Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/P1qoK6FORf88VpQDvkFGJjeJUzQ.roa
File: P1qoK6FORf88VpQDvkFGJjeJUzQ.roa (raw, json)
Hash identifier: zmeH6ivbLha6Y6T7ADbAU3W0g0wySzsPR4AG+AZPy9o=
Subject key identifier: 3F:5A:A8:2B:A1:4E:45:FF:3C:56:94:03:BE:41:46:26:37:89:53:34
Certificate issuer: /CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
Certificate serial: 012B4692
Authority key identifier: F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/P1qoK6FORf88VpQDvkFGJjeJUzQ.roa
Signing time: Wed 02 Feb 2022 08:10:32 +0000
ROA not before: Wed 02 Feb 2022 08:10:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 193.25.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19613330 (0x12b4692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
Validity
Not Before: Feb 2 08:10:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f5aa82ba14e45ff3c569403be41462637895334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:33:18:70:14:e7:02:a7:ab:c4:bc:ae:b9:
0d:e9:d6:c8:5d:19:e1:57:c7:24:79:44:d9:b5:6d:
90:79:34:7e:1c:3b:f6:cf:62:ce:72:1b:93:1d:b9:
90:98:d0:eb:2a:e9:31:83:b0:92:ba:51:27:bd:47:
5b:f4:c0:ba:1e:be:48:63:dc:52:f3:a5:67:15:96:
3f:fa:5a:b4:87:7e:f2:21:6f:d7:3e:91:8a:07:f6:
a8:1a:79:4f:37:24:81:da:d2:d7:70:db:f9:ec:a2:
75:e1:1e:4b:6d:94:88:8d:6b:e8:3b:8a:72:f7:34:
7f:ea:82:17:05:51:b3:e4:4c:6b:27:88:eb:01:53:
13:f4:8f:2f:07:a3:a3:19:fb:31:ec:32:9c:6a:45:
c3:c9:1e:e2:f0:d2:c1:98:ce:b5:b1:31:88:15:b2:
dd:5a:0a:c8:fc:a9:a0:de:4f:c9:a5:f2:55:9b:de:
1a:7b:5e:28:3c:e1:03:ea:70:11:de:e5:59:f6:99:
32:30:1e:51:63:cd:44:15:c2:d8:8f:93:96:1e:06:
e6:78:c6:8f:bb:26:5e:3e:9d:9b:73:78:c2:bd:2b:
78:ab:8f:79:e7:0d:f3:76:de:ed:b6:e2:b0:e2:92:
cb:d1:8f:a5:24:bb:08:ef:62:9b:9f:86:7c:2f:7c:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5A:A8:2B:A1:4E:45:FF:3C:56:94:03:BE:41:46:26:37:89:53:34
X509v3 Authority Key Identifier:
keyid:F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/P1qoK6FORf88VpQDvkFGJjeJUzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/9CeuFzuErzmhDrvQfdY8LVzo_cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:35:fb:9c:e3:d5:b8:00:87:dd:4d:1b:50:b1:16:a7:fb:e9:
c6:af:1c:45:4a:0d:f7:3c:98:28:39:b3:f0:f4:eb:c3:10:c0:
77:c5:89:7d:34:9f:84:1a:03:1c:83:9f:cf:34:8d:b9:ac:38:
ab:c4:de:c1:0e:90:02:ac:36:ad:4c:1e:8f:09:17:1f:61:c9:
d0:de:e8:14:45:be:8a:b9:df:cf:c3:6b:ab:82:99:2a:3c:24:
62:5f:58:41:90:29:0a:84:d3:1c:e5:ff:3f:12:58:b6:d9:d6:
9d:6e:4d:ef:c2:63:2c:5c:5f:ed:95:19:a0:fb:56:48:23:24:
82:3e:bc:60:4c:df:20:a0:04:0b:a9:19:a0:af:9f:c1:72:2d:
43:85:d8:6d:b1:a5:23:f5:41:27:f7:18:69:5e:22:4f:f7:3a:
26:ba:e8:bc:4d:a9:4a:6b:a7:83:e4:18:53:93:4a:b8:aa:bf:
e7:3e:82:d9:31:5f:1c:67:e2:3f:66:c9:46:ca:77:89:5c:82:
f9:31:f0:49:f3:2e:90:bf:53:76:86:0a:a4:96:67:e7:e0:df:
69:df:93:da:c3:b5:9d:67:e5:24:08:67:68:1c:85:e8:c6:4b:
79:15:e7:af:fc:ae:9e:71:67:69:a8:d4:d3:db:fc:c1:c7:bc:
59:95:33:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:48 2025 by rpki-client