Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/z-i9O9kiMm0lM2bIPZY9Qf6ofXA.roa
File: z-i9O9kiMm0lM2bIPZY9Qf6ofXA.roa (raw, json)
Hash identifier: i/9c8Xcqo8Nl+RFYaiL1Vf7Go3dofQCxxB1irvjZlcg=
Subject key identifier: CF:E8:BD:3B:D9:22:32:6D:25:33:66:C8:3D:96:3D:41:FE:A8:7D:70
Certificate issuer: /CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
Certificate serial: 01920F37A6A369B3072F83A32051FDC05C7F
Authority key identifier: D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/z-i9O9kiMm0lM2bIPZY9Qf6ofXA.roa
Signing time: Fri 20 Sep 2024 11:35:58 +0000
ROA not before: Fri 20 Sep 2024 11:35:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 193.34.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:37:a6:a3:69:b3:07:2f:83:a3:20:51:fd:c0:5c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
Validity
Not Before: Sep 20 11:35:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfe8bd3bd922326d253366c83d963d41fea87d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:76:86:0a:09:1c:4a:a0:54:65:a9:52:28:
66:db:98:52:d9:31:00:b9:de:12:d6:bc:76:50:3e:
bb:78:4b:f0:60:21:e8:bb:41:11:27:8e:4c:fb:6c:
2a:07:da:b0:f5:af:dd:f3:7c:8d:43:b6:82:5d:b9:
4a:7c:87:33:ab:52:ba:a4:26:7c:eb:24:3e:e5:50:
a1:34:e0:0b:32:7d:ee:82:55:60:c6:2f:7d:e4:e0:
5a:2e:c1:3e:71:db:34:cd:44:4c:65:8a:4a:0c:77:
ff:af:8e:83:74:24:60:df:d1:aa:e6:26:d3:f8:c7:
1a:98:72:f4:a2:f9:21:6e:b6:1a:0a:07:71:44:a2:
25:ff:34:1a:d8:26:6d:31:4b:46:38:5c:62:da:c5:
94:d1:19:04:48:06:0b:1d:a2:d0:97:c7:48:82:46:
25:9b:df:82:5d:0b:74:8e:3a:33:53:f2:47:3f:43:
7a:3e:eb:4a:e5:c4:3b:6f:4a:7b:aa:a4:f7:f2:26:
2e:5a:66:96:69:98:57:9f:6b:4b:0b:c1:4d:ec:0e:
82:f1:6e:8c:24:de:11:6e:7c:58:39:4c:df:59:b2:
78:07:61:09:b8:68:9f:f6:4c:d6:eb:39:8f:98:3f:
f2:b2:94:59:2a:ed:7c:31:5b:36:8d:61:75:f2:34:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E8:BD:3B:D9:22:32:6D:25:33:66:C8:3D:96:3D:41:FE:A8:7D:70
X509v3 Authority Key Identifier:
keyid:D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/z-i9O9kiMm0lM2bIPZY9Qf6ofXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/2ewIW6qMqntbk07KKcF5YfyI2xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.240.0/22
Signature Algorithm: sha256WithRSAEncryption
59:83:b9:1d:cc:a0:11:2f:3f:27:ee:52:60:5c:5f:d6:79:95:
b5:31:70:d6:1c:70:e6:4b:d3:f8:a5:fe:3a:00:7e:a4:48:fb:
c1:39:25:ac:4b:4b:6c:55:60:b5:5b:9c:b8:00:64:50:de:21:
4e:b2:32:04:59:63:42:fd:df:27:ff:06:82:d2:e0:1a:f8:1c:
15:90:7d:94:70:3a:c6:b0:b0:e8:92:ea:bd:bf:28:0b:c4:78:
cf:79:51:11:b8:25:49:6f:d7:96:13:66:ac:f1:4f:5f:16:32:
a0:5a:5e:b4:03:5e:34:59:40:1d:82:ec:3d:32:c0:cd:b4:b0:
72:46:49:b2:3b:d4:20:6d:49:14:76:0e:47:76:92:4d:51:80:
fb:6f:09:a0:c4:ce:c4:1c:db:3f:11:f6:fc:db:bc:4e:20:34:
e2:16:36:e4:77:b4:ac:c2:25:c1:66:ed:a3:15:1d:da:72:b8:
c5:96:e3:08:e5:04:f4:6e:ab:2a:f3:59:40:68:56:34:5c:9d:
a0:67:f0:d8:c2:b1:e8:f6:76:ae:27:cc:50:27:57:56:26:23:
50:0a:a6:7b:21:42:4b:b7:c4:62:04:c1:9b:0f:31:89:2c:53:
b8:c0:f9:e5:87:99:bc:ba:e7:d4:53:68:c5:e5:1d:89:4c:b0:
b5:3f:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:21:59 2025 by rpki-client