Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/2AOGfuGoVn6y9KN3WMNOEoIiThY.roa
File: 2AOGfuGoVn6y9KN3WMNOEoIiThY.roa (raw, json)
Hash identifier: 5ytPaQBZ+eGqt08SeuRk6lo6UfNzf4iVUzK72cN8igA=
Subject key identifier: D8:03:86:7E:E1:A8:56:7E:B2:F4:A3:77:58:C3:4E:12:82:22:4E:16
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018CC7948C06D1DB762CF261DF4FD0103D36
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/2AOGfuGoVn6y9KN3WMNOEoIiThY.roa
Signing time: Tue 02 Jan 2024 00:30:50 +0000
ROA not before: Tue 02 Jan 2024 00:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48806
IP address blocks: 193.39.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:8c:06:d1:db:76:2c:f2:61:df:4f:d0:10:3d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 2 00:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d803867ee1a8567eb2f4a37758c34e1282224e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b3:36:2a:9e:9e:8e:40:a4:3d:73:c6:60:5f:
b7:a3:69:41:c5:58:36:66:86:0e:1b:6f:0c:49:56:
ba:01:3a:fd:27:35:2e:0e:e6:c8:9f:2e:a2:9b:37:
58:7f:57:7c:2b:96:5f:52:52:d1:ac:46:dd:41:ee:
e6:b8:85:6f:2d:79:7e:fc:21:3c:05:a0:5b:00:6d:
c2:9d:fc:0d:5a:07:99:ba:15:36:2a:47:71:50:01:
a3:3c:24:37:e8:28:c4:28:1c:58:1c:62:0a:2a:6c:
c7:b1:b1:a6:46:6d:69:33:9f:b2:62:85:b2:62:6e:
6d:15:f5:9d:60:fc:67:c4:07:f5:9b:66:f2:8b:1b:
e6:96:1d:c0:49:c8:bb:b7:7c:c9:81:5c:15:30:35:
22:84:54:a4:77:6e:aa:36:b5:69:4f:1e:49:bd:8b:
e7:43:dc:30:23:97:e3:66:9f:e1:9d:a2:45:26:55:
32:ca:d0:2b:e1:e2:19:0c:7a:87:0d:5f:5c:75:39:
30:cd:19:f1:16:ea:96:17:15:d2:3b:9c:37:b4:f8:
e6:af:cf:75:f1:84:b5:76:26:fb:be:52:48:60:70:
de:a2:41:e5:4b:19:2a:29:36:fd:1c:60:12:69:b4:
d1:38:a3:51:c6:51:25:e1:69:cf:ad:f5:1e:39:cf:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:03:86:7E:E1:A8:56:7E:B2:F4:A3:77:58:C3:4E:12:82:22:4E:16
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/2AOGfuGoVn6y9KN3WMNOEoIiThY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.215.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0f:ee:52:ff:9c:81:f9:41:b7:f8:98:c0:54:eb:41:47:e2:
fd:a8:d2:ec:bf:18:13:8b:74:c7:b9:04:c1:b4:4d:2d:08:05:
da:4a:de:8c:f6:69:31:80:a8:aa:8a:6e:6d:bf:86:62:4d:07:
66:dd:12:16:08:5e:93:5f:f1:4e:6a:39:c4:a2:ef:11:ce:8c:
88:64:22:82:cf:61:c6:e2:0f:4c:f6:ab:16:4e:43:4d:c7:17:
70:0b:2f:8a:36:ad:a3:bb:74:b4:3f:90:ac:99:e0:a9:ef:64:
b9:b5:35:82:d6:c5:05:51:a5:8b:7f:92:d0:65:a9:56:b9:66:
ba:77:ce:73:07:9e:a1:11:41:b0:13:b1:5c:cc:0d:f3:99:58:
bf:62:23:48:dc:a2:54:34:9f:ff:b0:7c:63:b9:da:f9:c1:6f:
b4:09:53:3c:c0:c9:70:d6:08:3d:9c:c3:95:0d:5b:aa:20:90:
cc:a6:18:e0:3a:0d:9e:6d:3d:8c:15:44:51:80:ff:0b:f5:70:
21:09:d3:4c:32:6d:09:bd:33:90:14:cc:c0:8e:40:a1:22:45:
4d:4c:80:68:67:86:f6:a5:9f:6f:1f:a4:d8:83:2d:e1:f4:c1:
57:c6:a7:9e:0c:f6:28:70:cc:89:fb:02:96:a7:80:3b:f5:2b:
f3:fe:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:21 2025 by rpki-client