Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/9cKaO8djmErzEwxwZtM_8KNAdmM.roa
File: 9cKaO8djmErzEwxwZtM_8KNAdmM.roa (raw, json)
Hash identifier: dzzfqHjkd3eV0niTwX+2is8+DwtogAhwrGvJKpXcJNs=
Subject key identifier: F5:C2:9A:3B:C7:63:98:4A:F3:13:0C:70:66:D3:3F:F0:A3:40:76:63
Certificate issuer: /CN=2c256b1d4abb21395d97263a5fa8d3a55391db61
Certificate serial: 0107600E
Authority key identifier: 2C:25:6B:1D:4A:BB:21:39:5D:97:26:3A:5F:A8:D3:A5:53:91:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LCVrHUq7ITldlyY6X6jTpVOR22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/9cKaO8djmErzEwxwZtM_8KNAdmM.roa
Signing time: Fri 11 Feb 2022 10:10:07 +0000
ROA not before: Fri 11 Feb 2022 10:10:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62005
IP address blocks: 213.109.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17260558 (0x107600e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c256b1d4abb21395d97263a5fa8d3a55391db61
Validity
Not Before: Feb 11 10:10:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5c29a3bc763984af3130c7066d33ff0a3407663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:ab:01:aa:b9:ab:5e:00:29:b3:b8:17:90:
a2:10:72:cd:e9:09:63:77:65:45:c7:ae:72:8f:4b:
17:3b:0c:0f:e9:d6:18:40:f2:f8:fd:7b:85:00:d8:
e5:1b:83:fd:97:38:3a:54:82:60:9d:69:8f:7c:86:
f3:ea:e0:6c:8c:68:73:5a:bb:4d:d6:a0:40:1d:aa:
35:d6:3f:b5:28:2a:0b:a6:99:68:21:bf:d5:e4:eb:
41:05:42:16:78:da:05:e4:db:c0:a4:4c:75:c2:be:
e6:24:c5:3e:0c:5e:a5:60:41:49:f2:0e:14:bb:39:
c0:70:53:e6:14:5d:02:d0:8f:ed:dc:e0:fe:74:f3:
94:7f:76:fa:0e:9e:8a:52:09:73:26:ab:32:e9:dd:
5b:49:00:cb:51:07:17:02:34:64:c9:a7:41:81:61:
55:4b:9d:58:06:14:ee:df:72:fa:70:78:2f:c9:8c:
db:cc:88:50:91:b4:95:67:86:a2:58:11:8a:8d:06:
63:01:f9:57:72:40:3d:ed:f3:0d:c9:75:36:35:a3:
3a:cc:4f:42:f3:f8:6d:a6:60:ed:0b:cc:d2:24:e3:
28:55:37:c8:1c:c2:f5:b9:1e:ba:23:33:a4:b1:f4:
78:5f:88:6e:2d:7a:4f:01:e1:35:de:9c:d4:57:c9:
15:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:9A:3B:C7:63:98:4A:F3:13:0C:70:66:D3:3F:F0:A3:40:76:63
X509v3 Authority Key Identifier:
keyid:2C:25:6B:1D:4A:BB:21:39:5D:97:26:3A:5F:A8:D3:A5:53:91:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LCVrHUq7ITldlyY6X6jTpVOR22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/9cKaO8djmErzEwxwZtM_8KNAdmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/LCVrHUq7ITldlyY6X6jTpVOR22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.192.0/24
Signature Algorithm: sha256WithRSAEncryption
96:4c:dd:ec:db:26:69:cf:47:b2:fa:f8:b7:a9:e4:79:f7:02:
57:1e:02:f9:50:86:de:4f:35:f0:90:08:d9:1d:b6:d5:87:8d:
71:41:9d:88:d1:a4:df:ef:b0:8a:a0:56:63:2a:59:4f:1f:6e:
f2:2c:eb:8b:ba:83:4e:0d:7d:5a:eb:48:eb:f2:25:da:db:80:
c0:72:e8:06:47:76:4f:ab:ac:06:3f:ce:6a:f7:a8:af:cc:de:
3a:4b:5d:d0:61:86:b8:70:9c:37:dd:f2:bf:72:04:e8:4a:f7:
a0:39:94:c7:39:79:d7:1c:e1:c8:99:29:b8:ba:82:48:89:29:
03:5d:bd:f3:8e:ff:fa:e3:a1:2a:29:6d:ad:6c:14:4b:09:6d:
8a:2b:31:c8:9b:bd:6c:7c:13:22:e4:81:06:d4:81:0e:aa:ee:
ad:5f:c6:17:e8:da:a1:ee:8b:0a:54:84:a9:e4:55:b6:0f:8c:
6e:9e:b2:69:5c:0d:13:87:27:f5:07:a4:18:4f:17:10:5d:7f:
2d:59:ee:30:c9:97:30:fe:a0:01:8f:de:9f:47:6a:d0:c4:e8:
44:ec:8b:25:ef:b0:a9:fc:9e:11:27:d3:15:15:08:e3:c0:f4:
b3:7d:73:85:a5:2a:0d:d5:30:4d:08:14:aa:e1:d6:3b:44:f8:
5a:6a:4f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:55:24 2025 by rpki-client