Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa
File: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (raw, json)
Hash identifier: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=
Subject key identifier: 9F:BC:4E:00:5F:49:2C:4B:B1:17:83:C9:42:14:1B:0D:29:7B:50:91
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 019425FDCC75DAFDAAF13EFFA5F1128B6E79
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31528
IP address blocks: 193.16.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cc:75:da:fd:aa:f1:3e:ff:a5:f1:12:8b:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fbc4e005f492c4bb11783c942141b0d297b5091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:87:16:da:85:c0:c6:e3:f0:62:c0:dc:fb:
09:3b:c0:00:a4:f2:2b:81:06:e6:9b:5c:57:5e:87:
9a:50:05:2f:18:16:c1:90:dc:c6:98:08:cc:55:88:
03:ba:b8:fd:cf:da:ed:bd:df:5f:fd:28:17:42:58:
ba:95:c4:33:8e:ac:56:ec:8e:9f:02:25:12:d5:b1:
e4:ee:c3:bb:df:f8:76:44:fa:b2:17:85:65:78:97:
43:46:29:27:89:3a:80:73:30:6c:3b:2e:4e:44:98:
5e:e8:ee:87:8a:67:3c:5b:ad:a9:76:cc:42:59:4b:
70:0a:d8:82:c4:fb:e9:f5:d9:bb:eb:e5:3e:2f:55:
30:75:54:bd:84:44:fe:d2:d9:c4:43:4d:24:5d:29:
e8:bc:90:70:4d:97:4f:59:50:e7:91:ea:c8:d3:38:
f8:b1:1e:ad:7f:ef:a7:62:5b:54:77:3f:f4:f1:d6:
8e:2f:16:c6:76:15:f7:cd:f3:0d:a1:2b:f0:d7:0f:
68:ad:60:0f:97:06:e7:52:51:40:bd:4d:f4:03:57:
62:ff:e2:45:68:46:70:a4:14:b4:99:b4:21:e9:45:
a2:6a:1a:c7:e2:46:92:7a:da:89:01:62:4b:55:dc:
82:42:ed:40:ed:b5:ac:0b:0a:82:6e:9b:62:99:45:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BC:4E:00:5F:49:2C:4B:B1:17:83:C9:42:14:1B:0D:29:7B:50:91
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:46:ac:be:0d:ef:98:2b:ed:c4:25:25:d1:63:41:e5:d6:54:
47:0d:a8:ab:0a:fa:eb:d2:63:d7:e2:52:f1:46:6f:5a:0f:97:
67:40:28:cf:3f:e3:ad:ea:b0:5e:a4:90:78:56:71:fc:d0:a3:
9d:87:68:2f:65:db:26:3e:63:f5:07:47:7c:e5:eb:bb:d1:8b:
88:59:5f:e5:0e:6e:ff:86:9f:04:81:d9:0e:1c:df:ed:02:50:
4f:9c:bf:84:fe:74:36:52:3c:68:91:75:d4:97:f1:d5:bb:f1:
9b:93:57:e6:0b:a8:17:08:ab:c5:d5:f1:7b:11:37:1d:f0:be:
94:9c:a8:00:17:ab:15:df:55:d3:be:86:be:b8:bd:06:f9:7b:
5d:99:c1:90:fb:0c:d8:1b:7a:b8:07:b6:89:42:11:b9:59:66:
25:aa:0a:f0:7a:2e:8e:aa:b2:ae:49:dc:33:bb:74:2e:a6:09:
44:b2:c1:a8:3b:1f:4e:70:24:7c:ef:62:39:96:05:4d:32:9d:
92:27:74:39:88:c5:7f:39:10:79:da:69:3e:73:1b:d6:81:5c:
22:36:ee:81:fb:6e:6f:a2:75:80:59:38:e9:d4:c0:3b:14:a0:
e6:d8:74:90:bd:4d:5c:aa:65:2a:c9:a9:35:f6:4f:08:bf:41:
e9:b5:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:54 2025 by rpki-client