Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a458cc-9074-4086-8cf5-487d6b5eb3a6/1/p83o8HXQCXmd7fbKCwP4w81CLug.roa
File: p83o8HXQCXmd7fbKCwP4w81CLug.roa (raw, json)
Hash identifier: iMSILurEAETBd1+VJkTvUHiZJkImgeyS0QsMOFTijyc=
Subject key identifier: A7:CD:E8:F0:75:D0:09:79:9D:ED:F6:CA:0B:03:F8:C3:CD:42:2E:E8
Certificate issuer: /CN=0744de65b9c496f0e1b4e36f4f9f2a560436fe4f
Certificate serial: 01857246A7C0024C867ED64F4EB7F13B0F88
Authority key identifier: 07:44:DE:65:B9:C4:96:F0:E1:B4:E3:6F:4F:9F:2A:56:04:36:FE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0TeZbnElvDhtONvT58qVgQ2_k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a458cc-9074-4086-8cf5-487d6b5eb3a6/1/p83o8HXQCXmd7fbKCwP4w81CLug.roa
Signing time: Mon 02 Jan 2023 11:38:30 +0000
ROA not before: Mon 02 Jan 2023 11:38:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.163.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:a7:c0:02:4c:86:7e:d6:4f:4e:b7:f1:3b:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0744de65b9c496f0e1b4e36f4f9f2a560436fe4f
Validity
Not Before: Jan 2 11:38:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7cde8f075d009799dedf6ca0b03f8c3cd422ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:b3:42:5d:10:a3:0a:4e:f2:80:5c:d9:72:
19:89:81:9e:21:7b:ad:09:ca:11:96:da:05:cb:7f:
f8:19:a5:ce:05:57:50:b5:ed:39:ca:8c:ad:c2:f5:
de:b6:c2:ec:a8:d9:ba:fe:f7:18:cf:87:ac:9d:b9:
fe:1a:9e:86:13:32:40:15:50:93:05:2f:b3:ab:d7:
55:8e:14:a1:a2:77:7e:bc:c7:b6:49:f5:3e:f2:62:
64:83:4e:86:89:ae:d1:71:2e:d0:b6:95:fa:de:0d:
a4:ca:de:3e:40:91:ab:07:68:21:57:7f:c3:bc:b9:
e1:2a:68:c4:76:23:22:ec:15:2f:07:ff:d8:4d:7c:
7c:66:76:ed:1a:44:c9:53:de:94:72:f1:97:b7:20:
fc:dc:3e:7e:0b:55:b4:7f:57:af:3c:9e:a7:b1:95:
12:a4:3c:1b:94:22:0c:3b:21:ee:1d:8b:1c:56:b1:
61:a6:44:cc:1a:73:b6:17:3e:71:7d:2d:fd:a0:60:
09:88:4a:8e:6a:12:ac:93:c3:78:5d:f9:16:1b:f0:
3d:2f:c9:bc:a5:79:c8:c7:aa:0a:7f:50:e3:4b:ce:
93:86:ec:a1:a4:33:17:ea:9e:04:56:6a:99:5b:cd:
9e:d9:5a:43:58:5b:a4:50:a7:8e:52:1f:28:5a:77:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CD:E8:F0:75:D0:09:79:9D:ED:F6:CA:0B:03:F8:C3:CD:42:2E:E8
X509v3 Authority Key Identifier:
keyid:07:44:DE:65:B9:C4:96:F0:E1:B4:E3:6F:4F:9F:2A:56:04:36:FE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0TeZbnElvDhtONvT58qVgQ2_k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a458cc-9074-4086-8cf5-487d6b5eb3a6/1/p83o8HXQCXmd7fbKCwP4w81CLug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a458cc-9074-4086-8cf5-487d6b5eb3a6/1/B0TeZbnElvDhtONvT58qVgQ2_k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:cc:a4:bd:cc:ec:d4:40:af:27:f8:b1:87:c9:1e:8f:b5:95:
13:32:0b:6b:f9:3a:6e:4e:25:e5:e7:e7:8a:b9:51:82:92:b4:
d9:35:55:de:50:f8:82:45:d1:46:b9:0b:5b:76:96:83:13:17:
40:bf:02:35:ea:a9:06:d2:cc:2d:4a:3c:f4:75:f3:e6:25:f1:
22:05:12:0e:18:06:de:49:d0:5b:85:54:3e:a9:2e:e0:15:27:
9c:fa:00:6b:32:22:01:02:9b:ff:97:75:79:c1:f8:66:aa:9c:
44:c1:22:a4:d4:3f:31:ed:d3:15:8a:0d:bc:cc:d3:1c:82:d7:
4b:0a:f3:b3:b8:29:4d:94:ed:ad:96:5f:26:3e:0e:fd:8d:e1:
d7:95:7e:8d:6a:f3:ca:9a:ce:a2:82:76:54:f4:dd:3b:8a:fd:
b2:b2:19:93:32:ec:cc:32:64:e9:56:d1:0c:db:df:9b:a9:79:
ac:ca:73:7c:20:c8:e0:04:16:8d:e6:90:5f:0e:c5:d1:60:b9:
02:22:d1:96:0e:75:1b:9f:c2:06:97:cb:6e:18:42:60:dd:5e:
6b:7f:e8:f7:b3:f0:70:66:91:15:e7:d2:4d:58:cd:a1:33:27:
ae:76:51:e8:5e:6c:92:b4:3a:61:57:b5:13:4a:9d:ad:d5:1d:
bb:06:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:33:33 2025 by rpki-client