Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/RJWF226SIGJT1eKGE7d-61VRUJs.roa
File: RJWF226SIGJT1eKGE7d-61VRUJs.roa (raw, json)
Hash identifier: v23IJHaHNa39RPud1NpNOkRJanYhfx0GEUwvXymYLVw=
Subject key identifier: 44:95:85:DB:6E:92:20:62:53:D5:E2:86:13:B7:7E:EB:55:51:50:9B
Certificate issuer: /CN=88ea8d80288edda94d95b6308bf159a526c63745
Certificate serial: 01874E10C47E7A15A5CD0C759DD0C32B36B7
Authority key identifier: 88:EA:8D:80:28:8E:DD:A9:4D:95:B6:30:8B:F1:59:A5:26:C6:37:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOqNgCiO3alNlbYwi_FZpSbGN0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/RJWF226SIGJT1eKGE7d-61VRUJs.roa
Signing time: Tue 04 Apr 2023 20:58:54 +0000
ROA not before: Tue 04 Apr 2023 20:58:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196695
IP address blocks: 193.3.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:10:c4:7e:7a:15:a5:cd:0c:75:9d:d0:c3:2b:36:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea8d80288edda94d95b6308bf159a526c63745
Validity
Not Before: Apr 4 20:58:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=449585db6e92206253d5e28613b77eeb5551509b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:cc:48:3f:83:5f:f8:92:85:0b:0a:89:bc:
8d:7f:7d:d0:20:2d:ea:c3:61:2f:0a:28:dc:76:3a:
24:fe:93:95:2d:70:f0:4f:ae:ab:f4:14:18:85:c1:
c3:2d:db:8d:ec:1c:93:09:c1:51:a7:b8:b4:c3:c2:
b9:29:d8:c5:fb:01:9c:6a:50:a1:29:f9:90:3e:9c:
a5:71:be:e3:6e:10:cf:47:7a:90:5d:76:7f:ba:07:
17:c3:70:f4:59:ca:16:01:4d:63:38:69:49:64:66:
8f:be:32:c8:d2:40:f1:9b:3e:62:90:ab:87:6a:c7:
e9:ec:20:51:57:0c:82:30:ce:7c:27:ba:9d:94:95:
b1:3a:e2:a0:70:2c:50:14:a2:ef:21:89:9c:49:c7:
e1:f4:5d:2b:28:32:75:da:6c:21:51:05:ec:db:7f:
1f:09:62:7b:4b:ec:5d:c2:67:c0:e2:9d:cf:ca:4a:
ca:59:bf:ee:05:73:2f:01:e0:c6:16:fd:d2:71:ec:
24:aa:41:0b:e0:04:45:57:e5:41:4b:ab:50:bf:e0:
4e:83:c8:8a:35:63:26:42:21:0f:fe:4e:d2:0e:8f:
c9:31:ee:07:c9:15:02:90:f0:9c:e8:41:ce:20:5d:
97:f7:9d:56:8a:99:2e:02:57:74:79:65:79:24:95:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:95:85:DB:6E:92:20:62:53:D5:E2:86:13:B7:7E:EB:55:51:50:9B
X509v3 Authority Key Identifier:
keyid:88:EA:8D:80:28:8E:DD:A9:4D:95:B6:30:8B:F1:59:A5:26:C6:37:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOqNgCiO3alNlbYwi_FZpSbGN0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/RJWF226SIGJT1eKGE7d-61VRUJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/iOqNgCiO3alNlbYwi_FZpSbGN0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.188.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e0:03:f8:79:bb:b0:82:b3:34:2b:00:15:54:f3:26:92:61:
f3:57:8b:eb:2a:26:9d:d2:e1:0a:88:4e:2c:45:75:f5:06:14:
ef:50:5e:db:ed:97:2b:eb:eb:4b:3c:a0:cd:d0:f1:5a:39:c1:
cb:78:30:2d:eb:e6:e9:f8:dd:62:f3:e0:8b:56:4f:22:ae:53:
6d:07:b4:3c:24:75:36:b7:17:94:db:71:1c:cb:98:45:86:c6:
73:aa:a5:bf:92:a0:bc:7c:3b:f9:93:03:6c:c1:f4:74:49:b1:
99:86:86:78:d7:a5:ea:94:90:ed:f3:db:f7:51:53:c6:52:86:
47:cd:c8:67:5a:a4:64:a4:f2:df:f3:ba:33:1a:72:a6:d0:59:
37:96:c5:c3:65:af:73:7a:50:92:b7:9c:87:2d:db:7f:26:5c:
85:d7:b6:3b:01:51:ba:df:a2:7d:78:c8:9c:0c:ec:4d:9b:6b:
97:a8:ac:a0:fd:a4:e8:9b:5c:e9:ca:c5:0f:cb:de:bb:50:3a:
36:69:a5:42:14:eb:e8:03:96:58:2b:88:de:db:6b:3e:66:be:
21:ee:de:d3:a8:a1:74:fb:02:e0:31:dc:1f:b5:19:25:b6:08:
06:ef:74:e0:61:02:eb:ee:b9:5f:71:89:4c:e1:72:fb:41:46:
d1:57:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:37:06 2025 by rpki-client