Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/AxErskuM-1Vff2dCarI53JKp5n0.roa
File: AxErskuM-1Vff2dCarI53JKp5n0.roa (raw, json)
Hash identifier: XkYHdHag7C9nNn1wDFP2CdIwINIFl4KeorKgGA/XVq4=
Subject key identifier: 03:11:2B:B2:4B:8C:FB:55:5F:7F:67:42:6A:B2:39:DC:92:A9:E6:7D
Certificate issuer: /CN=fc2b218c26435fff74a02f25198cf70ef9e9a901
Certificate serial: E7135C
Authority key identifier: FC:2B:21:8C:26:43:5F:FF:74:A0:2F:25:19:8C:F7:0E:F9:E9:A9:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CshjCZDX_90oC8lGYz3DvnpqQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/AxErskuM-1Vff2dCarI53JKp5n0.roa
Signing time: Sat 01 Jan 2022 12:02:34 +0000
ROA not before: Sat 01 Jan 2022 12:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201333
IP address blocks: 193.243.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15143772 (0xe7135c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2b218c26435fff74a02f25198cf70ef9e9a901
Validity
Not Before: Jan 1 12:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03112bb24b8cfb555f7f67426ab239dc92a9e67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:2d:2e:5a:7f:0e:f6:2c:73:78:d4:f3:da:
c8:8e:4d:6b:0a:26:d0:7e:0e:9d:24:ec:37:69:a2:
a2:72:04:fe:ce:05:37:9c:a9:6e:58:5f:13:f6:4e:
ed:07:a9:0d:ec:e3:cd:39:dc:d7:b0:35:d3:d4:40:
53:f5:21:cc:d8:87:ec:f1:d5:34:c3:a9:72:6c:2f:
2c:b4:8a:ba:aa:5c:a6:dd:b9:77:d2:e4:8c:a1:04:
59:3f:5f:17:4b:1c:b0:63:39:83:1d:95:f7:ef:1c:
f7:c7:41:81:93:64:d3:63:ad:62:5d:58:ef:79:82:
0f:09:ed:f0:8e:26:20:ac:66:ac:d4:66:43:42:d5:
0b:2e:74:64:31:0d:3d:06:9f:c5:b1:11:43:ca:9b:
aa:1e:68:54:e4:d7:82:c6:4e:7c:fb:30:96:f4:85:
60:76:ec:a9:ea:8b:b6:18:64:f7:b9:5a:c1:d9:8c:
27:53:6d:41:7b:ee:c8:3c:08:65:49:69:fb:a1:62:
38:ca:ea:7c:f8:76:c8:51:26:b8:30:e0:ee:86:be:
a2:83:f2:dc:a4:77:bb:05:b0:91:26:32:83:e1:b5:
34:91:e2:0f:7c:fd:f6:9d:7e:90:53:77:0b:b2:61:
48:ed:de:50:6b:e4:f3:6d:39:97:84:e9:cb:f3:be:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:2B:B2:4B:8C:FB:55:5F:7F:67:42:6A:B2:39:DC:92:A9:E6:7D
X509v3 Authority Key Identifier:
keyid:FC:2B:21:8C:26:43:5F:FF:74:A0:2F:25:19:8C:F7:0E:F9:E9:A9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CshjCZDX_90oC8lGYz3DvnpqQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/AxErskuM-1Vff2dCarI53JKp5n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/_CshjCZDX_90oC8lGYz3DvnpqQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.184.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b6:f3:81:0b:ab:77:f9:79:d4:d1:ca:29:5b:8f:0e:36:87:
17:27:18:3c:22:6f:95:72:37:1f:bc:f2:f7:43:8d:28:64:a0:
c1:69:d7:8d:50:0f:c8:0c:00:d3:d3:26:d6:a8:6e:a0:ca:e3:
ea:30:91:21:26:42:1b:40:95:97:a6:da:77:44:66:64:37:37:
cb:af:02:5c:09:65:de:d6:a9:13:11:ef:3d:b8:1a:b5:b8:51:
ce:78:71:b9:a7:d4:eb:bb:7e:a0:e4:e8:58:3f:4a:dc:61:b9:
b4:ca:0e:39:24:c1:91:c1:bf:0a:3e:0f:88:2d:d9:c3:7a:71:
a5:3e:2e:12:bf:ad:f7:1a:0f:fd:e8:dc:4a:91:84:82:9a:cf:
d7:c5:bd:03:31:ba:1f:0b:52:94:82:ec:c8:3a:e5:9c:c5:36:
1a:7a:b7:9a:18:7c:89:a9:cf:7e:2d:e8:91:76:58:9b:4d:21:
f2:b5:39:1e:03:a3:00:b5:d3:66:58:94:21:81:92:63:7e:23:
45:95:a1:0b:76:e7:9f:91:6e:fe:cd:62:bd:8a:cd:c9:35:bc:
52:58:6b:22:e7:3f:bb:48:5d:25:1f:8b:30:5e:1a:db:8b:f4:
2d:ed:3b:f5:ab:d6:00:ca:08:89:37:ae:28:0d:04:c4:b1:51:
00:43:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:54:29 2025 by rpki-client