Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/kHHfj9xU-cnSlh9cN8HxfknfhJE.roa
File: kHHfj9xU-cnSlh9cN8HxfknfhJE.roa (raw, json)
Hash identifier: Ps8xL75kSYvcSR8mYpt2nMzmBJN6FSkXLvawneTNxig=
Subject key identifier: 90:71:DF:8F:DC:54:F9:C9:D2:96:1F:5C:37:C1:F1:7E:49:DF:84:91
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018673DE0B57204B09F38EEBC27C5E6C9B22
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/kHHfj9xU-cnSlh9cN8HxfknfhJE.roa
Signing time: Tue 21 Feb 2023 12:06:17 +0000
ROA not before: Tue 21 Feb 2023 12:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 193.32.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:de:0b:57:20:4b:09:f3:8e:eb:c2:7c:5e:6c:9b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Feb 21 12:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9071df8fdc54f9c9d2961f5c37c1f17e49df8491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:26:8e:3e:49:94:02:73:3c:bc:d8:a1:57:
f6:93:24:b3:00:24:70:96:4d:b9:7e:05:51:f7:45:
43:06:c8:d8:6c:29:d0:37:43:d1:a3:0c:6c:5e:08:
93:93:50:fa:a8:f7:a9:5e:84:3c:6d:3a:43:ad:7a:
76:ef:73:86:af:4f:c3:29:f2:8f:c1:b2:9e:d6:1c:
87:33:9e:dd:5a:ab:fc:0c:4d:f6:77:06:06:3a:22:
90:95:d2:90:1a:c9:e3:b6:9a:0c:78:d9:b0:b2:62:
54:a9:7f:f2:bf:51:8c:28:e0:1b:51:bd:f9:97:b3:
b1:2c:f7:50:97:c9:f6:16:61:21:c8:f9:f7:a0:35:
b0:82:a5:f4:e8:bc:3a:80:28:16:62:d7:80:58:6d:
d0:70:02:49:7b:b2:1c:4a:21:2f:f0:4f:64:71:8e:
47:d3:dc:ff:4e:2a:e6:06:78:49:e5:83:64:95:fc:
21:93:84:b1:c8:03:26:08:59:bb:45:99:c1:d4:eb:
61:ea:bc:fe:8d:85:26:a1:96:8a:77:9d:ff:32:2f:
b7:84:99:a4:2a:16:bc:9e:70:38:82:50:59:82:1c:
58:5e:d7:61:7c:53:11:3e:80:ff:ac:74:c1:29:bf:
cf:e9:77:4c:20:3e:0f:c8:a6:d2:d8:af:29:68:61:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:71:DF:8F:DC:54:F9:C9:D2:96:1F:5C:37:C1:F1:7E:49:DF:84:91
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/kHHfj9xU-cnSlh9cN8HxfknfhJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:27:d1:e4:6a:3b:c5:b6:52:a3:b9:64:fa:ca:a8:aa:8f:01:
98:52:74:1d:1f:e4:94:78:01:22:ea:21:72:10:bb:af:8d:d7:
aa:78:49:d3:de:e7:cc:28:74:da:7a:50:e9:f8:3b:83:e8:ae:
ec:45:56:b5:62:6b:3d:07:63:56:6c:a7:ee:83:39:5b:55:e6:
72:3f:b1:f2:0d:03:e6:39:ab:ae:ea:6a:f1:ee:9a:67:37:c5:
52:cd:95:a6:65:e1:c8:93:ac:26:07:cb:0f:61:f0:7b:53:87:
6c:e5:00:92:5c:d2:ef:ed:dd:56:b1:12:2c:02:cb:b1:14:00:
70:90:8f:ba:40:f5:10:5a:ba:19:cf:a0:d8:7b:c4:fe:c9:55:
5c:5d:52:ee:aa:2e:e8:a5:71:f9:4a:5d:19:bb:21:9c:58:e4:
d8:31:94:5d:94:95:04:60:9f:0e:71:ac:5f:1e:d6:53:53:76:
2b:5f:fe:8b:68:0d:53:3f:11:70:a6:8a:61:af:ad:6a:1d:85:
ef:34:ec:68:07:86:7e:56:2a:27:fc:8f:a8:1e:92:83:6a:37:
68:ed:94:67:da:1b:dd:50:c4:23:49:5e:98:07:9c:82:e1:75:
e3:40:0a:c3:ec:05:2f:6c:97:3c:23:99:31:d4:7d:ab:41:17:
69:60:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:00 2025 by rpki-client