Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/m8AvoJ5vPHrRQ0x08huN1UQG2jc.roa
File: m8AvoJ5vPHrRQ0x08huN1UQG2jc.roa (raw, json)
Hash identifier: OlDZzNqXgVwOy77zUYB7P4f0BMTLaOtVSsotuvejO/Y=
Subject key identifier: 9B:C0:2F:A0:9E:6F:3C:7A:D1:43:4C:74:F2:1B:8D:D5:44:06:DA:37
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F84FFB5828EE7C2DA764BF879D18
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/m8AvoJ5vPHrRQ0x08huN1UQG2jc.roa
Signing time: Thu 15 Aug 2024 09:35:00 +0000
ROA not before: Thu 15 Aug 2024 09:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9935
IP address blocks: 193.149.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f8:4f:fb:58:28:ee:7c:2d:a7:64:bf:87:9d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bc02fa09e6f3c7ad1434c74f21b8dd54406da37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:84:05:6a:95:dd:6f:e2:a8:39:c8:8f:ff:
f9:04:b4:04:04:3b:a3:c1:68:56:ab:9a:18:0e:a1:
f1:da:2f:52:7d:02:e1:af:57:91:ea:59:c0:ac:bd:
ee:af:99:ca:1d:18:8c:4c:8f:5b:a6:e7:d4:c2:7b:
c7:86:bc:af:80:77:23:d4:84:6c:31:32:2a:4f:52:
27:c9:28:37:87:9e:b1:b6:2e:9f:62:d7:ec:74:f8:
43:ee:cb:cc:3c:eb:a6:5f:eb:df:9a:2e:03:be:ab:
d0:14:fd:d3:e3:aa:6b:df:da:f3:b8:96:94:6c:05:
89:2f:be:9c:c0:2a:6d:a1:2c:55:45:c5:18:7d:90:
b2:81:7c:7d:ec:16:7d:82:60:b8:a8:45:3d:e6:29:
fb:50:b0:ad:11:31:ee:a6:94:3a:ef:a2:8b:cc:3e:
23:5b:5d:be:9d:54:90:8f:65:63:4e:aa:fa:7d:5d:
b1:5a:cd:2a:6c:2d:59:40:fc:8d:b4:16:f0:33:a8:
13:9d:5b:2a:b9:b5:37:17:df:d6:b0:11:85:55:3e:
4a:b2:a1:3c:83:0d:a0:95:78:ae:92:6c:0f:76:63:
98:be:36:18:19:42:8c:f2:27:cd:c9:92:ac:da:9f:
36:8f:dc:f3:a8:04:96:38:2e:25:ef:61:29:7d:73:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:2F:A0:9E:6F:3C:7A:D1:43:4C:74:F2:1B:8D:D5:44:06:DA:37
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/m8AvoJ5vPHrRQ0x08huN1UQG2jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.194.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c5:f5:35:9b:03:f8:61:96:19:23:c4:40:0d:e1:63:6f:eb:
25:25:b4:9e:c5:5a:c0:dc:1b:9d:c7:e2:de:df:94:0b:f8:00:
cb:1b:24:0c:dd:fb:40:45:2a:e2:40:36:4a:f4:76:70:5f:d8:
59:6e:f8:de:99:69:72:f8:0d:c7:fa:72:86:54:b9:0f:dd:f2:
3b:2f:46:e4:31:72:9c:06:ff:1d:bd:14:03:18:c0:d1:37:47:
6f:91:3b:d5:ef:47:de:98:ec:a9:c9:23:01:12:ff:43:f5:90:
ca:a3:67:73:88:2e:cc:9f:1a:a3:d1:e1:38:d1:f6:a3:ff:cd:
32:07:54:75:0b:a6:6a:19:12:e4:60:e4:f0:e0:8a:b6:32:d2:
cf:39:4f:d4:cd:e9:9c:8d:d4:07:c0:7b:41:c2:98:29:de:14:
bf:da:10:ca:f8:28:5d:22:f8:51:78:d1:32:09:56:13:66:32:
48:a0:1b:00:e9:1e:5e:d3:df:6b:ff:bc:f9:90:98:d8:0d:b4:
3e:e1:75:ae:2d:71:d9:54:07:a0:49:c6:9e:04:c7:78:d3:5c:
3e:3f:b0:02:b6:29:d0:96:e2:9d:0e:2b:ca:48:ed:2b:65:a2:
99:71:82:c5:20:dd:b3:0e:be:18:c7:21:2a:8a:ed:86:ce:79:
8f:7a:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:13:30 2025 by rpki-client