Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/m9LHnns4RIbh_UyaqfgEtIHCWH0.roa
File: m9LHnns4RIbh_UyaqfgEtIHCWH0.roa (raw, json)
Hash identifier: oY1osKPKClXjk/P0SURJDS+aXZG15oSNjMfPhBxP9Xk=
Subject key identifier: 9B:D2:C7:9E:7B:38:44:86:E1:FD:4C:9A:A9:F8:04:B4:81:C2:58:7D
Certificate issuer: /CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
Certificate serial: 02275881
Authority key identifier: FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/m9LHnns4RIbh_UyaqfgEtIHCWH0.roa
Signing time: Sat 01 Jan 2022 06:52:48 +0000
ROA not before: Sat 01 Jan 2022 06:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.163.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36132993 (0x2275881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
Validity
Not Before: Jan 1 06:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bd2c79e7b384486e1fd4c9aa9f804b481c2587d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:f5:09:f0:43:19:71:e2:1b:9c:15:cb:c9:
88:92:a5:be:80:f6:60:da:8d:0a:2b:8d:97:2a:7d:
75:cb:1b:c8:cc:a1:d0:f9:ae:cf:8d:38:f0:05:09:
c8:fb:7d:e0:e4:b0:11:50:63:58:e8:9e:08:64:28:
2f:54:cb:29:9b:59:de:fd:60:83:e6:45:d0:cc:81:
29:08:53:59:0e:3d:e4:91:95:11:f4:1c:39:43:55:
b8:1a:b9:8b:34:f7:7e:8f:cb:70:ec:28:49:19:7c:
ee:c2:42:f7:a3:e7:89:0a:cd:65:db:86:b8:51:e5:
21:15:69:d2:85:58:b6:24:ae:8a:71:cd:85:74:d8:
83:6d:a6:bb:d1:b7:90:d2:61:17:c5:87:09:60:be:
0e:4c:c8:23:91:11:63:dd:01:24:f6:0d:cb:4e:d8:
89:b8:ce:95:1e:08:c4:b5:a2:e5:82:84:6b:e6:11:
ad:3b:d1:12:ca:e2:10:0a:56:d2:e8:5f:df:96:44:
a7:81:56:05:11:99:2a:75:47:93:b0:fc:d0:41:7f:
ec:3d:29:23:74:ec:50:29:10:bc:43:02:04:81:fc:
69:f3:bd:e5:29:c9:70:c5:3b:18:2d:43:1b:4e:f1:
d5:e7:00:19:21:f9:ad:d4:3d:4e:d5:ec:ee:51:8d:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:C7:9E:7B:38:44:86:E1:FD:4C:9A:A9:F8:04:B4:81:C2:58:7D
X509v3 Authority Key Identifier:
keyid:FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/m9LHnns4RIbh_UyaqfgEtIHCWH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/_3mX739_Hh2hDlwdmOoxR0ttuxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.127.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:1c:53:65:ed:bf:a3:7c:71:65:6f:ff:db:9e:73:61:36:e7:
9b:61:80:18:3c:5f:95:a8:ee:e0:56:89:54:53:ad:55:e2:80:
72:c0:fe:bf:08:e4:ca:ed:96:d0:2f:b5:69:8b:3f:f4:4a:da:
2f:d8:59:97:df:f9:d7:d8:1c:07:37:1a:e5:5c:36:3d:9e:df:
61:ac:49:f4:ed:cb:a3:3e:d4:76:2a:37:fb:03:1a:6f:16:00:
eb:02:16:53:5e:0d:e2:ce:ad:e6:f2:c0:bb:c8:43:68:53:02:
eb:91:ee:41:13:ed:ec:3d:67:1b:54:63:d1:01:a2:0e:c9:3a:
f7:9d:7c:81:aa:50:16:4f:17:1c:58:cd:43:1e:4a:08:fb:a4:
0e:ea:f4:46:61:2a:8b:4d:17:4a:7c:4a:c8:58:f3:fb:38:f6:
f6:8c:24:f4:ec:3a:6d:e6:99:2e:2b:7b:4e:d4:a3:cc:1d:27:
43:90:38:84:b4:08:88:89:f9:0e:d4:05:29:26:d6:2f:5a:41:
f2:b0:d5:dd:e9:dd:89:06:58:36:97:39:44:78:b7:f1:52:19:
42:b5:97:43:02:0f:76:21:bb:65:41:a1:15:31:66:df:f3:5e:
47:23:c0:5f:0b:c4:bf:ee:39:af:d9:ed:2e:70:2a:64:c1:f7:
d7:c1:cc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:41 2025 by rpki-client