Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/N5AiFl4R9XpssxC7o7oxsz4gcbI.roa
File: N5AiFl4R9XpssxC7o7oxsz4gcbI.roa (raw, json)
Hash identifier: 7WfMjYyqv0nZm5WW8+xHPFcRW7pZtHWWyc08tX5Qcps=
Subject key identifier: 37:90:22:16:5E:11:F5:7A:6C:B3:10:BB:A3:BA:31:B3:3E:20:71:B2
Certificate issuer: /CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Certificate serial: 01889171F74F7561A25D2998FEFF8C17E473
Authority key identifier: AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/N5AiFl4R9XpssxC7o7oxsz4gcbI.roa
Signing time: Tue 06 Jun 2023 16:02:25 +0000
ROA not before: Tue 06 Jun 2023 16:02:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 193.163.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:71:f7:4f:75:61:a2:5d:29:98:fe:ff:8c:17:e4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Validity
Not Before: Jun 6 16:02:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=379022165e11f57a6cb310bba3ba31b33e2071b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:12:21:01:9b:7b:68:f8:ee:1b:f1:8f:09:
fd:2c:b1:c1:4c:b3:a2:a0:ac:98:83:16:e1:40:c0:
f5:17:e1:c9:67:2a:b2:70:d1:2b:ab:2f:37:13:8e:
35:6b:8e:42:c3:07:2c:60:62:b6:52:56:c3:85:de:
f1:72:e7:80:19:55:54:00:21:72:01:e4:e6:ee:e2:
a2:1e:1f:4d:b1:07:f6:85:72:ce:00:53:29:68:2a:
7b:6a:9a:99:96:62:42:da:cb:f4:81:43:39:b3:58:
8a:8a:cc:ae:2f:be:5a:ec:8e:33:a0:62:18:56:17:
8e:32:ea:98:db:a7:e5:8f:ed:2d:b6:9e:5d:c3:94:
bc:39:95:0d:99:62:c4:8f:41:bb:39:f0:ed:d2:10:
5a:5f:5b:ea:b5:47:9d:8d:6b:c6:b2:56:05:de:04:
77:5e:30:8c:1d:8e:ad:0f:5f:1d:70:45:06:da:22:
10:3f:a4:d3:9a:b4:90:b9:50:11:29:9a:e2:93:60:
47:3a:59:85:08:aa:ad:7b:40:30:6f:5f:e6:45:3d:
66:58:6a:29:d7:bc:a7:68:8f:71:ac:17:7b:3e:23:
49:1c:30:a0:11:1b:94:ae:27:19:5d:03:b7:6e:8e:
72:4c:d1:b6:f5:48:b6:19:74:cb:26:11:d2:bb:46:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:22:16:5E:11:F5:7A:6C:B3:10:BB:A3:BA:31:B3:3E:20:71:B2
X509v3 Authority Key Identifier:
keyid:AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/N5AiFl4R9XpssxC7o7oxsz4gcbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/qyfU9itbqY36V9c9bdWJdZbqc-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0f:79:69:71:76:aa:0b:e4:e1:70:4a:7a:02:a9:2f:e0:b2:
44:f5:17:03:94:52:f0:9f:7f:df:1f:2c:3c:32:f9:6d:45:54:
20:be:de:ad:a6:c5:92:f6:a9:cb:42:36:02:bc:b6:ff:fa:6c:
41:df:3a:2a:a7:56:17:63:b8:81:88:67:54:48:96:39:2c:93:
96:55:8b:bd:23:b5:ab:8d:80:3b:8c:09:4d:e7:56:fa:c5:3a:
82:61:65:3f:36:21:87:04:a3:58:34:a7:65:4d:4c:bf:a5:65:
c2:8c:82:18:4a:86:e7:e1:9a:99:35:fb:2c:b3:81:37:95:95:
00:4e:44:50:a5:a5:df:9a:ee:02:26:21:b9:a7:97:b0:2a:f3:
2a:4a:84:6b:77:2b:e7:31:3e:a1:8d:15:81:a2:0e:c3:90:c8:
75:8d:16:63:71:03:ba:8c:04:46:b1:71:cd:21:66:90:04:2e:
0a:ff:11:24:75:f2:59:63:2e:44:15:c4:0b:50:df:61:4f:cb:
0d:86:75:76:bf:63:ac:80:ce:c2:bd:d0:6d:67:49:2d:00:9a:
1b:a4:6f:5d:85:e9:14:98:8f:c4:d1:26:4f:78:b5:5c:47:74:
cc:11:de:90:08:a0:df:4e:2d:2a:c7:0e:0d:8e:de:55:fd:f5:
e0:b0:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:32 2025 by rpki-client