Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/bJ3Yt6dDHk8Pm8b3mw9JOEx9PEM.roa
File: bJ3Yt6dDHk8Pm8b3mw9JOEx9PEM.roa (raw, json)
Hash identifier: Q+f3a2oxT0KKWV1uGYhiJcbNDy66Hv8e1IwzRSkuGAQ=
Subject key identifier: 6C:9D:D8:B7:A7:43:1E:4F:0F:9B:C6:F7:9B:0F:49:38:4C:7D:3C:43
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 019427B5B50FD47AE0A776646A1A0DCF9B43
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/bJ3Yt6dDHk8Pm8b3mw9JOEx9PEM.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.207.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b5:0f:d4:7a:e0:a7:76:64:6a:1a:0d:cf:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9dd8b7a7431e4f0f9bc6f79b0f49384c7d3c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:40:99:6a:85:c3:66:34:42:37:40:7b:f0:
97:b1:70:cb:2b:7e:42:23:bf:83:be:f9:48:56:24:
82:13:71:f9:46:cf:0c:4a:a7:75:3c:36:a1:ba:c7:
81:a9:00:c9:d2:b8:b8:33:35:1f:60:2d:a9:53:e1:
bf:c7:9a:42:df:6a:b9:34:e6:f7:7b:93:16:f2:01:
7c:b0:ed:53:3e:43:19:4b:e7:60:2e:77:51:d9:34:
8f:64:a1:de:c8:77:87:06:b9:f2:1b:74:54:0c:42:
74:7c:2f:42:2c:28:a3:4e:64:8e:05:2a:5d:d0:13:
a6:c5:02:e4:f4:a5:13:5a:62:3b:42:a7:de:c1:7d:
e2:a2:63:58:7c:84:93:c2:71:fc:ed:6d:a6:44:0b:
81:07:c6:0b:a0:98:85:e3:e0:ec:02:a0:1b:1a:06:
8d:06:33:33:ee:9c:4c:0e:fa:d7:8a:da:e0:f7:55:
45:22:29:e0:5d:5a:0b:c1:48:27:84:d9:18:96:c7:
b4:25:e2:50:aa:4f:7b:55:e4:69:12:77:7f:7f:16:
2c:5d:74:ad:1e:64:f1:fc:97:0d:5b:4b:c5:4c:9d:
34:f3:1f:f2:f9:8c:00:cb:d6:c7:73:39:c1:9d:ff:
ef:04:4f:74:b8:aa:83:ed:e7:ef:e2:15:d4:d7:33:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:D8:B7:A7:43:1E:4F:0F:9B:C6:F7:9B:0F:49:38:4C:7D:3C:43
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/bJ3Yt6dDHk8Pm8b3mw9JOEx9PEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:05:ae:0e:3b:21:a1:00:17:c9:ad:c9:84:de:26:f0:f3:5d:
00:9e:c9:91:a5:0b:ae:ee:a9:2e:ef:77:b2:63:ad:6c:01:6f:
fd:7d:10:61:ea:a6:d3:b5:36:df:11:e5:fe:0b:95:27:99:76:
e8:e7:7f:3a:43:55:9c:17:da:31:c8:9c:63:1a:71:21:02:76:
72:6d:5f:05:22:ff:7b:34:d1:57:8a:37:f3:af:a8:fb:12:47:
b6:10:49:7d:fa:6a:f2:05:21:22:37:86:ed:2c:b6:53:1f:b3:
96:b2:b9:89:63:30:f2:43:28:ee:d5:27:79:7f:42:19:48:86:
13:2f:50:c6:c0:95:a9:eb:7f:34:83:b4:4e:1a:4f:23:e6:25:
2f:68:27:d6:5a:84:11:85:6b:e4:20:08:d4:fb:38:73:8a:2e:
40:da:a4:6a:f7:87:13:19:77:49:12:89:72:9c:79:de:9d:ad:
a3:5a:d7:73:ec:ba:43:d8:32:3f:2b:42:68:5b:c5:66:0d:6b:
d0:b3:b2:be:c6:06:f4:07:2f:b8:41:37:89:91:26:52:0f:11:
44:9d:9c:b4:1f:fc:b0:b3:4e:e9:bd:30:19:bc:30:19:c1:c2:
7b:3d:c2:a7:69:67:30:53:24:91:d1:ca:da:55:fb:17:41:cc:
e8:8f:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:15 2025 by rpki-client