Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/s09ox-0oucdTFbbwX-BILxORmdM.roa
File: s09ox-0oucdTFbbwX-BILxORmdM.roa (raw, json)
Hash identifier: sTXijC43DmXPAftQmaq4v8VtNPlutWDgemMY0h6wAxU=
Subject key identifier: B3:4F:68:C7:ED:28:B9:C7:53:15:B6:F0:5F:E0:48:2F:13:91:99:D3
Certificate issuer: /CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
Certificate serial: 01856FF96317E1E404ADB5F5F19CE6C75771
Authority key identifier: 1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/s09ox-0oucdTFbbwX-BILxORmdM.roa
Signing time: Mon 02 Jan 2023 00:54:52 +0000
ROA not before: Mon 02 Jan 2023 00:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 188.93.139.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:63:17:e1:e4:04:ad:b5:f5:f1:9c:e6:c7:57:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
Validity
Not Before: Jan 2 00:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b34f68c7ed28b9c75315b6f05fe0482f139199d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:bd:46:27:11:db:6b:b6:26:37:09:cf:bd:
81:d0:c4:59:ec:d2:83:af:d8:71:ec:8d:78:57:13:
d1:4f:29:5d:42:3b:ab:16:3b:fc:57:5d:51:2c:61:
e9:47:3f:86:34:97:1b:5e:43:01:12:d9:d2:4a:37:
bf:c7:6a:11:17:43:c2:9d:b4:fe:06:65:91:8f:63:
bc:80:75:ef:f2:88:46:40:a0:fa:c1:8c:c0:84:b7:
a4:96:e7:a1:02:73:3a:80:a4:70:b5:3e:50:5f:d2:
79:43:6f:e3:b7:cc:04:bf:4a:2b:73:f4:44:1d:5e:
27:3a:23:7c:37:86:0c:1b:99:9d:66:af:77:c7:57:
b8:fc:9f:6d:c5:ec:f5:46:f9:57:d8:c8:e9:58:fe:
51:8f:63:3a:f9:60:3e:fa:e5:a9:2b:ee:ec:78:b3:
a2:4e:b5:9d:1b:d2:af:be:d6:6d:ae:60:6b:24:ac:
7a:55:de:7f:48:a0:ce:c1:ed:0f:d4:4e:6f:41:71:
06:c5:5b:72:a7:40:42:6e:be:0a:2d:43:5c:b8:ca:
42:2e:3d:ce:ba:6d:4b:6a:d3:9d:a7:60:1d:4e:a8:
65:b3:e2:65:3a:1a:9e:de:62:58:41:8e:c9:50:a1:
58:be:b0:34:da:5a:4f:25:b4:9f:c5:17:88:75:49:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4F:68:C7:ED:28:B9:C7:53:15:B6:F0:5F:E0:48:2F:13:91:99:D3
X509v3 Authority Key Identifier:
keyid:1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/s09ox-0oucdTFbbwX-BILxORmdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/G3McnNHvo4lySqJm_ygPTBCMe-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0a:58:3e:5c:4b:e2:11:40:89:33:4a:f2:f7:17:36:f7:e0:
a7:99:95:1f:21:5b:74:9f:ab:5c:db:a1:f6:63:af:37:95:6a:
22:a4:92:47:30:f9:5a:02:8b:24:62:99:3c:05:74:93:34:74:
7a:1d:1d:cb:98:59:0d:3b:e2:48:f5:92:71:58:8e:68:8c:a5:
bc:42:f3:ec:b3:84:fd:c6:cf:7c:31:c1:5a:5f:d9:95:02:68:
bf:ed:3c:a4:af:8f:0e:88:63:63:de:6e:18:3d:dc:57:1b:92:
7d:66:e0:29:14:75:26:27:7e:49:8c:08:37:d5:8f:e4:3d:9b:
34:b6:b1:10:cf:20:6d:52:86:13:fb:96:60:10:42:1d:77:fe:
96:56:a6:ce:cf:88:56:53:f7:c8:ce:7d:14:93:a1:e7:80:db:
1d:3a:0d:ca:4e:ff:ac:50:b0:ae:29:9b:55:5d:ea:d7:b5:67:
dd:b3:b5:48:42:8c:39:4b:5f:5d:76:26:43:b8:73:87:8d:33:
0e:1b:7f:f6:fd:f8:60:fd:ef:7f:fa:37:3c:7a:21:4d:43:d6:
cf:05:35:f7:58:75:ca:d4:cd:ce:c8:a8:8e:3b:41:0f:da:d2:
b1:0b:65:7a:eb:e5:34:16:0b:6a:f9:23:27:42:bd:54:64:da:
cf:5b:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:03 2025 by rpki-client