Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/9AUgBdHJtqrwIVws2ld9IdUg4hM.roa
File: 9AUgBdHJtqrwIVws2ld9IdUg4hM.roa (raw, json)
Hash identifier: fKqNIzYgOUugADUu4vZ7tSExjB5CqQasXw8Com79TY8=
Subject key identifier: F4:05:20:05:D1:C9:B6:AA:F0:21:5C:2C:DA:57:7D:21:D5:20:E2:13
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0193CD4D68077A5A16B61CE1602BF2A4CF12
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/9AUgBdHJtqrwIVws2ld9IdUg4hM.roa
Signing time: Mon 16 Dec 2024 02:30:22 +0000
ROA not before: Mon 16 Dec 2024 02:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.214.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cd:4d:68:07:7a:5a:16:b6:1c:e1:60:2b:f2:a4:cf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Dec 16 02:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4052005d1c9b6aaf0215c2cda577d21d520e213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:01:14:1d:66:13:78:e6:29:ac:48:8e:59:
32:52:2f:d5:ff:3b:40:ca:4f:fd:2d:bf:f5:17:5d:
01:de:d8:ca:bc:de:e9:d8:7b:2f:79:2e:c2:29:c8:
1b:d0:49:69:1e:79:7a:4f:66:99:a4:21:d5:7d:02:
b7:3d:f5:4c:fa:f9:9c:1a:d9:b9:31:ea:d7:57:a8:
4e:6c:5c:83:73:ba:c5:52:ab:fc:b9:15:df:6e:74:
74:c3:75:ad:f4:0d:ec:af:db:0d:34:55:71:89:96:
22:4c:ef:9a:b4:da:1e:87:36:fe:d5:38:6a:af:f7:
b3:8d:2b:ec:43:e2:6a:6d:8f:12:31:4b:80:6b:2e:
48:8a:62:37:4c:6b:75:a9:11:0a:65:8b:44:eb:88:
13:df:6e:21:79:78:c3:c6:97:61:aa:28:c5:19:a2:
3b:4b:01:64:a2:3e:49:b7:c0:c4:7b:83:bf:18:e4:
5e:67:3e:de:f5:67:b2:12:1d:76:8d:3f:8b:61:74:
30:9f:29:9a:c3:cd:f4:65:1d:45:c1:c3:f6:6e:22:
10:c5:74:ef:27:d8:4b:a4:13:14:df:4e:db:02:d8:
f6:0c:44:0e:15:29:49:3c:cc:49:e9:38:60:9a:51:
64:73:e6:7b:2f:7e:c4:12:70:6a:7a:0c:da:70:06:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:20:05:D1:C9:B6:AA:F0:21:5C:2C:DA:57:7D:21:D5:20:E2:13
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/9AUgBdHJtqrwIVws2ld9IdUg4hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:55:16:8a:2e:e8:d6:ee:32:7c:f0:1d:d6:d4:f5:5c:aa:5e:
7d:fa:5a:48:3e:c1:b3:cb:ae:d8:42:67:5f:4b:18:dd:a1:27:
8c:1f:90:e8:15:4c:d0:e7:26:0d:d7:f8:bf:5f:5e:8f:82:46:
ad:4e:7d:bd:12:f7:a7:d8:b1:06:ec:56:1a:a5:79:b2:14:5f:
d8:cf:8b:7c:59:2d:db:e1:4b:77:dd:50:d8:a9:32:5c:db:dc:
9e:f2:57:7e:bd:70:d9:67:05:e7:7d:24:a2:c2:b3:40:e7:96:
9a:3a:f5:54:5a:76:0d:76:13:33:64:4d:d3:88:15:58:43:c9:
cc:99:1a:fe:b1:f2:05:4d:67:24:1c:12:4d:3a:f3:e7:e8:63:
4e:ec:58:53:f9:a8:d3:cd:f6:b1:c6:3c:8c:16:88:64:68:25:
48:c7:e8:56:00:2a:51:0d:b0:a8:95:44:f2:fc:79:21:b3:f5:
23:5c:2d:e8:f0:bf:ae:b9:fd:4a:37:5d:7c:97:6e:d4:8e:c0:
48:f7:f6:89:18:1f:3c:8e:17:61:ce:24:a5:11:88:fa:59:7e:
7a:54:61:3c:a1:5f:a3:fb:a8:f0:7f:b9:96:17:02:72:3d:ad:
65:3d:ca:82:94:8f:8c:4b:05:01:e1:b7:78:b2:f9:fc:83:08:
b5:fd:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:39 2025 by rpki-client