Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/B3oFpp9whH-Iic4xryzNTtXWxKg.roa
File: B3oFpp9whH-Iic4xryzNTtXWxKg.roa (raw, json)
Hash identifier: lALwcTUFqYqV0cnZQ4VwviO0xJKxrX+aGJv9qY01ebE=
Subject key identifier: 07:7A:05:A6:9F:70:84:7F:88:89:CE:31:AF:2C:CD:4E:D5:D6:C4:A8
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 911514
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/B3oFpp9whH-Iic4xryzNTtXWxKg.roa
Signing time: Fri 08 Apr 2022 12:48:31 +0000
ROA not before: Fri 08 Apr 2022 12:48:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.42.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9508116 (0x911514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Apr 8 12:48:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=077a05a69f70847f8889ce31af2ccd4ed5d6c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:f5:2a:25:30:05:fe:1f:28:cf:90:fa:e2:
45:4f:e1:3c:cb:5f:f3:ac:e2:64:54:2e:5d:c8:35:
98:07:f4:d8:5d:0d:c8:c7:9a:f9:68:9f:95:85:33:
6d:1d:7b:a2:98:dd:96:af:08:43:c2:fe:26:4b:94:
a6:d8:77:92:94:6c:8f:de:a8:98:22:5e:45:d2:4b:
ad:09:b8:fd:36:c2:fe:37:2e:fc:aa:35:bf:4d:43:
44:84:2a:b2:de:08:10:f8:21:db:ea:e1:67:7d:6e:
ea:4b:72:4d:82:89:66:33:0a:3a:bb:19:ee:6e:6f:
a4:fc:cf:94:38:cc:f6:16:bf:a0:a1:2f:44:bc:03:
b9:54:3c:3c:99:cb:4a:e7:02:a7:a0:0b:c1:d3:36:
03:69:94:b3:6e:03:cb:ec:62:d7:03:9b:0e:b6:98:
cc:00:48:c2:f7:d9:24:7e:c3:de:8c:b6:d2:49:dc:
02:f6:ce:1d:03:38:e7:20:d9:29:ae:7e:ab:92:d8:
42:4d:13:c0:9b:67:7d:c6:60:d7:43:ef:5f:4c:e6:
b3:07:ea:fc:92:8e:06:8a:e8:eb:e1:20:ea:e8:b0:
f5:40:2e:1f:b7:d3:27:91:fb:52:cb:e4:db:0d:91:
6f:5f:35:f8:5c:d8:52:e0:d5:ae:40:74:39:ac:44:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:05:A6:9F:70:84:7F:88:89:CE:31:AF:2C:CD:4E:D5:D6:C4:A8
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/B3oFpp9whH-Iic4xryzNTtXWxKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:74:81:01:2c:ba:4f:1d:ec:2d:d5:81:43:8b:c0:c4:e0:03:
d9:cf:8c:ba:67:b3:98:1d:57:f6:60:f3:de:f1:b0:c5:ef:50:
26:91:f5:08:9a:08:e5:db:ea:c6:f6:85:cc:3a:ef:b3:ef:58:
00:b9:23:b3:0c:78:ee:0f:6b:77:66:7e:30:1b:ab:d1:b2:55:
dc:82:d7:e2:23:b1:03:66:5c:8a:99:34:d0:60:ac:b1:c1:c4:
8f:39:ec:23:ca:d9:c2:06:90:dc:5e:55:b7:66:eb:ef:42:b5:
fb:f1:f1:a8:0b:bb:0d:91:3a:b9:91:54:cb:c5:67:db:77:39:
e4:69:ba:a3:50:a0:fb:76:c7:51:28:ad:a7:eb:68:fb:58:79:
d8:fc:58:e2:65:45:4a:50:4b:1c:7c:2c:18:82:ae:35:e2:b7:
4d:ce:91:59:67:e2:12:12:f2:6c:c9:b3:77:73:fb:95:9b:4e:
0e:70:ae:24:42:b5:e5:41:94:78:22:23:bf:11:d9:b3:1f:50:
2f:36:a3:61:ca:6d:d8:0c:e9:cc:47:12:1c:1a:94:7f:71:eb:
03:d7:7c:fe:f8:94:5b:ce:2d:15:1a:3d:ea:06:9b:48:da:da:
64:6a:44:07:4a:92:d4:a5:df:e9:27:eb:4e:60:a1:56:1f:c6:
ef:ea:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:19:32 2025 by rpki-client