Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/BrLyoPvlUaso46lX0KWb5vFGmM0.roa
File: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (raw, json)
Hash identifier: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=
Subject key identifier: 06:B2:F2:A0:FB:E5:51:AB:28:E3:A9:57:D0:A5:9B:E6:F1:46:98:CD
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 019425FDA186434B12B7CACEC642484530E3
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/BrLyoPvlUaso46lX0KWb5vFGmM0.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63018
IP address blocks: 193.105.95.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a1:86:43:4b:12:b7:ca:ce:c6:42:48:45:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06b2f2a0fbe551ab28e3a957d0a59be6f14698cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:a7:29:2a:d8:ca:4a:b9:84:79:eb:ac:da:
0f:e3:eb:2a:04:10:37:d9:64:f2:b9:b6:e5:c9:06:
aa:3c:d1:dc:95:09:71:a6:8d:22:f5:03:a3:9c:f2:
e8:83:af:dd:1b:14:91:fa:57:66:bd:99:ef:d0:3e:
5d:b1:5e:07:fe:50:ca:20:f1:a6:98:c6:1a:aa:e2:
b2:0f:2e:c6:f9:62:10:4b:e2:36:83:a5:4c:9a:fc:
6d:7c:dd:b0:9a:28:c1:0c:81:88:af:f8:38:6d:21:
7e:c8:41:40:a2:47:d3:6c:da:da:10:95:30:46:8d:
86:88:02:4c:4b:dc:84:95:1e:1c:1f:3d:ee:ef:cd:
f2:5e:ec:61:c2:f1:54:93:ca:01:5d:57:c1:50:76:
60:f2:47:6e:aa:b9:89:ae:f7:68:d6:bb:db:78:d4:
f2:34:82:20:a8:d2:7a:92:95:75:6c:93:b2:93:c5:
6a:21:71:3f:cb:20:51:fe:e9:3a:32:71:b1:25:6c:
ea:20:4c:d8:60:a7:87:1e:4b:70:5d:3a:a6:86:b2:
f5:d3:38:38:6f:ca:12:6f:0b:a9:c6:30:65:a1:9b:
56:ad:54:b9:eb:60:ab:02:b7:77:d4:28:8b:73:e4:
9a:de:9f:4a:92:e1:a3:3c:66:07:51:84:9e:eb:82:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:F2:A0:FB:E5:51:AB:28:E3:A9:57:D0:A5:9B:E6:F1:46:98:CD
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/BrLyoPvlUaso46lX0KWb5vFGmM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e8:57:f4:cb:70:8a:e4:7a:c6:9a:a4:1e:be:fb:46:70:69:
e9:55:4e:e5:f1:cf:6b:ee:3d:26:9b:ec:53:05:cb:80:c9:e6:
c4:bb:8f:7b:f7:9e:b6:1c:1a:56:b8:cc:bd:3b:f2:56:51:ee:
ab:53:64:2c:6d:43:5f:04:7b:f5:81:42:08:d1:1a:17:28:e6:
f4:a5:d3:23:bc:6e:5b:b1:4e:97:68:60:59:28:ee:e1:e1:b4:
60:97:39:fb:15:41:93:7c:7e:45:c4:18:34:38:c9:c1:7f:df:
e5:5b:33:b6:e1:54:ef:70:4d:ea:8a:07:99:bc:c6:33:36:48:
3a:31:0b:51:e5:d3:e5:39:6a:7f:4b:42:7a:13:e4:13:90:0d:
e8:86:e1:5d:c1:f4:ab:5c:a8:ab:cb:06:ba:a5:13:9c:73:25:
6a:a6:1c:e1:c5:c3:94:cb:7a:88:4d:bc:07:de:67:9c:d3:7a:
8b:c7:0f:53:3c:5a:cc:a5:06:b7:8d:5b:70:0f:9a:b9:0d:71:
30:93:df:65:93:26:1c:a8:cc:84:d8:5e:92:32:04:7e:dd:b8:
b8:ef:12:28:b8:e3:2e:21:33:05:79:42:22:27:b6:fa:69:cc:
4e:37:f0:ac:6b:bf:78:d6:ea:ce:cb:23:6b:32:6b:cc:26:32:
24:ce:9e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:25:59 2025 by rpki-client