Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/j2XZjrTSXVmMuw_oeEgOn1HxuGw.roa
File: j2XZjrTSXVmMuw_oeEgOn1HxuGw.roa (raw, json)
Hash identifier: 2Tev1wctSEQEUUak9YO8a11qtqYUUWbXeDVxnlvL2Vg=
Subject key identifier: 8F:65:D9:8E:B4:D2:5D:59:8C:BB:0F:E8:78:48:0E:9F:51:F1:B8:6C
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018D13D7EE196E387A0CEF322C5968C17E3D
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/j2XZjrTSXVmMuw_oeEgOn1HxuGw.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 193.201.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ee:19:6e:38:7a:0c:ef:32:2c:59:68:c1:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f65d98eb4d25d598cbb0fe878480e9f51f1b86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:e9:16:47:66:8b:87:36:47:1a:60:8a:c0:
67:2f:76:30:cc:fb:84:b5:5f:ac:40:ef:a9:60:51:
de:e3:12:6c:ea:15:83:1c:38:79:fb:60:5c:17:20:
20:67:33:51:51:45:82:2d:d6:6e:ba:ed:75:f3:67:
2a:2c:b5:d9:db:1f:c7:5e:22:5e:d7:de:33:24:1e:
64:00:c9:45:f5:05:39:13:d0:63:5e:6d:5e:3a:aa:
44:25:07:8a:cb:b2:ce:78:e0:ad:ed:08:2d:8d:0f:
0d:c4:9f:38:11:26:2a:a8:c3:cd:1e:87:81:5b:7c:
fd:67:a1:1e:c2:44:c0:0f:95:23:6c:79:ba:b5:ca:
2b:35:57:4f:55:a7:06:1f:74:10:75:c8:a4:44:7e:
af:63:e0:87:a1:cc:2d:fd:49:61:7a:b1:7a:07:c0:
9f:78:dd:b5:6a:9b:a5:92:9c:4b:2d:d2:36:c7:f0:
d8:2b:76:ef:04:c3:9b:3c:4e:29:1c:45:11:4e:d9:
fd:99:d9:c7:76:32:8f:24:37:4b:6b:e5:13:cf:92:
ae:43:62:9a:4d:68:89:43:d6:6d:26:90:39:0e:0c:
13:d9:5a:2f:95:d4:40:cc:1b:b3:4d:b8:8a:72:2f:
3d:08:bc:66:82:17:e3:ff:4f:8b:87:86:51:17:ba:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:D9:8E:B4:D2:5D:59:8C:BB:0F:E8:78:48:0E:9F:51:F1:B8:6C
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/j2XZjrTSXVmMuw_oeEgOn1HxuGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.114.0/24
Signature Algorithm: sha256WithRSAEncryption
00:68:b4:cd:5f:2f:f3:98:cb:39:2c:b5:57:68:71:86:22:b6:
a7:f2:f9:74:71:9a:76:a3:60:0f:92:33:c4:84:7b:04:85:ae:
3a:1e:9f:52:3d:1b:9c:d1:f6:fb:39:5a:2c:a2:eb:9f:d4:cf:
a1:24:60:98:df:98:46:18:5b:1b:81:3b:db:29:42:8c:da:33:
37:46:61:77:8c:14:b1:de:4e:37:53:46:a7:96:ee:31:7a:0f:
92:84:4c:f7:eb:28:a1:57:38:26:cd:c0:6d:dc:97:41:e1:dd:
f3:46:3c:6f:ff:22:f0:7a:d1:38:9f:96:61:40:d7:81:63:8a:
1a:11:cd:bd:b2:36:49:13:37:2d:6a:a8:5d:3a:5f:b5:02:84:
2b:df:2f:36:82:c4:00:fd:ca:b9:89:b6:5e:87:58:5f:69:27:
a1:3b:c3:16:16:ed:3d:32:fa:4b:a7:82:ec:33:9a:af:51:85:
65:2c:82:c6:d3:8f:ce:bb:e8:02:bb:b5:c4:1e:c7:70:fd:88:
db:d3:06:b8:0d:7a:96:0a:ab:6a:49:b7:ea:cf:95:44:e6:22:
a7:56:58:14:8b:d5:41:7c:f3:47:64:34:d2:a9:47:77:b5:7a:
10:6b:81:aa:f5:bb:f2:36:49:78:1d:ad:24:49:43:d5:50:d8:
7d:a6:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:25 2025 by rpki-client