Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/1-uL0H6IvXvHLJ3hJSc3znl-0dJE.roa
File: 1-uL0H6IvXvHLJ3hJSc3znl-0dJE.roa (raw, json)
Hash identifier: 1I8r6uPkEcDzHcHRldye27FdUnXWR+xxP1egl8hxt5M=
Subject key identifier: FA:E2:F4:1F:A2:2F:5E:F1:CB:27:78:49:49:CD:F3:9E:5F:B4:74:91
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018C154FD15F69881CC65AAC2F7A3434DE2E
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/1-uL0H6IvXvHLJ3hJSc3znl-0dJE.roa
Signing time: Tue 28 Nov 2023 09:43:21 +0000
ROA not before: Tue 28 Nov 2023 09:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 116.206.94.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:4f:d1:5f:69:88:1c:c6:5a:ac:2f:7a:34:34:de:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Nov 28 09:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fae2f41fa22f5ef1cb27784949cdf39e5fb47491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:85:35:8a:a5:a4:3f:11:c3:16:b2:69:33:
f5:d2:bf:fa:b3:1e:40:11:fe:03:a1:0d:27:57:90:
18:5e:65:10:c3:9f:cc:01:ea:73:07:e1:7a:01:b8:
94:b5:f2:bc:f3:b4:b6:dd:a5:57:dc:d8:b6:c0:08:
98:93:4b:dd:99:c7:bb:3c:0e:e8:03:4a:4a:7a:bf:
d8:30:6e:87:7b:ea:9b:87:c7:1f:11:74:d4:15:fc:
f1:fc:05:f7:12:2f:2b:1b:da:e0:68:73:ed:f0:3d:
e8:61:bf:76:55:17:32:c9:41:e9:88:d0:84:b0:63:
8b:6f:59:c4:1a:e8:35:c4:c8:bf:a1:6e:0e:dc:a5:
f6:a7:ac:2b:8b:8b:ab:ef:f1:3b:8e:29:19:bd:dd:
8c:c6:8a:35:f2:5e:66:11:66:ee:8f:d8:ee:38:ce:
64:ac:30:4b:09:e8:c1:40:4f:fc:09:ac:43:b2:b5:
f1:7f:13:3d:7d:5a:28:b2:13:12:34:4a:42:da:0b:
55:ca:ae:46:41:99:a5:28:dc:aa:41:69:97:fd:61:
7a:67:04:e2:a7:e3:98:25:be:b1:80:97:f9:60:4c:
95:52:c5:ff:90:b6:0d:f4:d5:79:c9:6d:ce:21:9e:
39:49:d9:e6:bf:10:dc:ba:42:01:52:3e:8b:c3:6a:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E2:F4:1F:A2:2F:5E:F1:CB:27:78:49:49:CD:F3:9E:5F:B4:74:91
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/1-uL0H6IvXvHLJ3hJSc3znl-0dJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.93.0-116.206.94.255
Signature Algorithm: sha256WithRSAEncryption
8c:3d:cd:c7:4d:a5:9c:3c:1c:fa:a0:81:ca:09:41:4e:49:2e:
44:46:27:30:ec:ab:1c:46:64:27:7c:fc:fc:c5:69:e5:c2:fc:
aa:c1:fd:10:69:75:e5:11:83:75:d6:68:8a:27:0b:e0:38:75:
ff:1d:23:4f:85:7b:49:96:23:ab:20:95:6b:1e:b9:fe:d7:fa:
52:74:6a:47:5a:54:e8:a7:f3:90:6c:7f:08:37:81:68:91:db:
4e:85:2f:d5:3f:47:8e:39:a2:fc:3d:ca:56:0a:6b:f4:65:76:
5d:3c:95:9c:c6:76:2d:76:3f:4e:44:16:6e:58:2f:5e:63:3c:
4a:a7:a5:1f:2c:3e:46:33:41:6b:45:64:04:92:c4:94:85:d0:
87:08:38:35:80:6e:17:5a:2b:e5:7e:8f:01:82:72:a6:7c:0c:
07:2f:11:99:ee:a9:15:c2:aa:ab:ea:c1:11:8f:9f:e3:e4:a5:
e7:3f:59:3d:4a:15:42:25:a1:ec:45:f9:1c:32:30:cf:6a:76:
58:ed:31:5d:b9:74:49:9d:18:48:cf:c2:d1:07:06:1f:17:ba:
21:1c:96:f9:78:cf:7c:d1:a6:59:4a:3d:3d:48:08:fb:e0:11:
c5:fe:c3:ef:7b:46:c3:44:fe:d6:91:3c:c8:aa:2b:ef:db:11:
8a:be:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:55:37 2025 by rpki-client