Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/JfFp3L9VU8I98Lw0Wvks-Ty67Ik.roa
File: JfFp3L9VU8I98Lw0Wvks-Ty67Ik.roa (raw, json)
Hash identifier: Qn0Jbw5Oy9s6q4SRqnHi5QybIaYcDC1u4zMWaIrtig8=
Subject key identifier: 25:F1:69:DC:BF:55:53:C2:3D:F0:BC:34:5A:F9:2C:F9:3C:BA:EC:89
Certificate issuer: /CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
Certificate serial: 01261789
Authority key identifier: F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/JfFp3L9VU8I98Lw0Wvks-Ty67Ik.roa
Signing time: Mon 31 Jan 2022 12:15:30 +0000
ROA not before: Mon 31 Jan 2022 12:15:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 193.25.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19273609 (0x1261789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
Validity
Not Before: Jan 31 12:15:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25f169dcbf5553c23df0bc345af92cf93cbaec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a5:1b:f3:7d:d0:27:74:ff:1b:85:a0:e8:8a:
a3:70:65:28:20:7a:3b:cf:40:ce:43:72:60:7f:ac:
37:0c:bd:77:b2:83:85:34:ea:cb:eb:8d:21:a8:62:
27:b4:c4:d0:88:fe:40:c4:ae:af:6a:68:22:b4:e9:
37:9d:21:7a:91:7d:f6:db:7b:da:b5:5d:21:5d:c1:
00:30:6f:27:02:0b:b2:a3:15:8c:f7:52:15:91:4e:
c2:40:09:d6:ca:70:87:04:49:91:9e:f3:b8:21:53:
59:36:f9:0d:c9:f2:0d:c2:b1:6c:99:a8:a2:a7:63:
b4:29:d0:2d:48:82:9f:7b:1d:66:bc:08:4e:2e:19:
3a:b2:54:ed:1b:e6:ed:ba:f5:c1:ad:3b:69:45:f2:
b3:5d:8c:46:be:bb:07:fb:c5:f2:f4:89:8c:31:2f:
9e:f3:93:4c:8c:f6:01:69:74:18:6b:9a:c2:eb:bc:
21:eb:14:84:64:a0:b7:83:d5:a6:1e:15:43:aa:ff:
3c:c0:0c:06:98:8b:fe:de:07:76:5e:1e:f7:ef:47:
fc:cf:1a:95:39:cb:4e:65:9c:d6:36:70:56:4c:bd:
fa:55:e2:4a:6e:44:b5:9b:d3:83:47:eb:e6:bf:f7:
45:52:3d:c7:e3:44:bb:e9:37:7a:d6:b2:f7:82:af:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F1:69:DC:BF:55:53:C2:3D:F0:BC:34:5A:F9:2C:F9:3C:BA:EC:89
X509v3 Authority Key Identifier:
keyid:F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/JfFp3L9VU8I98Lw0Wvks-Ty67Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/9CeuFzuErzmhDrvQfdY8LVzo_cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:21:4b:17:14:47:bf:6f:8b:b6:15:86:b1:f7:59:a2:db:e0:
35:c4:47:9f:d0:eb:7b:a1:1c:18:4c:23:9f:ac:68:3f:66:a0:
65:0c:f6:67:96:c5:23:43:2e:26:be:64:ee:d1:d8:e0:85:a3:
15:75:56:50:9d:1c:d7:9e:95:e6:58:fa:c7:16:cd:ac:ff:a1:
6a:b1:a6:a0:3e:d7:c8:29:49:e5:b4:02:8c:6d:d7:4b:f1:df:
4e:e3:d4:9e:58:4e:5a:4f:d3:c4:77:8d:e9:60:3e:19:d0:c0:
5e:0b:82:0e:66:41:c8:4e:5c:cf:39:e4:1a:ba:41:cb:cf:a5:
52:3c:2d:3f:05:24:b6:85:2c:db:90:96:0b:1a:2d:4f:73:66:
f2:36:23:88:f0:03:1e:fa:ea:17:82:50:19:e7:34:63:89:de:
32:3f:e1:95:1e:7f:a5:e3:ae:76:c5:df:3a:83:fc:53:a9:48:
a8:6e:44:b9:b7:cf:7e:a2:e9:90:b9:c7:7f:06:9e:76:7c:48:
6e:6c:09:b7:1c:fc:8c:28:ec:f4:db:c9:e9:f5:00:e8:52:11:
c4:a0:55:65:fc:b4:16:85:cc:ad:87:3b:e7:18:ac:bc:74:20:
f5:2d:b1:c6:f6:99:29:8c:c9:3c:c5:26:13:09:ae:9b:3f:04:
a4:c8:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:41 2025 by rpki-client