Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/Otv6y9SomP0l37us7AYwCZ4AFLs.roa
File: Otv6y9SomP0l37us7AYwCZ4AFLs.roa (raw, json)
Hash identifier: jn6PR4rw+Evf5XvTNyi0F9Za5cOeKrtX+SgRejdjtPE=
Subject key identifier: 3A:DB:FA:CB:D4:A8:98:FD:25:DF:BB:AC:EC:06:30:09:9E:00:14:BB
Certificate issuer: /CN=1f775d9962597742ce70e1ad63d47bba55a5534b
Certificate serial: 172EBF03
Authority key identifier: 1F:77:5D:99:62:59:77:42:CE:70:E1:AD:63:D4:7B:BA:55:A5:53:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3ddmWJZd0LOcOGtY9R7ulWlU0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/Otv6y9SomP0l37us7AYwCZ4AFLs.roa
Signing time: Sat 01 Jan 2022 02:56:06 +0000
ROA not before: Sat 01 Jan 2022 02:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31184
IP address blocks: 193.22.253.0/24 maxlen: 24
195.74.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388939523 (0x172ebf03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f775d9962597742ce70e1ad63d47bba55a5534b
Validity
Not Before: Jan 1 02:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3adbfacbd4a898fd25dfbbacec0630099e0014bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:12:2f:23:da:b6:84:c9:41:c9:86:f3:92:65:
49:9d:0b:a4:65:d5:58:a4:e5:59:dc:76:3b:38:18:
a2:2c:b9:ed:07:d5:c6:e7:02:21:f6:bd:cb:70:0b:
6f:8a:cc:1e:1d:7f:02:30:92:34:eb:0d:89:92:84:
aa:db:db:f1:9e:4c:d5:01:f3:55:b1:6c:8f:80:ce:
af:c6:58:b0:82:81:6a:2f:61:c3:31:d9:21:68:11:
87:f9:47:fb:4b:aa:b6:a2:9e:bd:9e:ce:3a:cd:ed:
39:1b:6d:34:36:d5:b2:a8:f4:d2:69:52:29:3d:11:
8e:a6:fa:f5:93:54:33:8e:24:16:8a:dd:c2:ea:32:
b5:e2:d8:4c:fa:49:cd:f2:f7:df:01:8e:17:27:f5:
66:3f:5d:ec:d7:43:5d:b1:d6:05:e4:60:89:c3:31:
94:08:bc:6f:6e:2f:5e:ab:bc:87:64:3d:86:af:ed:
fc:11:ff:bc:c6:b3:2f:48:c2:0f:64:bb:b8:31:a0:
57:81:02:1d:e6:46:a2:c5:e3:3b:00:02:90:e7:8b:
5c:33:b5:2d:10:41:99:ae:bc:c2:52:ab:b0:5c:9a:
cc:73:d8:32:58:80:18:e3:c6:e7:8a:b3:00:cd:79:
62:6c:cc:ab:66:00:75:b3:31:20:32:f8:1c:67:bf:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:FA:CB:D4:A8:98:FD:25:DF:BB:AC:EC:06:30:09:9E:00:14:BB
X509v3 Authority Key Identifier:
keyid:1F:77:5D:99:62:59:77:42:CE:70:E1:AD:63:D4:7B:BA:55:A5:53:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3ddmWJZd0LOcOGtY9R7ulWlU0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/Otv6y9SomP0l37us7AYwCZ4AFLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/23ecbd-07a1-49e8-bb1c-797496254cd2/1/H3ddmWJZd0LOcOGtY9R7ulWlU0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.253.0/24
195.74.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:63:62:b1:1f:16:35:a4:43:9d:51:ee:a7:49:ba:a8:4a:c2:
e1:9f:77:e6:f5:00:a9:86:28:34:33:1e:70:f4:a4:60:b5:dd:
e4:cd:a7:bb:7c:99:3a:c6:e5:b8:ff:e3:3a:a6:fa:93:c7:c5:
ed:24:7a:e9:e4:bf:94:9a:9e:5c:da:44:cf:4d:d0:51:b7:f9:
06:d6:3c:87:83:e0:0c:18:e3:57:b7:58:f9:69:f3:17:6b:e7:
c2:93:fb:da:fc:d8:22:4f:82:06:e7:4e:23:55:1d:ce:a0:5b:
9f:19:fe:61:9f:1f:93:bd:08:53:34:eb:c9:03:89:b5:23:25:
a1:35:13:ab:e1:e6:1e:fb:56:d4:1d:6e:08:f4:e7:b1:dc:f2:
58:79:14:38:6f:e7:28:60:96:87:28:ba:60:46:b9:f3:05:d7:
6c:61:fe:e3:4d:02:fa:91:70:3b:02:cf:bf:f5:b5:d3:4b:8c:
e2:d6:39:f7:86:6b:ae:16:26:1f:d7:c1:d8:82:1b:59:84:2a:
de:80:3e:a1:dd:b7:40:aa:7a:4f:dd:d3:63:a0:67:24:37:ad:
0a:5d:4e:0f:32:3d:f2:f4:b3:0e:4c:8c:f1:bb:87:3d:18:80:
11:7b:eb:ef:eb:23:f5:d3:38:98:b6:15:b8:14:a6:16:df:c9:
82:16:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:25:46 2025 by rpki-client