Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/C5MhC96HxaJKMKNS_jY_WLtyOQI.roa
File: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (raw, json)
Hash identifier: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=
Subject key identifier: 0B:93:21:0B:DE:87:C5:A2:4A:30:A3:52:FE:36:3F:58:BB:72:39:02
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 019424454641C870AAB468CD29E2B639EA86
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/C5MhC96HxaJKMKNS_jY_WLtyOQI.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 193.227.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:46:41:c8:70:aa:b4:68:cd:29:e2:b6:39:ea:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b93210bde87c5a24a30a352fe363f58bb723902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:79:d1:65:6e:34:78:f1:0d:52:b3:3b:d6:
c4:0d:6f:42:cf:88:80:71:a4:d8:b5:cc:ce:99:39:
dd:7a:31:74:ba:b8:ef:c9:1b:49:39:cb:21:07:3f:
0b:a4:fd:90:7e:5f:c4:76:ec:53:6d:4d:38:04:47:
8b:32:6d:7e:b7:9f:03:9b:4b:41:90:ea:e8:38:1e:
61:dd:79:d3:db:3b:f6:5e:7a:29:fb:98:c6:e4:36:
72:32:9d:02:89:f1:e7:4b:57:19:c8:29:3d:4e:a0:
f8:9f:59:a9:97:23:12:14:ac:f6:ab:96:50:9b:6e:
e2:f2:e7:e5:19:c2:58:26:fd:d0:7d:9b:91:9e:ef:
19:b6:a3:4a:b7:27:d9:76:72:87:c0:a7:48:d3:fc:
27:18:6d:8d:d4:d7:c0:3e:ad:8e:0d:26:26:25:41:
6a:0e:43:fd:3f:e1:49:2d:52:0e:94:54:3a:c6:a8:
69:2b:e0:7a:ee:a8:96:d4:7d:7e:7b:ff:6b:37:14:
09:5a:be:6c:63:9b:e8:9b:04:07:7a:42:d2:65:a1:
a1:98:82:a0:14:c6:88:93:d0:f4:f8:99:b3:3e:6b:
e5:2c:a6:02:15:52:48:15:25:02:d0:b2:d7:58:f4:
9a:3f:fb:94:2c:e9:8e:4b:d0:a9:41:61:37:6a:5f:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:93:21:0B:DE:87:C5:A2:4A:30:A3:52:FE:36:3F:58:BB:72:39:02
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/C5MhC96HxaJKMKNS_jY_WLtyOQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.108.0/24
Signature Algorithm: sha256WithRSAEncryption
11:dd:58:93:88:44:53:c8:22:47:62:a3:49:72:29:c6:c7:a1:
d0:72:79:47:ca:32:d7:c6:b5:f8:25:36:bb:60:14:62:6a:56:
16:aa:3b:bc:a1:f8:d1:57:12:92:0b:93:52:ce:86:8c:7e:8e:
22:ce:8a:f8:de:ec:9e:1f:6e:eb:f4:55:f2:dc:00:b5:3f:d6:
64:b6:3e:31:3b:fe:df:15:4a:9a:04:68:be:fe:82:c2:bb:c7:
4b:a3:69:fe:fd:64:09:92:61:ea:f8:05:df:5f:6d:b4:fb:24:
af:2a:e2:0a:74:77:f1:2c:9c:2e:ec:f0:0b:1b:01:16:06:18:
35:95:46:69:59:40:f3:db:cc:d0:8f:ea:b4:14:82:a4:cf:4f:
8b:a9:2f:49:71:0a:b6:65:cd:8f:43:5a:18:08:dc:0f:df:a8:
3b:41:d5:89:58:f4:fe:74:09:4c:03:c7:e3:89:8f:3e:a8:80:
ea:98:11:09:d8:b0:e4:7b:ef:5c:3b:ae:0f:58:00:28:e2:db:
7f:a9:03:8c:7e:31:8e:a1:db:42:0a:b7:e5:06:1d:1f:05:9f:
c2:e0:b8:a6:10:7c:24:df:c0:95:7d:83:4d:63:1a:2e:0c:a2:
7d:ea:77:65:f3:d9:28:00:5f:85:4f:55:36:65:bb:5e:52:a0:
78:a7:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:32 2025 by rpki-client