Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/bpV8b7AtbhXdGFm5LUSeu0J87Js.roa
File: bpV8b7AtbhXdGFm5LUSeu0J87Js.roa (raw, json)
Hash identifier: dlLYGpRMWUx9YdT08Q5m5VPvbiMJH/5+liPq9p5+8YQ=
Subject key identifier: 6E:95:7C:6F:B0:2D:6E:15:DD:18:59:B9:2D:44:9E:BB:42:7C:EC:9B
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019500104B1DFDB4F4CCF5D6B6CB6127FD71
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/bpV8b7AtbhXdGFm5LUSeu0J87Js.roa
Signing time: Thu 13 Feb 2025 16:07:02 +0000
ROA not before: Thu 13 Feb 2025 16:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200908
IP address blocks: 188.93.117.0/24 maxlen: 24
193.163.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:10:4b:1d:fd:b4:f4:cc:f5:d6:b6:cb:61:27:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Feb 13 16:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e957c6fb02d6e15dd1859b92d449ebb427cec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:4d:c8:d5:e6:65:ce:83:ba:e8:37:e0:55:
97:17:9f:54:be:85:ab:9e:64:51:36:0a:e4:a5:4f:
9d:fb:14:c7:0a:4d:65:0a:46:6a:01:c9:13:ab:09:
43:93:a8:f9:82:df:20:17:bc:96:e1:fa:6f:80:8f:
c0:25:6a:5d:32:5e:59:f6:d9:21:d9:74:c5:e7:8b:
77:a5:f4:3b:69:e5:df:9e:ed:aa:42:c5:d3:81:69:
9d:e1:5c:74:ac:1c:61:db:0d:02:9b:ec:6e:c3:9e:
1d:cd:62:6a:c7:40:d4:d9:bf:77:d1:bb:3f:a8:34:
05:f9:bc:4a:cb:cb:53:40:e7:e5:cc:1e:ee:82:3c:
74:e9:ac:29:11:b3:66:09:63:37:c7:28:24:32:eb:
bf:3b:df:21:54:ed:8e:65:6b:f0:25:14:a7:9f:aa:
ce:8f:b7:af:05:d7:57:38:60:48:9e:24:20:e3:75:
87:04:94:ce:54:2b:b9:8b:74:da:0f:3b:41:c7:c5:
b2:f5:f7:c0:fc:45:fc:7c:cd:aa:22:73:a3:3b:7f:
03:50:8d:2f:49:73:8d:89:f5:65:b9:58:47:0b:ad:
ec:94:91:8e:4e:9e:f5:99:fe:3d:de:39:e5:96:88:
46:00:6c:5d:7a:87:fc:aa:73:d4:16:bf:02:63:d6:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:95:7C:6F:B0:2D:6E:15:DD:18:59:B9:2D:44:9E:BB:42:7C:EC:9B
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/bpV8b7AtbhXdGFm5LUSeu0J87Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.117.0/24
193.163.117.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:15:a5:72:94:6a:c9:e8:bb:72:4f:8e:0e:c2:48:74:1f:26:
16:67:3b:e2:60:02:a4:cb:04:b8:4d:2a:41:17:ce:a7:c8:45:
8f:cc:6e:e9:9d:d9:64:e1:f1:7a:13:d8:e7:84:2b:85:41:9a:
71:0f:1a:99:af:e1:dd:ad:39:fd:35:41:0d:aa:e1:b6:c8:a3:
a5:91:93:75:d7:10:ad:29:4a:03:fa:9a:d7:69:25:78:29:b5:
af:a8:f7:6b:88:44:69:68:4c:a3:19:68:17:de:e7:b0:a9:59:
be:5a:37:e4:4a:d5:52:ee:66:be:7e:cb:12:5d:26:bf:24:f7:
2a:b8:21:45:19:fa:b2:4f:90:05:74:58:78:24:4b:3a:0c:4c:
63:10:18:10:8b:e7:2a:f4:00:04:fa:6f:9a:fc:fe:fd:e2:61:
f4:28:93:8a:af:e4:3d:1f:1b:20:33:5d:51:98:36:ba:26:a8:
ec:14:94:7b:0b:0d:f0:de:4b:04:4e:81:0e:25:7f:fc:ad:66:
89:6d:78:9c:a2:e8:ec:8d:c8:72:1a:4d:94:81:f6:46:19:76:
c9:a9:f5:5c:e8:72:2e:40:d6:38:11:27:19:c5:fa:2a:7a:5b:
12:c2:e2:13:ae:fb:2b:39:e5:43:34:63:6f:6a:56:45:c2:45:
af:f0:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:12:21 2025 by rpki-client