Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/bVG91rh6vJ7orCrWLltzoEytWu0.roa
File: bVG91rh6vJ7orCrWLltzoEytWu0.roa (raw, json)
Hash identifier: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=
Subject key identifier: 6D:51:BD:D6:B8:7A:BC:9E:E8:AC:2A:D6:2E:5B:73:A0:4C:AD:5A:ED
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 0194266C25F1FCE9DF9C58397F557C59DA8A
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/bVG91rh6vJ7orCrWLltzoEytWu0.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 193.56.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:25:f1:fc:e9:df:9c:58:39:7f:55:7c:59:da:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d51bdd6b87abc9ee8ac2ad62e5b73a04cad5aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:ad:9b:f4:ac:a7:33:55:50:44:3f:f6:2a:
92:5a:92:f5:dc:f0:dd:ef:db:73:d4:95:f4:82:5f:
cd:6b:1b:ae:51:76:ec:b4:af:66:00:95:a4:3f:c3:
67:d3:64:ff:75:38:d4:41:68:c1:5f:e6:80:39:36:
f7:00:0b:09:38:84:de:95:5f:50:f8:6c:61:ce:1a:
10:8a:ea:e8:f0:e7:dc:ce:2d:22:c9:53:4c:2f:0f:
77:c7:d2:04:f4:0a:b6:cd:c0:2d:a3:64:a3:ec:b3:
90:a7:c1:18:b7:b6:39:a9:5d:16:9b:71:00:db:f1:
44:20:28:69:fe:ce:a7:18:18:bd:ec:78:46:0e:c3:
c9:bf:44:a0:4b:53:c3:38:62:4b:8e:27:08:21:96:
a9:d4:bc:a3:3e:ae:64:22:eb:94:92:8b:75:74:b9:
dc:9a:57:f0:c2:be:11:16:aa:79:fe:05:19:4a:41:
b0:23:28:81:31:1b:e8:d7:47:93:a6:5d:8d:65:08:
c6:c1:f3:79:b1:a0:33:1f:70:bc:27:e6:fa:c1:d5:
6f:3a:dc:61:67:57:47:2a:7f:a7:82:59:73:48:71:
1e:87:8c:c6:7e:b7:16:77:22:bb:37:2a:65:e7:4f:
1e:29:91:3f:f6:12:09:e7:2c:9b:30:04:b9:ea:01:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:51:BD:D6:B8:7A:BC:9E:E8:AC:2A:D6:2E:5B:73:A0:4C:AD:5A:ED
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/bVG91rh6vJ7orCrWLltzoEytWu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.116.0/24
Signature Algorithm: sha256WithRSAEncryption
53:83:2c:2e:bf:14:7e:4a:7d:b4:8a:a8:9a:79:af:a4:41:cb:
21:aa:e2:b0:8c:2e:7c:ac:70:ef:cb:c2:f5:53:58:c6:35:75:
b9:a8:c2:32:66:ba:20:40:25:b2:45:f6:02:c7:f0:e6:9f:db:
bb:80:8c:a2:76:8b:96:6a:77:b9:6e:61:5b:9d:75:8f:25:dc:
93:03:fe:6c:a0:cb:53:4b:e5:1f:de:98:a3:5a:0a:77:7f:b0:
e7:5b:e7:cc:16:78:b4:eb:60:b7:3a:20:3b:a4:da:e2:27:7a:
41:cb:1b:99:ae:4d:f9:73:56:e4:68:f9:56:e1:44:e2:f0:b5:
8e:e0:39:40:93:09:1b:fd:a2:d6:2f:43:3e:94:ce:c6:ef:25:
db:60:88:8f:b4:ef:10:7b:76:59:3e:03:ae:4b:8f:4d:ff:2a:
34:e9:4b:55:d1:47:d4:90:48:18:68:8c:b0:9e:be:e5:31:40:
d3:a8:53:3a:9a:52:bb:07:c6:c1:17:5c:5a:bd:af:31:9a:20:
85:40:a5:11:84:14:d4:c9:e6:ba:a9:64:d8:2a:e1:8f:81:cc:
19:05:fc:79:6b:e2:5b:d7:47:12:1f:83:76:4c:5e:f9:55:6e:
63:31:86:cb:5f:7a:06:44:bf:89:b9:15:3b:07:cf:8e:7f:0f:
e9:03:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:30:41 2025 by rpki-client