Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/pN69twvyZABbPo7Ok5_EWfDUyro.roa
File: pN69twvyZABbPo7Ok5_EWfDUyro.roa (raw, json)
Hash identifier: CG/ZVDIhzRUhgGR9ywid3sz9a/fdJ4CGJoromVAU+J0=
Subject key identifier: A4:DE:BD:B7:0B:F2:64:00:5B:3E:8E:CE:93:9F:C4:59:F0:D4:CA:BA
Certificate issuer: /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial: 0185701533F77719D222F325934EAC0BC5C3
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/pN69twvyZABbPo7Ok5_EWfDUyro.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.26.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:33:f7:77:19:d2:22:f3:25:93:4e:ac:0b:c5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4debdb70bf264005b3e8ece939fc459f0d4caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:e4:1f:5f:14:68:d0:a1:ba:f7:5b:8f:ca:
34:8d:49:7c:d3:d4:4b:4e:18:ae:2b:59:27:c2:fb:
25:14:a0:0e:a3:46:fa:f9:05:11:f0:21:54:f4:0d:
5c:3f:a2:b2:76:d2:45:12:4c:17:46:2b:77:44:5e:
6a:e6:c5:91:5f:72:58:56:92:a1:f1:32:7d:93:a6:
af:40:98:70:91:f1:e7:06:27:94:6b:02:76:22:86:
06:3b:68:17:09:e3:a7:c5:6d:a4:8e:b1:0f:f5:65:
89:54:b7:8d:94:91:19:58:28:b5:c0:f3:5f:fb:c9:
f3:24:72:0e:79:8b:4a:d0:ac:b4:b7:7d:9e:be:33:
0d:de:22:d1:ff:19:03:70:37:fa:53:37:ab:0e:27:
65:43:a9:ed:49:38:27:af:1c:08:8f:fe:57:3f:61:
7e:2a:45:4d:bf:83:ad:69:b0:6c:fb:4c:bb:bf:f1:
7b:0d:12:ef:4d:fa:79:c7:9a:1d:e5:4e:44:e1:92:
19:97:4f:e2:db:a2:f3:87:36:59:eb:4d:3a:da:b3:
d1:55:3e:6a:1e:d6:99:88:46:ac:fc:5b:e7:b5:f1:
0e:9f:b7:70:aa:c8:bd:f2:c6:b2:9e:89:69:59:e4:
34:74:fd:96:08:6a:2e:6b:62:43:67:fb:4d:6a:57:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:BD:B7:0B:F2:64:00:5B:3E:8E:CE:93:9F:C4:59:F0:D4:CA:BA
X509v3 Authority Key Identifier:
keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/pN69twvyZABbPo7Ok5_EWfDUyro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e8:2f:3d:82:43:0e:22:03:91:fb:18:92:ef:0d:08:1f:dc:
0b:f3:6c:0f:c4:44:bc:c1:25:5e:03:93:e7:cc:22:9c:ef:14:
50:be:01:02:2b:b5:33:60:16:3c:5b:1a:a6:2c:f4:08:3d:47:
ae:52:3b:1f:ee:85:8a:53:9e:e1:9f:29:13:24:7b:32:27:25:
ab:10:22:75:b4:e5:76:b2:ec:98:e7:9b:83:4d:bf:a9:5b:45:
de:04:ec:7c:a6:32:e4:42:0e:62:3a:f5:de:05:54:c2:a3:6c:
56:2a:57:11:b9:9f:ae:90:26:c3:e8:23:20:97:c7:72:b6:6b:
73:3b:82:f9:3f:c3:bc:24:d5:31:0b:72:7b:42:4b:3e:99:04:
fd:81:4d:d4:72:a7:cd:1c:c2:3e:a4:b1:cd:47:11:e5:1d:43:
8d:86:36:25:9e:f7:02:d3:5f:3c:ce:94:71:66:0c:dd:9f:37:
29:c2:cb:ab:78:f4:b5:dd:51:cc:5b:57:50:5d:a9:3d:6b:d6:
e9:8a:d2:e0:f6:ba:7c:6d:d6:b0:cf:c5:01:f8:b3:d4:66:fd:
18:2a:09:39:49:ea:79:4a:36:d2:79:3b:1f:5e:1b:b1:30:4c:
37:89:78:65:c0:4b:50:de:17:9b:1f:3c:bb:de:0f:74:61:bc:
af:3a:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:16 2025 by rpki-client