Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/1hGfq7Np-lC5zqkd-UT0koXInYM.roa
File: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (raw, json)
Hash identifier: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=
Subject key identifier: D6:11:9F:AB:B3:69:FA:50:B9:CE:A9:1D:F9:44:F4:92:85:C8:9D:83
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 0194282581387F9F0657F444F09107969159
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/1hGfq7Np-lC5zqkd-UT0koXInYM.roa
Signing time: Thu 02 Jan 2025 17:52:13 +0000
ROA not before: Thu 02 Jan 2025 17:52:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197000
IP address blocks: 193.0.8.0/23 maxlen: 23
193.0.8.0/24 maxlen: 24
193.0.9.0/24 maxlen: 24
2001:67c:e0::/48 maxlen: 48
2a13:27c0:30::/44 maxlen: 44
2a13:27c0:30::/48 maxlen: 48
2a13:27c0:3f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:81:38:7f:9f:06:57:f4:44:f0:91:07:96:91:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 2 17:52:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6119fabb369fa50b9cea91df944f49285c89d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:4c:65:c8:bf:39:49:29:51:e6:89:d3:35:
5e:e2:bd:de:51:0a:8e:32:77:87:6d:d2:b1:aa:d0:
c0:00:f9:bf:b6:5b:12:c9:19:f5:db:09:33:c3:f3:
66:3c:85:eb:2b:d8:9b:ff:1e:4f:38:e1:f8:25:81:
6b:b0:65:7d:7b:9b:38:4d:9f:33:24:7e:c7:c4:16:
2f:5d:bd:9e:c9:cf:c4:d2:85:b2:18:77:7a:9c:41:
14:16:6c:0e:cc:2d:1b:6b:d2:76:ad:5e:33:e1:b2:
8c:71:29:03:27:26:8c:9a:c7:5e:05:fa:7d:36:93:
dc:72:09:ee:ba:4a:58:f8:f2:db:32:14:26:f9:91:
63:52:17:12:0b:b6:ba:d0:de:85:5a:f2:21:9f:d6:
54:ee:ec:f9:81:5e:05:9f:d4:19:e0:15:90:5e:87:
da:89:e3:fa:c4:f4:9b:a7:b9:82:8e:c3:f5:24:4b:
a5:fd:82:1a:da:fd:97:f9:f3:09:f6:36:61:73:d8:
dd:72:aa:23:17:ae:dd:01:c3:44:1d:9c:09:05:42:
87:10:c6:6f:5f:80:97:e9:59:f5:56:21:2a:52:e4:
c8:0f:88:29:a4:9a:72:91:2c:6b:e6:78:05:5c:31:
e8:3b:c5:b0:73:70:25:58:73:a4:98:26:3e:aa:e6:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:11:9F:AB:B3:69:FA:50:B9:CE:A9:1D:F9:44:F4:92:85:C8:9D:83
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/1hGfq7Np-lC5zqkd-UT0koXInYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.8.0/23
IPv6:
2001:67c:e0::/48
2a13:27c0:30::/44
Signature Algorithm: sha256WithRSAEncryption
94:02:ee:e3:63:c5:eb:fc:42:f9:49:fc:f2:a5:bd:52:4d:41:
33:83:fb:c8:88:d5:25:2c:6b:60:51:f5:47:be:c9:8d:29:90:
f5:71:98:f8:8c:e5:b8:fe:34:ce:1a:cd:f1:51:74:08:2a:4c:
58:c0:92:4a:55:1c:5b:0c:0a:d6:8b:ff:c1:9c:21:d5:3c:e0:
c3:a7:ed:bb:7b:0c:dd:74:01:c8:0f:b1:8e:b2:d6:17:08:12:
73:eb:54:24:7f:5f:13:99:a9:e4:f2:d1:8a:df:44:f8:67:09:
fc:2c:92:be:ad:d3:51:70:d8:95:77:2b:58:21:e4:83:16:de:
41:50:23:3b:10:7d:d0:dd:e6:d6:73:bf:dd:4b:51:60:f0:41:
7d:cb:cb:2a:95:c8:91:4f:aa:d2:19:9d:d3:09:df:c5:73:1a:
fc:5e:f4:8b:2d:25:c3:a5:f0:0c:1a:94:b6:16:1f:74:0a:ef:
74:e3:da:2c:52:38:53:6a:f6:62:10:3b:69:b0:24:04:45:6a:
04:69:8d:c2:84:01:d7:d8:fe:d2:94:a6:f4:6b:7f:7b:88:dd:
86:bd:99:44:c6:16:fd:e5:23:7e:8a:44:a1:4e:68:8d:84:4e:
71:18:9c:78:9c:2b:85:ad:e1:61:80:97:d6:65:da:7f:29:43:
82:66:96:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:18 2025 by rpki-client