Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/bkPZdYGaPrRP7ibLuByUsUTfmq8.roa
File: bkPZdYGaPrRP7ibLuByUsUTfmq8.roa (raw, json)
Hash identifier: mPM3jm7wNDKXQnm9t+BGq+2FqCZJMLYCeySMg/uwrT0=
Subject key identifier: 6E:43:D9:75:81:9A:3E:B4:4F:EE:26:CB:B8:1C:94:B1:44:DF:9A:AF
Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial: 0194236A295F167914E65C0667FA888A906F
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/bkPZdYGaPrRP7ibLuByUsUTfmq8.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47843
IP address blocks: 194.33.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:29:5f:16:79:14:e6:5c:06:67:fa:88:8a:90:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e43d975819a3eb44fee26cbb81c94b144df9aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:5e:91:d7:f3:32:e0:2e:80:93:f1:19:54:
bf:20:be:4d:81:05:dc:7c:38:e3:e4:6a:e0:3d:7e:
7a:3f:b1:57:bb:35:52:68:e9:5e:ba:21:25:53:5d:
8a:5a:94:b1:1f:8b:a2:6e:9a:58:67:7c:c5:62:19:
97:b6:e0:a7:98:93:55:07:ae:79:2b:9f:e8:47:c1:
ec:97:25:4a:16:6b:4b:f2:e4:9a:41:ff:18:02:1c:
ac:ab:33:15:53:94:99:12:f5:7c:ee:e0:c1:c2:07:
a9:38:85:cf:4a:d9:48:4d:38:5f:83:a0:b9:0c:3f:
8f:68:9a:b1:58:90:2c:1c:23:cf:b7:11:e9:ed:1a:
87:54:d9:72:4a:fb:70:6e:7e:f6:20:a1:02:ba:f0:
9f:d8:95:cf:52:b5:ba:14:bf:2f:bc:35:c8:cc:e5:
de:53:3c:27:9d:3a:8b:57:a6:61:ad:0e:5b:90:ad:
98:d7:ad:c2:59:3e:05:68:80:de:49:5f:7b:90:4e:
58:b9:83:12:5b:fe:08:b9:d7:89:e0:d1:7a:c4:bc:
55:c0:7d:cc:e0:74:87:a9:d3:eb:77:69:84:4b:23:
6a:16:84:e1:0a:ad:f5:2f:0f:30:27:24:53:4e:41:
5c:11:0a:14:7d:08:2c:b1:2d:c3:db:d3:ea:e8:0e:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:D9:75:81:9A:3E:B4:4F:EE:26:CB:B8:1C:94:B1:44:DF:9A:AF
X509v3 Authority Key Identifier:
keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/bkPZdYGaPrRP7ibLuByUsUTfmq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.107.0/24
Signature Algorithm: sha256WithRSAEncryption
48:63:99:7e:a7:d8:ee:63:cc:92:61:fe:ed:7f:ac:2d:35:33:
b0:f1:e7:36:e3:97:c7:9f:32:ab:37:29:8e:ed:26:07:8b:d0:
6b:14:a6:a2:f5:7f:72:7e:cb:dc:94:73:a3:b2:e4:91:3a:cb:
01:4d:df:43:24:9e:c8:8e:b6:e1:79:59:4e:f5:82:d4:98:b0:
e3:fa:12:72:bb:02:a2:a5:20:19:07:9c:96:ff:af:98:88:66:
11:3a:96:1a:dc:1d:48:bb:a6:c2:55:3c:e1:54:b9:b0:a3:38:
66:3b:2a:f1:82:b3:8e:31:62:15:d7:de:6b:8f:04:c0:70:5a:
c7:c3:53:3b:77:95:1c:2d:7d:16:b0:8b:d8:b4:26:96:67:7e:
f7:46:07:e1:b7:e5:49:13:5c:02:87:3b:db:f0:26:c6:02:de:
30:f4:e3:62:42:aa:22:cc:51:45:6f:9e:de:2b:9d:d8:3a:7f:
8b:2b:62:09:36:b9:c6:b6:24:7b:9e:d2:08:88:b6:2e:08:63:
23:fe:39:f2:50:e8:3b:e6:5f:14:6a:f9:0b:26:1c:a0:f8:8a:
ed:c4:b8:28:8e:e6:70:71:35:11:1f:42:95:20:c4:76:8b:3f:
0a:90:f1:34:27:04:95:49:1f:a8:03:db:f9:b2:65:f8:cd:90:
54:5b:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:50 2025 by rpki-client