Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/H6qICffwGnTYy8_ZyiyIfXYe21w.roa
File: H6qICffwGnTYy8_ZyiyIfXYe21w.roa (raw, json)
Hash identifier: Rhx/YMfpXSS2FChlUjPL4mfJq8PYbWnGM1V4jGYutUE=
Subject key identifier: 1F:AA:88:09:F7:F0:1A:74:D8:CB:CF:D9:CA:2C:88:7D:76:1E:DB:5C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206854EA90E065166F83C3A183B3F0A8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/H6qICffwGnTYy8_ZyiyIfXYe21w.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209759
IP address blocks: 193.233.201.0/24 maxlen: 24
193.233.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:ea:90:e0:65:16:6f:83:c3:a1:83:b3:f0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1faa8809f7f01a74d8cbcfd9ca2c887d761edb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:93:db:39:a3:47:47:96:c2:d7:c9:94:cf:
b0:12:0a:d9:a3:c2:f2:c2:70:8a:71:1b:2b:10:11:
b8:00:14:35:dc:35:5f:26:6d:7d:b9:d4:3c:15:f1:
69:72:e2:3f:7c:66:c1:f2:1e:a9:44:62:99:0f:a0:
15:8b:b4:c7:76:d8:cf:62:65:50:f3:4b:38:97:64:
01:23:75:18:69:1b:70:47:1b:cb:70:59:b8:a2:6a:
26:e6:7a:cc:86:bf:11:d4:4b:14:93:ba:54:05:2e:
8f:3c:ef:be:34:9f:1b:fa:4c:ea:fb:ef:bb:69:5f:
9b:b0:c1:f3:3b:bf:e6:24:80:33:d5:8c:a4:cd:76:
7e:a7:6b:c3:1d:49:f2:e9:a2:9c:2e:8c:28:4a:bb:
ba:35:66:24:be:75:c9:76:71:5f:ba:c8:be:02:f9:
8f:69:9a:ba:8c:ca:af:6f:e5:e2:16:16:01:51:23:
38:b7:9c:fd:1a:bf:43:3e:d6:0c:e9:29:cc:7b:1f:
59:4e:eb:f8:4f:10:09:ad:57:f8:2d:16:2e:71:e2:
3f:31:3d:79:39:21:f1:c7:f1:18:f0:b9:6e:f2:1a:
e9:ea:05:66:0e:7f:63:e4:15:25:9e:57:19:d2:1f:
67:e0:ea:15:77:bf:f4:2f:72:4f:8b:39:b3:9e:7d:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AA:88:09:F7:F0:1A:74:D8:CB:CF:D9:CA:2C:88:7D:76:1E:DB:5C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/H6qICffwGnTYy8_ZyiyIfXYe21w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.201.0/24
193.233.244.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:49:1e:64:a6:73:1f:45:02:19:c9:61:d2:2d:31:c3:8a:7d:
b2:ae:4c:a3:e3:26:06:02:9c:f4:b7:06:7d:8b:c9:79:08:50:
70:98:96:42:7c:f4:75:3d:81:e1:a8:22:0a:52:6b:a3:02:aa:
2d:dd:9b:d7:bf:e0:fb:fb:f4:bc:47:53:d4:ff:df:ad:f4:89:
a1:36:b4:78:32:b2:82:bb:3f:57:dd:75:58:26:fa:20:fa:b1:
3d:34:58:0c:e2:86:5f:89:4d:0e:76:03:9d:bb:74:ab:82:0c:
7a:b1:51:0c:67:2a:f0:84:e0:65:de:c9:d4:ea:0a:50:1d:02:
eb:f9:5a:f1:b2:a2:5f:b1:fc:b9:e3:47:9b:58:80:d3:d3:7c:
af:c4:48:a6:57:ef:2b:18:59:ab:f6:1f:b0:fb:7c:c0:6b:39:
f2:2e:6e:dd:d0:7d:3a:83:0e:99:e3:4f:55:17:84:ec:d2:eb:
04:94:d8:a1:c0:3c:b2:cf:b5:c7:7e:2a:04:34:d0:4e:17:d0:
9e:fe:fc:c6:d3:a2:77:a4:de:4c:5c:c1:ce:c5:b0:7e:52:2d:
c4:ab:d0:34:09:20:59:a9:99:5d:ee:e6:6e:83:09:40:57:33:
3b:47:60:48:70:4e:4b:78:41:0c:64:3d:21:c3:19:40:e2:4b:
24:c8:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:02 2025 by rpki-client