Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/pfDbjmxChE9CQQV0h8041eT8Dso.roa
File: pfDbjmxChE9CQQV0h8041eT8Dso.roa (raw, json)
Hash identifier: p9EH39zVeGA7L7rtrRiTfivyjjGILc9kmKSVV3obBU0=
Subject key identifier: A5:F0:DB:8E:6C:42:84:4F:42:41:05:74:87:CD:38:D5:E4:FC:0E:CA
Certificate issuer: /CN=5c0b45d54e5ff2f779cf2ad13699642c746ba40c
Certificate serial: 0D4EE9BE
Authority key identifier: 5C:0B:45:D5:4E:5F:F2:F7:79:CF:2A:D1:36:99:64:2C:74:6B:A4:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAtF1U5f8vd5zyrRNplkLHRrpAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/pfDbjmxChE9CQQV0h8041eT8Dso.roa
Signing time: Mon 21 Feb 2022 14:24:01 +0000
ROA not before: Mon 21 Feb 2022 14:24:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34307
IP address blocks: 193.239.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223275454 (0xd4ee9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c0b45d54e5ff2f779cf2ad13699642c746ba40c
Validity
Not Before: Feb 21 14:24:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5f0db8e6c42844f4241057487cd38d5e4fc0eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:3f:46:07:be:ce:ca:81:e6:d2:e1:eb:80:
04:9b:76:90:70:00:02:b4:90:7a:da:02:d3:f9:05:
a0:fd:21:b5:95:71:ef:94:3f:48:be:00:9e:20:0d:
63:50:97:99:c0:31:93:96:c8:d7:ab:68:cd:56:5f:
f7:d2:bd:b2:9f:0b:5f:80:ae:4f:27:65:23:ed:46:
1d:de:78:05:da:18:98:9d:14:08:84:af:13:2d:e5:
f6:e8:6e:df:0e:12:36:19:33:e5:25:a2:89:89:8c:
f5:25:81:a0:aa:04:57:e5:19:c0:27:8a:43:1d:cb:
1b:48:cd:18:01:e7:22:eb:4a:ac:f1:b9:f6:ed:e5:
0f:16:cc:41:1b:32:63:f7:88:8c:40:70:84:54:cb:
0f:71:58:2a:89:89:22:53:a4:19:5b:14:15:76:b2:
d6:07:d3:24:d3:7d:dc:c9:58:64:c3:ef:aa:46:2b:
69:ba:0e:6d:07:94:64:4f:72:18:88:df:9e:e3:9f:
cc:f6:7d:ca:c0:3d:00:2d:a9:8c:a5:5d:ea:39:82:
ec:62:3f:3f:8e:af:25:bd:2c:29:ed:b3:fe:8c:75:
19:d1:2a:e2:67:e5:b6:34:9f:59:0b:fd:14:0e:45:
20:91:2c:97:97:73:10:0f:67:27:25:fa:7f:f9:7d:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F0:DB:8E:6C:42:84:4F:42:41:05:74:87:CD:38:D5:E4:FC:0E:CA
X509v3 Authority Key Identifier:
keyid:5C:0B:45:D5:4E:5F:F2:F7:79:CF:2A:D1:36:99:64:2C:74:6B:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAtF1U5f8vd5zyrRNplkLHRrpAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/pfDbjmxChE9CQQV0h8041eT8Dso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c7e8d0-44df-40f0-a8cb-42b428dd4ab3/1/XAtF1U5f8vd5zyrRNplkLHRrpAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:c4:60:1b:a7:66:2f:33:cf:54:f7:3e:7f:77:70:66:b3:72:
0e:5a:9f:34:11:c0:b4:65:79:e3:e7:e5:36:c3:a4:57:76:d7:
77:ac:a8:d6:5e:df:67:c9:f6:6d:77:66:15:29:55:a7:62:57:
73:8f:45:8a:a8:9e:d4:12:4c:04:ab:80:e2:81:56:e8:78:f0:
09:a6:e9:69:9a:5b:0b:c0:69:d3:8d:0f:86:75:ea:e6:7f:ad:
87:33:70:a9:81:b7:26:1d:01:42:86:bc:9f:87:a9:01:a1:96:
f2:cd:5e:fe:c9:b0:82:88:fc:22:6a:28:0a:7b:96:b0:2f:ce:
74:3d:c4:00:be:f0:0e:06:43:29:26:a7:01:61:ac:20:aa:d9:
09:e4:bb:62:6d:bb:fa:82:ae:97:3a:dc:54:24:8e:e0:66:d9:
9f:a5:08:36:95:c5:d9:db:6c:0f:d3:47:d2:f1:26:59:70:f9:
8e:02:0c:85:f6:dc:11:04:1f:41:10:11:40:73:f1:15:f6:0e:
e9:72:a9:97:11:96:db:e1:51:ab:4a:03:13:ba:35:02:a4:8b:
fa:87:fa:5b:4d:20:69:34:a3:07:e9:12:9c:df:c3:8d:89:f8:
13:6e:22:16:f1:93:3d:8e:44:3c:10:6f:44:57:c3:64:0b:48:
fb:3b:ef:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:00:02 2025 by rpki-client