Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/t1BHctdeN3-hwrpqiOWRf8QN_Co.roa
File: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (raw, json)
Hash identifier: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=
Subject key identifier: B7:50:47:72:D7:5E:37:7F:A1:C2:BA:6A:88:E5:91:7F:C4:0D:FC:2A
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 0194244550910DB73261C201BEC27EFE06D8
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/t1BHctdeN3-hwrpqiOWRf8QN_Co.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.104.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:50:91:0d:b7:32:61:c2:01:be:c2:7e:fe:06:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7504772d75e377fa1c2ba6a88e5917fc40dfc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:ae:e5:b8:5a:6e:e7:1e:6b:0e:e2:2e:88:
1d:b7:9d:a6:fd:b8:d5:bf:e1:d2:0a:4f:c1:5f:d7:
54:26:77:ca:97:31:f1:49:8a:b5:88:57:a8:44:2a:
a7:e9:a4:85:e3:43:e6:cd:78:84:e0:f6:a6:4b:25:
5b:e7:e0:11:f0:09:16:2a:6a:8b:e5:1d:0b:3c:35:
7b:50:18:a0:97:26:fe:58:ba:b6:9b:2c:c9:d8:81:
ca:8c:6f:8c:38:ab:06:94:4a:7d:0c:fb:8a:1f:a3:
94:9d:02:a3:07:5c:98:01:9f:c4:dd:0f:c8:b9:ab:
17:4e:01:c5:b2:58:ce:92:80:1d:95:2f:a9:9f:3e:
9e:e8:fc:0c:37:ae:9d:49:a1:ab:29:96:ec:76:b2:
a2:3c:16:22:53:7c:ec:dd:4c:30:9e:83:f1:b9:52:
be:bb:3f:42:86:08:c1:d9:b3:b2:8e:0c:10:e8:d8:
8b:6d:dc:88:b4:d5:43:f5:96:e5:b2:50:eb:7e:41:
d6:5e:e2:ae:9f:ed:3f:64:40:76:15:d2:cb:85:93:
c3:14:f3:e1:c7:d9:53:fc:b7:a4:d1:3e:d6:74:56:
56:9f:f4:47:30:73:d3:b6:17:32:a5:42:fb:9d:b1:
86:94:71:54:8c:d3:3f:48:f8:6b:f5:95:b7:f2:99:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:47:72:D7:5E:37:7F:A1:C2:BA:6A:88:E5:91:7F:C4:0D:FC:2A
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/t1BHctdeN3-hwrpqiOWRf8QN_Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f1:2e:92:5c:66:68:51:9c:a3:01:e6:17:bc:51:13:e5:54:
de:1c:44:f8:4e:0c:d9:ff:e9:52:e0:b9:83:3a:9d:63:0c:5f:
4d:bc:f5:4f:90:4c:06:ba:ad:a2:04:19:bc:2f:15:42:d8:db:
65:ab:0f:2c:f2:57:d3:db:2c:61:be:85:59:db:31:c6:f6:e6:
a3:af:08:b4:9a:c3:2e:ef:cc:7b:e1:13:51:4b:01:7d:be:06:
18:7c:d8:e5:ee:cc:8e:58:fc:3d:7b:b0:48:b8:5f:9e:25:85:
fd:02:bc:1e:d4:a4:d6:86:3b:9c:f7:89:87:7d:63:53:93:59:
b3:ee:11:2d:b7:7f:e2:9d:1e:e5:ff:99:08:6a:c6:5a:16:9a:
2c:9f:f8:fb:e2:6c:78:32:2c:a0:b4:c9:70:8f:fd:fc:2e:9d:
19:1a:0c:c0:e9:57:2c:69:ae:13:10:fa:06:4f:4a:91:f5:f6:
0d:bc:81:5f:d4:af:f7:8c:6f:d0:01:2a:ff:b7:cc:8e:b1:17:
b4:8d:17:3c:65:e4:ac:e9:e7:1c:09:91:b1:08:a5:d3:e4:58:
40:74:b0:34:7b:10:dc:1d:9d:e8:9d:dd:65:ce:e3:24:6e:e1:
f6:ce:6b:09:ec:c5:a4:9e:f1:3e:0d:5c:69:6d:9f:79:24:a3:
7f:1d:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:20 2025 by rpki-client