Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AlFvbgm4nqbCdFcT6TaOr8NO9Rk.roa
File: AlFvbgm4nqbCdFcT6TaOr8NO9Rk.roa (raw, json)
Hash identifier: tXZ/ehAewuGseM7qSatO2+kaQgsRNvqxN0uZDDdt6YM=
Subject key identifier: 02:51:6F:6E:09:B8:9E:A6:C2:74:57:13:E9:36:8E:AF:C3:4E:F5:19
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018C342AFE152638E85CC45B9C7E3DB89B02
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AlFvbgm4nqbCdFcT6TaOr8NO9Rk.roa
Signing time: Mon 04 Dec 2023 09:31:21 +0000
ROA not before: Mon 04 Dec 2023 09:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42366
IP address blocks: 193.9.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:2a:fe:15:26:38:e8:5c:c4:5b:9c:7e:3d:b8:9b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Dec 4 09:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02516f6e09b89ea6c2745713e9368eafc34ef519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6f:30:ec:3d:25:2f:18:dd:3b:d8:e6:c5:cd:
33:70:f3:ab:e8:40:33:2a:3b:ad:3e:56:8f:46:e3:
d5:1b:a2:9e:d0:9d:f2:bf:f1:47:27:b1:8a:35:73:
d7:68:63:4c:a4:64:eb:74:80:5b:97:ff:82:c5:64:
5f:10:38:9a:ed:3a:8d:4c:06:0d:9c:fb:91:7f:53:
3b:84:e2:21:c5:c2:a6:79:4d:74:81:f0:c7:55:ad:
2c:1c:d2:1e:57:d1:4b:79:6e:c5:43:84:11:ff:cf:
9c:5e:e2:8a:5a:ae:f3:8b:10:99:dd:0c:7c:7e:30:
68:9c:e1:b3:ba:6d:58:3e:e0:d4:57:1c:a4:cc:25:
3e:50:e9:0b:57:6f:d3:0b:0a:ca:68:8a:30:7c:5e:
53:87:e6:55:1d:cb:13:c5:b1:5e:78:b8:8a:e9:fc:
99:51:50:ae:ac:aa:3f:2a:e6:57:ae:e9:27:f3:cb:
54:9d:2c:77:05:9e:3f:47:6a:6f:19:90:52:03:0d:
42:d4:2c:fa:ea:de:8f:cf:ce:eb:4e:cc:18:52:30:
09:56:be:83:47:e3:c9:ea:cb:91:93:1f:a0:76:a4:
85:12:c4:48:86:d9:c7:33:27:99:5a:f5:d7:ae:e6:
7e:3c:50:6c:b8:93:11:dd:ac:d2:ad:66:2a:ee:d7:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:51:6F:6E:09:B8:9E:A6:C2:74:57:13:E9:36:8E:AF:C3:4E:F5:19
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AlFvbgm4nqbCdFcT6TaOr8NO9Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.47.0/24
Signature Algorithm: sha256WithRSAEncryption
96:80:4e:03:a0:36:eb:b6:35:c8:d0:06:1b:d7:00:e8:3f:7a:
07:f9:82:86:e0:35:4f:a0:45:bb:a3:0f:03:84:9d:ed:ab:4f:
da:e8:04:e8:78:a0:73:45:60:85:bc:8e:e7:3e:db:36:d6:7d:
3c:0a:12:2f:ac:44:c6:40:d3:82:a1:37:a8:4c:25:7d:b0:43:
4a:77:b6:3e:a0:a3:78:6b:95:89:ba:45:e8:6b:8c:94:d1:61:
82:78:50:af:75:f9:f3:d4:38:62:43:e7:ed:40:06:e6:85:ad:
32:be:85:bb:77:c8:83:12:dd:2f:ef:c6:da:44:39:2c:ff:c0:
29:5c:90:ee:d1:ad:5f:82:89:a5:c1:3b:b8:02:f2:66:0a:cf:
a5:8c:1c:ca:39:df:14:4b:10:9a:1e:0c:cd:71:b6:bb:2d:93:
5e:12:0a:19:5e:fd:fb:2b:2e:1d:37:63:45:28:b4:00:86:aa:
91:3f:9c:b8:19:62:a9:a7:56:af:d6:c1:eb:8a:c9:eb:d0:00:
5f:b6:ff:c5:e4:4c:20:91:8f:eb:85:8b:c2:0a:25:c1:21:03:
82:5e:2d:ae:57:74:98:87:13:7f:4e:4c:19:55:5b:ab:f6:0c:
de:78:b7:91:dd:d8:cb:bf:c3:82:2a:91:08:62:30:5d:55:cf:
6e:ab:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:14:01 2025 by rpki-client