b:19:4e:e5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Dec 4 09:48:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57ffb1d9a28b85c4bd31214c755e5784937a6525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:a4:f9:2e:68:c6:45:c8:40:34:12:1c:db:
d4:36:04:dc:f4:8a:1b:56:86:95:93:8b:e9:d1:f8:
73:22:18:c8:ac:5c:8c:f8:04:c7:f7:ba:61:73:98:
d2:37:d5:2b:58:f3:87:5b:4a:a4:7f:58:f4:8b:02:
b6:a9:62:29:47:60:cf:5a:c0:3f:f4:7c:fc:23:aa:
b6:e6:88:5b:26:bd:8c:ac:f9:67:1b:40:1c:38:82:
a4:5d:dd:71:c9:78:a5:07:bf:79:ff:1d:7e:75:ee:
bb:34:6b:60:02:39:5e:e1:ef:c6:c0:94:4b:2b:d7:
05:23:fc:2e:08:01:90:9b:ed:fb:ac:74:37:67:0b:
bd:c5:3d:48:4f:03:3c:19:35:77:4b:cf:bb:68:05:
f0:b1:96:45:98:62:93:52:14:cf:3a:c4:dd:fa:65:
76:d5:40:6f:fa:6e:42:47:07:fe:f5:9b:02:9b:1a:
8b:a8:77:d6:9b:7c:ae:d5:4b:b2:a6:27:03:f5:5e:
3a:a3:88:8a:65:41:05:c1:9f:33:16:8f:60:03:b9:
88:dc:d1:e6:4a:fc:66:8c:7c:d4:b3:fd:64:0d:95:
54:82:bc:fe:d1:62:19:51:d4:84:b1:3c:5f:88:63:
af:e1:e6:26:9d:48:d5:2c:90:b6:08:91:7e:04:d3:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FF:B1:D9:A2:8B:85:C4:BD:31:21:4C:75:5E:57:84:93:7A:65:25
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/V_-x2aKLhcS9MSFMdV5XhJN6ZSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:08:6d:d9:91:aa:84:a7:4f:6e:1d:d7:55:78:14:55:9e:db:
7b:04:1a:4d:f2:90:c3:80:33:12:2c:86:5b:e8:5d:b3:90:b5:
53:5d:ce:d8:6f:d0:d6:f3:92:04:d4:3e:43:e8:32:71:91:d5:
a4:80:63:38:c8:19:cc:02:32:e0:a3:f4:e0:f6:c3:92:e2:2e:
18:db:60:e5:53:ab:32:a0:91:ac:91:ef:14:65:e5:00:2e:0a:
86:3b:71:c0:fb:17:24:70:ea:13:ae:99:56:f4:bd:5f:5f:8b:
72:f8:7b:2b:ab:9d:a8:11:90:8a:5e:dd:39:5a:36:a2:1e:05:
55:6c:0c:35:ff:0f:1e:43:32:8e:ba:e3:80:fb:2a:55:0c:d8:
df:94:3a:8e:6f:dc:35:ac:fc:e2:86:66:b3:e0:45:c7:64:7b:
cf:60:2a:b2:bf:77:fe:7d:3b:3b:ed:02:ac:17:63:f5:96:9f:
03:28:78:0a:f7:be:36:13:69:de:61:a1:22:59:79:26:22:c6:
27:15:32:84:ba:6b:94:ce:20:ed:16:e9:36:cc:6b:dd:d4:16:
99:43:5b:a6:ab:56:d5:e3:14:11:ff:f7:5a:16:60:c9:5a:3f:
b8:64:77:45:5d:66:4e:55:8c:2e:de:9f:a5:84:fc:3a:11:db:
40:a1:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:08:45 2025 by rpki-client