Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/puOcdnUGH_E4xORVozPUYmGvb7o.roa
File: puOcdnUGH_E4xORVozPUYmGvb7o.roa (raw, json)
Hash identifier: cebPphYogRpTPoQ0oz8E4xa4Rk9dzS+7ygV2vBY2cy8=
Subject key identifier: A6:E3:9C:76:75:06:1F:F1:38:C4:E4:55:A3:33:D4:62:61:AF:6F:BA
Certificate issuer: /CN=bd2aac0640e07c735e13488ae87035bd083b5a21
Certificate serial: 01857169DB5C3471334D09155ECFA1B40D70
Authority key identifier: BD:2A:AC:06:40:E0:7C:73:5E:13:48:8A:E8:70:35:BD:08:3B:5A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSqsBkDgfHNeE0iK6HA1vQg7WiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/puOcdnUGH_E4xORVozPUYmGvb7o.roa
Signing time: Mon 02 Jan 2023 07:37:20 +0000
ROA not before: Mon 02 Jan 2023 07:37:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16177
IP address blocks: 193.41.176.0/22 maxlen: 24
194.9.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:db:5c:34:71:33:4d:09:15:5e:cf:a1:b4:0d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2aac0640e07c735e13488ae87035bd083b5a21
Validity
Not Before: Jan 2 07:37:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6e39c7675061ff138c4e455a333d46261af6fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:c8:38:0e:ac:35:21:86:d5:ae:78:7a:d7:
e4:99:89:19:af:01:6c:7f:2d:67:52:e3:99:35:8f:
b4:f3:99:27:39:c5:82:71:d0:4a:e6:a2:55:4d:13:
9b:6e:0f:ad:2f:c7:13:13:8b:7b:4f:c1:23:e7:49:
e2:65:af:6f:32:ed:ec:ad:7d:93:05:42:0f:84:79:
92:91:53:70:20:c0:43:fc:e7:a5:5d:3a:0b:4c:35:
0c:79:c6:c6:6b:18:d2:8f:6a:90:7a:89:a1:60:7c:
00:b1:31:b7:0c:54:37:19:fd:df:6a:af:3b:37:24:
05:4a:4f:d1:ec:41:83:67:0f:c1:36:f8:72:a1:8b:
dc:bc:8e:56:c4:38:f6:8d:dd:28:e8:c4:1d:71:a5:
cc:b8:cf:a4:4e:9e:b9:92:da:2e:62:29:73:f6:1b:
bb:b7:62:aa:12:7a:0f:9b:7c:11:ec:e2:9a:6f:4e:
90:3e:d4:83:5b:df:d0:16:eb:68:25:55:7a:8f:fd:
4a:16:0f:eb:0a:88:01:ec:2e:95:e5:02:d1:e2:92:
e5:34:bb:b7:a4:96:b3:5c:2e:4f:5b:93:b9:a1:74:
90:23:f9:17:2e:be:09:96:b0:ba:e9:ee:81:b5:f0:
c4:13:32:39:c1:9f:38:04:67:e6:14:7e:5f:a4:38:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E3:9C:76:75:06:1F:F1:38:C4:E4:55:A3:33:D4:62:61:AF:6F:BA
X509v3 Authority Key Identifier:
keyid:BD:2A:AC:06:40:E0:7C:73:5E:13:48:8A:E8:70:35:BD:08:3B:5A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSqsBkDgfHNeE0iK6HA1vQg7WiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/puOcdnUGH_E4xORVozPUYmGvb7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/vSqsBkDgfHNeE0iK6HA1vQg7WiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.176.0/22
194.9.220.0/23
Signature Algorithm: sha256WithRSAEncryption
52:73:c4:e8:b6:2f:73:72:6a:85:86:33:39:cb:f7:c0:66:33:
27:a3:53:07:fa:20:0b:98:21:7a:05:5a:a3:dc:66:2a:5f:95:
4b:8f:45:ad:d6:55:4b:4b:48:9e:b7:54:9b:76:1b:69:ab:ed:
7f:fb:d5:44:08:06:e0:5e:12:68:34:90:76:70:d6:a8:88:a5:
ba:e1:03:53:83:8c:52:fd:f0:5f:69:1d:e8:ab:d0:a3:fc:46:
62:97:45:b0:b3:6e:1e:c3:56:03:c3:d1:fd:32:5d:e8:60:b7:
25:2c:4c:88:3e:cc:00:a5:36:55:71:a7:a3:6b:f7:ad:1b:34:
96:d9:97:8b:78:20:dc:d7:95:f6:93:18:82:4b:4b:0e:70:cf:
36:3c:5c:93:88:aa:b7:95:2d:a7:59:97:c0:47:61:8b:dd:af:
cf:c2:f0:0d:f2:e8:ae:60:85:8a:e6:f5:8a:ad:03:ae:89:5c:
ec:c8:b6:1d:17:6b:21:85:fe:02:5d:bd:33:08:d7:49:f3:bd:
70:8e:6d:d6:c4:92:db:d4:42:b9:f7:ea:82:8c:01:f1:f0:d7:
94:45:59:66:58:9b:13:a7:d2:a6:0a:95:f5:0a:15:bf:5a:28:
7d:1e:d2:8a:f7:c0:84:50:c1:f8:bb:65:4c:74:f8:df:42:8a:
3c:19:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:25 2025 by rpki-client