Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/hbNbIVCjEN8lItMWW7GZDYik4tU.roa
File: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (raw, json)
Hash identifier: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=
Subject key identifier: 85:B3:5B:21:50:A3:10:DF:25:22:D3:16:5B:B1:99:0D:88:A4:E2:D5
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 019427B521F61500BAA761BACBE7D91BC18D
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/hbNbIVCjEN8lItMWW7GZDYik4tU.roa
Signing time: Thu 02 Jan 2025 15:49:29 +0000
ROA not before: Thu 02 Jan 2025 15:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54574
IP address blocks: 193.41.248.0/24 maxlen: 24
193.41.250.0/24 maxlen: 24
193.110.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:21:f6:15:00:ba:a7:61:ba:cb:e7:d9:1b:c1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Jan 2 15:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85b35b2150a310df2522d3165bb1990d88a4e2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:4f:5b:ce:cd:fe:0f:6c:8f:d9:a3:6d:ef:
88:8f:fc:1a:b5:02:ad:af:bf:30:7a:73:62:75:c8:
6c:28:35:a5:1a:76:dd:2a:ed:38:52:6b:b0:e2:c6:
a3:36:1b:10:99:71:21:22:c9:2c:00:c5:b4:3b:79:
fd:62:be:a6:8d:aa:b6:02:e5:e2:b4:e3:98:95:ba:
d7:5d:6d:85:38:4b:3e:38:6d:31:ab:9c:bc:e9:70:
47:22:63:7b:35:c2:ce:06:24:7a:94:7f:9c:84:fb:
27:fc:8f:0f:21:1a:b2:10:65:40:60:74:26:d6:b6:
98:d2:67:ee:35:b0:4b:28:c3:b3:36:c1:39:19:1d:
69:87:ac:45:24:e2:f0:95:f9:51:f9:af:f2:68:50:
c6:7b:b0:66:9d:93:f6:84:36:4e:b4:ea:08:c5:14:
9e:fd:65:e5:f9:50:99:09:4f:e8:70:0f:0b:cb:ea:
eb:6d:18:bd:52:e7:94:a8:ec:bb:be:c8:d4:47:05:
3a:3f:53:f1:b5:84:59:2d:be:0a:9b:2e:af:61:02:
94:6f:8c:76:ba:67:91:88:ce:cc:be:56:b1:33:6c:
a5:86:9f:2b:b5:4e:e3:3f:5e:57:ca:51:c0:56:ed:
48:5b:a9:70:28:aa:16:82:1c:6b:75:ec:d0:d4:7b:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B3:5B:21:50:A3:10:DF:25:22:D3:16:5B:B1:99:0D:88:A4:E2:D5
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/hbNbIVCjEN8lItMWW7GZDYik4tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.248.0/24
193.41.250.0/24
193.110.200.0/22
Signature Algorithm: sha256WithRSAEncryption
30:6e:d4:9d:09:45:72:21:8a:1c:3f:7b:fa:7c:78:56:a6:5f:
4a:1d:87:a3:ab:c5:9e:e3:62:6c:3b:36:37:24:34:13:58:56:
8b:94:06:57:9e:d8:9f:3f:09:69:e1:e6:ac:2e:a7:c5:df:f8:
5b:f0:a8:1d:4a:dd:9f:bd:c0:3e:9d:d6:8a:a1:cf:13:e1:86:
f6:ab:7a:e8:cc:4c:58:f7:3d:3a:9b:26:08:f0:8d:7e:49:b1:
7e:9f:78:7b:1f:02:33:5b:2b:bd:e6:22:7e:50:4d:0d:10:d6:
1e:e0:72:98:a1:aa:7d:ba:0b:ce:03:51:11:51:c1:2b:cc:e5:
ba:c8:e0:83:9e:1f:3d:73:e2:59:5f:e8:51:dd:31:8e:c5:1f:
77:19:3b:74:e7:1e:16:f0:ca:ed:85:e4:6c:8c:0e:54:28:27:
9c:9a:81:36:91:1c:66:ce:1e:b1:c4:39:96:00:de:eb:9a:85:
69:2f:1e:d6:8b:35:93:d4:dd:71:12:af:c8:6a:da:77:87:36:
41:1d:60:77:83:52:1a:a5:70:60:e8:ff:40:1b:15:b4:90:a5:
8f:8e:77:08:a7:b1:92:ba:24:11:62:38:85:d4:88:43:41:e3:
94:25:db:56:a6:fc:3a:78:ae:32:b1:25:63:81:8b:09:03:3d:
ea:9d:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:12:51 2025 by rpki-client