Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa
File: n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa (raw, json)
Hash identifier: BVGoc++GdN0W0NrCtzzymI9R4sw/BZhgTYZXjkBBFbU=
Subject key identifier: 9F:45:84:F6:BC:28:70:21:C2:61:C0:57:08:A6:5F:A7:14:37:1B:63
Certificate issuer: /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Certificate serial: 019423D6C7F2439539C5B2CC406A34DFDC24
Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203568
IP address blocks: 193.222.252.0/23 maxlen: 23
193.223.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c7:f2:43:95:39:c5:b2:cc:40:6a:34:df:dc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f4584f6bc287021c261c05708a65fa714371b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:db:c8:8c:c0:23:99:fc:c4:e8:74:0e:ad:
fd:e6:00:fc:cd:4e:10:41:59:04:c7:aa:38:e1:43:
06:3c:f2:62:19:1f:e1:b7:22:a4:0b:52:62:e5:a4:
ac:f6:c8:80:9a:92:01:8f:74:a5:a9:d5:1c:41:ca:
78:21:79:91:68:cc:40:1e:4b:42:65:7c:6c:47:5f:
bf:c8:85:40:a7:fd:53:91:bf:6d:87:28:6e:9d:34:
a0:3b:60:c8:62:6d:0d:4b:32:0b:32:e3:d6:80:94:
47:6d:f6:5d:f0:51:33:ce:ac:85:0a:5a:87:e9:32:
6e:1c:73:ff:27:ff:d1:39:44:2b:de:74:71:29:d0:
71:39:5b:c2:47:50:27:2b:5b:04:40:0f:dc:09:dd:
e7:ae:db:cd:5e:4f:72:eb:26:f2:df:ae:75:c0:ea:
8f:d6:c1:f6:d2:68:c6:7f:c3:83:51:68:29:fc:fe:
d9:ac:7c:85:ad:c9:2b:b1:3a:4e:02:2d:c3:90:b3:
cc:d6:a7:a2:17:8b:c4:23:e0:a2:ad:c4:7b:70:92:
59:a6:a9:2d:6d:4e:3c:94:03:2b:38:0f:4a:0f:1a:
a0:65:a0:18:bb:8c:3d:b7:fc:e3:74:7c:30:7a:5c:
ac:ee:c7:3b:cf:29:32:09:95:89:b9:67:ec:0f:f5:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:84:F6:BC:28:70:21:C2:61:C0:57:08:A6:5F:A7:14:37:1B:63
X509v3 Authority Key Identifier:
keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.252.0/23
193.223.70.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:b1:c8:1b:35:d1:cd:a4:15:0f:ad:66:2b:8c:bd:0d:5b:fa:
d1:d2:fa:b0:03:a0:49:d0:dc:a1:59:9b:2a:63:c8:9b:13:1f:
b0:93:92:c8:69:d8:48:84:55:c1:51:a7:fd:d1:ac:ce:49:a4:
ab:d6:e8:27:87:56:ca:b7:df:b5:08:cd:5f:e7:4a:bd:f5:f4:
45:ba:fd:49:a1:f5:da:31:a6:a7:19:16:f7:22:0d:03:bb:47:
13:47:9c:f3:6d:8e:e4:b7:c8:61:26:c3:31:06:f9:c2:35:c8:
76:6b:2b:bf:9d:1d:71:ed:ca:1c:36:75:b3:4f:e3:6d:b0:6f:
db:bc:54:0e:93:87:6a:6d:35:08:15:25:1a:1a:95:31:e2:72:
c0:05:0e:a8:a6:42:b2:95:4d:8b:d8:89:f9:e5:7b:9e:06:24:
40:1c:58:f6:a3:3d:fd:fe:a0:aa:1a:5d:a6:d0:7e:fe:3c:34:
81:b1:0c:87:c0:ab:cc:2d:12:99:8f:ea:cb:83:27:eb:6f:48:
56:8d:cf:ce:85:60:ed:6c:e3:a5:d3:00:6c:41:aa:90:7b:ae:
9d:d2:79:24:39:81:d3:8a:3e:15:70:7d:7a:7d:d7:51:88:7d:
2f:c6:70:5c:54:c1:aa:cb:95:52:f6:ee:a1:78:49:ef:ac:69:
e4:df:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:06 2025 by rpki-client