Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa
File: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (raw, json)
Hash identifier: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=
Subject key identifier: D0:BF:F1:E4:AA:C9:D3:23:8D:61:92:FA:3A:15:E7:9C:8F:4E:37:48
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 0194258EDB15A866C3C1AA04A7C7D02FFB9C
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196971
IP address blocks: 193.105.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:db:15:a8:66:c3:c1:aa:04:a7:c7:d0:2f:fb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0bff1e4aac9d3238d6192fa3a15e79c8f4e3748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:3f:e2:35:15:a1:91:54:b1:ed:19:7d:3f:
61:84:bd:ba:51:fd:f5:b4:17:50:ea:3e:1f:e6:ff:
cf:68:cd:10:64:2d:8d:41:f4:a7:a5:9b:73:32:a2:
53:6e:a0:05:9f:6c:0f:3e:8c:99:22:88:68:92:08:
a1:eb:fa:c1:40:6e:a4:21:82:d9:39:05:28:e4:cb:
e9:72:8d:03:4f:3d:4c:fd:88:b2:d6:6a:14:ec:4d:
34:dd:cf:90:aa:3d:f9:99:eb:76:5b:2e:92:6c:6a:
5e:4d:7e:42:46:1a:a6:6f:48:96:9b:70:74:8a:de:
93:31:25:49:1b:07:ce:6b:03:a1:e6:fe:50:ee:7b:
37:81:2a:af:08:53:07:82:10:ea:15:fd:7b:50:ae:
d1:60:70:52:de:43:78:f0:5a:e2:d2:ea:b3:c9:2e:
24:be:fb:86:37:8c:c1:0e:17:f7:d5:77:86:4a:d7:
89:dd:8a:39:d3:7b:5e:dd:d7:5e:6b:0b:a7:ad:c0:
99:6a:f3:d4:36:d5:b4:d9:2d:a5:42:c2:ad:ef:47:
26:0d:70:07:6c:c4:83:91:3a:b3:32:74:83:4d:f3:
39:6d:51:b6:4f:90:d6:dc:81:bd:c4:b1:45:3f:c8:
09:d1:62:d7:10:ec:e9:e8:24:0a:a0:50:ce:3e:c6:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:F1:E4:AA:C9:D3:23:8D:61:92:FA:3A:15:E7:9C:8F:4E:37:48
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e3:fd:56:be:a3:c0:52:d0:a8:92:75:1a:9a:48:f0:b1:fb:
2c:07:08:f7:cc:6b:da:72:09:84:d6:d8:41:6e:ec:29:92:26:
5a:6f:04:a2:74:98:d3:9a:fc:38:60:39:bf:2e:4d:75:7a:b5:
52:8e:48:69:32:8e:be:52:59:2a:d2:5a:96:d2:26:77:7a:6b:
46:f3:49:5f:a5:89:81:99:dd:c6:ea:1f:3a:e4:ab:f3:ea:69:
17:fb:a8:2a:02:25:96:dd:48:ad:a2:bb:51:5c:ec:05:43:aa:
f2:57:c8:44:19:b0:18:19:c7:27:5b:92:2e:82:86:89:44:e4:
f5:48:5e:e0:95:b6:4c:6d:fc:c1:b9:dd:49:c6:cf:9e:bc:8f:
50:ae:d3:d2:1f:9a:fb:13:2f:f4:c3:97:a2:e9:bc:49:69:6e:
02:00:ec:30:f2:04:4e:39:f6:f0:2d:6d:d7:3b:dd:3a:b1:6f:
cd:63:1c:a8:e5:9e:d5:91:e0:d6:40:09:f3:7b:f1:64:de:48:
43:d7:b7:ea:43:8d:20:4e:3c:b0:28:ff:3f:bf:8c:32:3e:f5:
33:a5:b0:ff:f9:9f:72:86:c0:dd:65:7e:f6:a6:a6:cb:f8:f3:
b5:18:33:81:56:bb:3b:fd:9c:aa:a1:56:b9:69:5d:0b:46:e0:
3a:44:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:31:21 2025 by rpki-client