Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/nDiKmJ1UjDE4U2eqrBL_JESHJUI.roa
File: nDiKmJ1UjDE4U2eqrBL_JESHJUI.roa (raw, json)
Hash identifier: QSihtlbwJ4rMV3/L8NGOA48q9go14BElKiOdG4yGOWA=
Subject key identifier: 9C:38:8A:98:9D:54:8C:31:38:53:67:AA:AC:12:FF:24:44:87:25:42
Certificate issuer: /CN=bd2aac0640e07c735e13488ae87035bd083b5a21
Certificate serial: 0313B637
Authority key identifier: BD:2A:AC:06:40:E0:7C:73:5E:13:48:8A:E8:70:35:BD:08:3B:5A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSqsBkDgfHNeE0iK6HA1vQg7WiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/nDiKmJ1UjDE4U2eqrBL_JESHJUI.roa
Signing time: Sat 01 Jan 2022 11:04:03 +0000
ROA not before: Sat 01 Jan 2022 11:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 193.41.176.0/22 maxlen: 24
194.9.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51623479 (0x313b637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2aac0640e07c735e13488ae87035bd083b5a21
Validity
Not Before: Jan 1 11:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c388a989d548c31385367aaac12ff2444872542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:ba:2e:f2:67:88:3a:44:4e:25:5e:b4:d1:
5b:24:b0:f0:fe:da:b3:44:d9:03:65:f6:93:15:bb:
68:af:eb:b5:d3:6f:b6:15:ff:c7:c0:50:41:bf:71:
ee:14:ce:e7:69:40:22:ea:6a:54:81:c2:e9:ad:31:
5d:54:25:da:8c:89:d3:c6:18:5a:73:d1:ca:69:6c:
95:84:fe:86:86:30:6c:06:64:2b:d4:0d:3a:47:64:
33:5e:ca:07:c9:26:86:d9:56:9d:6c:00:58:4a:cc:
e7:46:06:04:a8:bd:30:2f:68:c8:55:78:57:e4:bd:
b1:fd:ab:e1:74:f0:d7:fc:a5:42:48:56:32:e5:b5:
cc:9b:80:cd:35:f7:ff:76:39:1c:0c:33:f1:b7:cc:
36:b4:dd:f1:07:83:52:2d:bd:b8:b6:c2:e0:a2:df:
3f:43:3e:2c:fd:60:03:88:73:95:50:52:75:a2:ea:
7a:a6:31:70:d9:05:e9:a9:f9:c8:9b:2d:49:f4:86:
a4:8f:ea:38:28:05:b2:f8:a0:bf:00:8d:46:90:01:
7f:18:96:95:8a:e0:a7:c1:5f:be:06:ec:33:c0:0e:
88:0a:90:29:aa:17:07:10:27:fd:ea:55:62:c0:35:
26:0c:a6:07:c2:02:f9:f4:5b:21:da:76:44:86:46:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:38:8A:98:9D:54:8C:31:38:53:67:AA:AC:12:FF:24:44:87:25:42
X509v3 Authority Key Identifier:
keyid:BD:2A:AC:06:40:E0:7C:73:5E:13:48:8A:E8:70:35:BD:08:3B:5A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSqsBkDgfHNeE0iK6HA1vQg7WiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/nDiKmJ1UjDE4U2eqrBL_JESHJUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/vSqsBkDgfHNeE0iK6HA1vQg7WiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.176.0/22
194.9.220.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ce:6b:91:cb:81:ff:d3:c7:67:2e:bf:d5:8b:bf:89:c0:18:
dc:2f:e0:fa:c1:aa:9c:61:44:83:83:88:1a:7c:cb:48:04:fc:
34:30:0d:8b:c2:ce:a9:19:49:ee:ca:dd:06:58:ce:f3:2b:66:
9a:5f:1c:6f:23:f1:59:4f:92:c8:7d:6b:af:fc:c5:3d:e1:e8:
ca:76:39:0e:1a:32:80:09:7d:47:61:9a:cf:68:78:3b:7c:f5:
7d:4e:c9:f1:55:0f:90:bb:f8:61:f4:44:c1:51:23:01:f5:fa:
ec:f6:cd:47:57:df:89:1c:3a:08:2c:77:ed:cd:24:f5:df:f3:
f3:45:83:0b:0a:c5:43:2d:5a:31:0a:b9:53:cc:a7:89:48:44:
e1:8f:90:bf:84:fb:12:47:cc:8d:7d:52:b2:80:d0:09:69:12:
c9:03:f6:ba:66:dd:0c:e2:42:40:93:9f:5a:ed:87:f3:55:50:
de:bc:9a:b2:48:c8:45:9f:05:4e:ec:11:6c:17:e1:ec:fd:93:
b4:e6:5a:8d:7f:85:d2:7b:00:c5:ab:9b:69:ee:69:60:90:65:
60:ff:1a:32:05:28:eb:9b:e4:c1:65:37:93:4c:d0:c2:21:3d:
fd:fb:9f:42:08:1d:15:38:cb:fd:f5:49:2c:f2:ac:e5:ea:2d:
18:5a:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:20 2025 by rpki-client