Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa
File: 5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa (raw, json)
Hash identifier: wspJkKAHBhU/iiN7eXAG5eZQY0gy2K4ZxvhHdsXT2dg=
Subject key identifier: E6:A6:E6:E8:CF:9E:88:0B:37:49:AC:7C:29:52:77:A3:26:1F:AE:B4
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 0194214411EC1F25C5F751F7321B4A697328
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 193.103.193.0/24 maxlen: 24
193.103.194.0/24 maxlen: 24
193.103.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:11:ec:1f:25:c5:f7:51:f7:32:1b:4a:69:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6a6e6e8cf9e880b3749ac7c295277a3261faeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:e7:d3:5a:e4:f0:7f:17:81:9e:eb:1f:76:
34:46:44:3d:16:5a:ff:b4:02:8c:6b:67:79:b5:80:
d8:7f:9d:b6:07:34:e9:f3:16:df:4f:c3:06:f9:68:
65:b8:91:b1:95:25:c7:b8:1d:5d:b3:69:f2:23:4c:
3d:2c:d4:a2:69:aa:25:17:a3:80:8f:f1:0a:59:c0:
4c:1c:ac:a1:58:26:43:a7:9b:6f:88:f8:a2:37:b6:
93:86:22:f6:da:14:25:5a:b5:c2:d4:e1:81:f5:1b:
d8:11:0b:68:f1:48:0d:b9:66:73:ad:f3:c4:4e:9e:
39:ef:6c:80:ed:67:73:f4:ea:ef:63:4c:f6:de:b6:
1f:fd:0a:e1:54:8f:53:d0:e2:1c:ff:e1:fb:e4:c9:
b6:89:d7:52:f1:bf:35:69:cd:19:0e:ac:53:67:fc:
5e:af:46:a6:bb:14:4a:11:52:98:0a:37:c1:85:c3:
f5:6f:47:57:2f:6c:81:22:ac:ba:1d:9d:d2:30:99:
ba:e8:da:95:2d:3b:7b:ab:28:2d:69:fd:a5:72:5f:
93:eb:fc:1b:5b:c6:df:a5:44:8a:63:05:55:18:c5:
da:5d:73:42:c3:46:70:ad:ea:79:b5:d9:f8:91:bc:
c6:b6:3b:96:08:a0:08:f7:81:32:aa:5d:49:9f:e1:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:E6:E8:CF:9E:88:0B:37:49:AC:7C:29:52:77:A3:26:1F:AE:B4
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.193.0-193.103.194.255
193.103.199.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fd:16:94:c9:3a:83:67:6e:99:b7:c8:cd:fe:83:4c:ce:82:
7f:4a:4e:e5:49:34:df:65:c3:77:7b:01:55:6a:e6:be:32:18:
e0:41:cc:a1:70:30:bb:11:7e:12:ef:4c:43:b6:c7:58:02:d1:
d2:fe:5d:8f:2b:34:11:9f:35:ec:4b:a2:b0:b4:51:db:9c:e6:
a6:f1:72:21:26:59:2d:b8:b0:93:18:fd:07:bb:0a:fa:c2:7e:
ac:1f:95:4f:21:62:2f:8c:38:08:97:16:57:e7:ff:25:4d:50:
86:d6:7f:2d:c6:e8:2a:7b:22:fd:9c:ef:74:49:44:8e:83:10:
68:24:3e:3b:9b:92:8e:09:e9:d1:5f:98:2e:b1:14:47:7d:71:
7c:ae:2d:bd:ea:32:34:c7:c2:25:c1:60:0a:54:ca:39:05:97:
b2:b2:a9:af:ca:1c:d7:c5:55:87:17:ff:11:b8:1a:5f:cd:4d:
52:e0:14:af:a2:7c:a7:b7:a7:83:81:8f:98:72:6b:cd:a7:d8:
de:7b:da:81:5c:7b:bf:51:39:43:a7:96:c7:58:99:54:07:2d:
a2:50:3e:8c:b2:e4:64:b6:e0:13:87:52:cd:43:cf:15:24:98:
8d:97:62:73:88:cd:4d:93:ed:ae:85:1a:16:34:ad:44:cc:fc:
79:72:be:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:24:28 2025 by rpki-client