Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/9GEhekcoyHY2zYxkXCnabVz2Q6A.roa
File: 9GEhekcoyHY2zYxkXCnabVz2Q6A.roa (raw, json)
Hash identifier: 0mC3lyj3n7bKdgxj1x8VoGxdhrJMLGR/ca7xIACtPak=
Subject key identifier: F4:61:21:7A:47:28:C8:76:36:CD:8C:64:5C:29:DA:6D:5C:F6:43:A0
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE0DD78C09CE3BA6DF5E65D40DAEC
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/9GEhekcoyHY2zYxkXCnabVz2Q6A.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198115
IP address blocks: 193.192.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e0:dd:78:c0:9c:e3:ba:6d:f5:e6:5d:40:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f461217a4728c87636cd8c645c29da6d5cf643a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:9c:11:29:f6:8f:ca:1a:03:b1:e2:03:ca:
7b:d7:fd:1e:a1:24:dc:de:96:bd:56:65:83:2f:db:
34:33:08:ec:24:30:1c:93:02:7b:b7:5a:aa:0c:e4:
52:06:7e:3b:db:f6:a8:d4:a4:2c:36:0c:29:21:2c:
65:1d:9e:2b:f8:c9:62:08:25:7c:7f:3b:a7:05:24:
47:9a:48:2e:47:7c:27:71:9d:e2:3f:17:d2:82:c9:
c9:8b:c9:4b:a0:86:5b:42:e6:08:93:68:4d:8b:64:
34:d9:44:4d:42:8d:46:b8:2a:29:85:be:26:26:49:
09:9b:71:cc:3c:a5:c8:d6:bc:6e:41:c9:73:da:c7:
2c:82:8a:5e:41:99:2c:4e:a8:8f:a8:6c:70:24:1a:
4d:e9:67:20:53:7c:b7:2c:ed:dd:15:81:3c:b6:41:
8c:b3:95:7d:03:6f:22:46:54:1f:c7:c7:7b:b5:65:
a7:e3:ae:60:83:e5:f9:69:0b:04:54:72:31:ca:8d:
af:cb:89:2d:ad:74:00:58:2c:3f:d7:64:3a:4b:24:
ea:77:fd:d6:44:64:21:c2:30:62:9d:a6:67:1b:61:
7f:27:e6:c9:4e:8c:8b:a1:cb:15:80:c2:38:3e:5f:
39:42:68:64:e5:d6:14:ef:26:64:df:d0:8a:7e:1a:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:21:7A:47:28:C8:76:36:CD:8C:64:5C:29:DA:6D:5C:F6:43:A0
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/9GEhekcoyHY2zYxkXCnabVz2Q6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.189.0/24
Signature Algorithm: sha256WithRSAEncryption
65:83:55:0b:fe:a6:3a:69:dc:29:34:c4:44:98:43:08:e3:19:
99:29:84:2d:97:c1:10:64:14:52:81:ad:34:e4:fe:b4:e4:8b:
2a:db:2e:c3:ec:22:e6:01:e8:50:55:99:9d:8a:03:84:00:9d:
1f:73:51:e5:9a:06:34:27:83:0e:91:a7:d1:77:8f:17:45:02:
2c:04:27:bc:45:10:6b:3e:38:ce:f3:4a:20:a2:f4:d0:9e:28:
45:46:24:f8:1d:57:ba:5d:4e:6a:83:fd:de:48:9f:04:42:de:
a1:d0:ac:08:97:89:98:bd:b4:ec:91:25:97:9b:e1:7a:cb:e1:
72:a7:37:c7:b6:f8:df:78:68:37:cb:de:e0:4a:54:03:84:2d:
97:1c:ae:53:4f:b1:3e:73:2f:e2:f6:da:f4:a5:1b:0f:ce:54:
da:70:61:96:28:0a:5f:d5:82:81:f2:df:07:89:0c:65:ca:8c:
b9:db:f9:c0:97:48:e8:aa:b3:b8:f8:18:8e:9d:5c:85:bd:6c:
5e:2c:e7:a9:8b:ba:71:66:a6:ce:4e:7d:6f:0b:17:1b:48:0c:
9f:2a:8a:e8:73:d6:f6:e3:f0:0e:fb:e7:d8:f1:4b:11:07:2d:
a1:d1:0f:f4:d5:ca:73:e4:82:9b:0b:ec:6a:53:b0:4e:42:af:
55:5a:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:42:40 2025 by rpki-client