Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/oaiKe9BUmU6ux91XLaQvZC7XqN0.roa
File: oaiKe9BUmU6ux91XLaQvZC7XqN0.roa (raw, json)
Hash identifier: uC3IsodMVYaUiVMHtDRZahUGbsjXFHZTUvnA/e2zbi4=
Subject key identifier: A1:A8:8A:7B:D0:54:99:4E:AE:C7:DD:57:2D:A4:2F:64:2E:D7:A8:DD
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 01942745D9088FFBEBFDB46CA131959842EA
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/oaiKe9BUmU6ux91XLaQvZC7XqN0.roa
Signing time: Thu 02 Jan 2025 13:47:56 +0000
ROA not before: Thu 02 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 193.164.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:d9:08:8f:fb:eb:fd:b4:6c:a1:31:95:98:42:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Jan 2 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1a88a7bd054994eaec7dd572da42f642ed7a8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:fa:01:cf:c9:a1:34:9c:2e:75:77:3c:97:
79:66:9f:32:74:10:54:77:6f:32:30:9e:e1:07:5f:
91:c6:87:97:c2:9f:f6:76:92:62:10:59:f7:33:4d:
27:c5:ea:d2:8b:5c:40:ca:6e:03:ef:1f:43:b4:f3:
ca:98:ba:91:7e:29:1e:2f:26:e6:4d:c6:c2:00:f6:
d1:f9:0f:f3:14:1a:95:6a:51:70:ce:f6:1e:bc:bc:
7f:19:a3:e4:45:7b:66:8c:09:1d:11:ff:ef:34:42:
d7:45:aa:a4:eb:43:3c:8a:89:fe:4d:4b:a2:ef:fd:
fa:83:94:67:d8:f9:42:2b:cb:00:39:9d:ee:0c:f5:
a0:b7:f4:8e:f9:83:d0:ba:60:c3:38:63:08:89:ea:
2d:fd:6c:d3:3e:97:72:5e:2b:4f:3e:7b:4b:25:fe:
4d:e8:6a:9f:ef:f4:1b:48:2f:5a:54:86:47:21:a1:
be:43:6a:d8:df:23:6a:a0:15:35:dc:dd:55:c5:92:
4f:61:ee:98:c7:61:e3:47:64:35:e1:ae:47:00:cf:
b3:00:0b:e2:e0:17:42:1a:30:08:64:e2:4f:7b:f5:
19:61:65:c2:7e:aa:f2:37:46:9f:33:4a:80:cf:d8:
0f:82:a8:97:3e:76:c0:cc:e7:63:7d:51:1d:98:74:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:8A:7B:D0:54:99:4E:AE:C7:DD:57:2D:A4:2F:64:2E:D7:A8:DD
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/oaiKe9BUmU6ux91XLaQvZC7XqN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b4:c1:65:53:9c:2a:6b:17:2e:bf:7a:6f:24:70:bd:ef:c6:
5f:85:40:ff:6d:ae:29:31:27:19:6c:d8:8c:68:da:e5:eb:bc:
86:86:53:5b:13:e3:bb:c1:35:9b:8a:b6:69:62:0d:66:00:a5:
c1:36:46:61:96:96:26:1e:63:e7:b3:55:66:c5:a9:b6:93:12:
65:4c:40:51:a0:2f:26:4b:e5:dc:a4:13:ca:bb:db:2b:49:7a:
e8:7c:c9:26:74:c5:cf:02:1c:1e:3c:93:d7:1f:51:24:5f:43:
f9:69:b2:6d:b7:4c:50:21:46:c7:c4:00:2b:59:22:3a:e8:0f:
1c:bd:71:01:59:13:4d:47:79:5b:54:bc:6e:74:79:36:c5:28:
89:91:ec:95:ec:44:5a:cc:9c:78:fb:37:55:c0:2c:f7:68:d6:
9c:2b:2b:c9:21:5c:cc:e9:18:90:e3:21:78:da:4d:a9:bc:e1:
48:d0:6f:82:8b:fc:f5:96:99:f3:c2:df:d2:8d:b1:bc:52:f0:
70:c1:24:5d:c4:c0:c8:17:79:0d:dd:1a:68:a6:9b:ce:19:de:
5f:42:be:76:44:46:74:6c:fc:84:56:93:9a:ba:5e:84:56:b0:
6a:8b:89:43:27:fa:d6:c4:b0:e0:6e:54:7b:cd:c4:2b:1c:a3:
1b:6d:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:14 2025 by rpki-client