Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/f0JNWqb0_sxkiR-fghzvzpbVYUw.roa
File: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (raw, json)
Hash identifier: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=
Subject key identifier: 7F:42:4D:5A:A6:F4:FE:CC:64:89:1F:9F:82:1C:EF:CE:96:D5:61:4C
Certificate issuer: /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial: 019427480EE3B6CEB9B32A3C198BFA7D4847
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/f0JNWqb0_sxkiR-fghzvzpbVYUw.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50281
IP address blocks: 193.106.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0e:e3:b6:ce:b9:b3:2a:3c:19:8b:fa:7d:48:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f424d5aa6f4fecc64891f9f821cefce96d5614c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:f0:ce:a6:ec:35:6e:6c:53:55:05:b0:c8:
72:9f:e2:61:0e:8a:5f:db:38:04:46:2d:ff:ac:db:
f9:49:f2:ad:b4:c8:66:a8:a2:d0:62:09:9b:c7:c6:
c5:e8:9c:52:a2:cd:90:48:a1:e2:5d:82:e7:65:0d:
84:20:a8:fd:52:6c:f2:bf:7e:78:79:0e:36:0f:30:
48:2a:f6:31:cf:67:bd:1b:f9:65:93:7f:14:36:f5:
f4:53:db:bc:dc:4a:e4:93:43:87:48:6b:02:c5:cc:
26:fc:b0:d5:f4:15:fe:c7:01:9a:9d:99:a7:09:61:
88:45:f2:c8:8b:90:b4:c8:29:bd:1f:a8:b5:9c:12:
42:a7:6d:fa:a1:16:44:7b:c8:87:5c:1f:ca:ea:26:
99:ea:03:e4:70:3a:a2:1b:6c:05:c7:a2:b3:14:b8:
6f:d8:bf:fd:aa:68:3d:87:6b:b7:bc:60:29:c8:d9:
44:7f:91:81:f6:2e:39:5e:5f:08:76:59:b1:f9:6f:
05:0a:4a:dc:5d:c7:20:91:8a:91:07:fe:99:97:1c:
66:da:13:99:f3:9e:10:2b:23:e5:d3:c8:e7:48:87:
51:7a:52:a3:fd:33:79:9f:ce:a0:03:2b:6f:fd:e3:
57:1b:f6:a4:79:8c:96:89:a4:56:3c:94:7b:6f:d0:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:4D:5A:A6:F4:FE:CC:64:89:1F:9F:82:1C:EF:CE:96:D5:61:4C
X509v3 Authority Key Identifier:
keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/f0JNWqb0_sxkiR-fghzvzpbVYUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:81:dd:50:ae:c4:53:3f:cf:60:11:bd:d1:79:4a:41:a7:a6:
29:c5:82:6f:ee:4e:c0:1a:87:3b:1e:71:3a:93:95:f8:f5:1f:
bf:50:6f:60:ae:76:2c:85:d9:af:88:ac:2b:c8:bc:07:e5:29:
f6:c6:1a:7b:46:5e:fa:59:cc:92:5d:f2:c1:b4:12:f8:87:d0:
63:a3:13:20:2b:90:37:c7:a1:6c:2f:97:e6:3f:da:38:05:68:
2b:be:a7:d6:c5:b8:bd:b4:5c:4b:b6:7f:31:ae:9b:a1:2c:9e:
69:b3:c3:69:2d:9d:6a:0f:81:0e:f4:eb:60:45:a0:18:f8:c4:
44:15:31:6b:74:ac:7c:e5:dc:ed:85:0e:ce:06:f2:ab:cb:ad:
5f:55:e3:83:c9:92:c1:18:e8:2b:3f:3c:84:9f:92:c6:98:8a:
8d:9a:b0:b5:f1:5e:a4:19:fa:96:ec:28:a9:4e:c2:cf:2b:a8:
9a:8d:87:a9:b2:f1:0e:8e:ff:aa:3d:3a:40:f6:16:95:cf:7d:
56:ce:1b:6e:06:cb:42:aa:5b:ce:be:f9:38:6f:5c:49:45:62:
25:3a:fd:1f:bb:23:38:8b:55:1e:9a:1f:f5:a4:d3:4f:e7:51:
7f:4e:a0:0f:6e:6b:1d:6b:3c:9e:f2:df:3a:dc:96:9f:3e:83:
9f:6a:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:51 2025 by rpki-client