Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9141d0-07ec-446b-8ac4-0d1e8dcf38cd/1/CuPqK6F1G0Zi0CzXbyGkCmhYnQ8.roa
File: CuPqK6F1G0Zi0CzXbyGkCmhYnQ8.roa (raw, json)
Hash identifier: I6iKBWPbnYNkVG932V94IeOPBpjuPmVWpW6kS2kSh4U=
Subject key identifier: 0A:E3:EA:2B:A1:75:1B:46:62:D0:2C:D7:6F:21:A4:0A:68:58:9D:0F
Certificate issuer: /CN=01e7343b1bd7a2de91a3ede8cc971c5580a21d10
Certificate serial: 06A5D6F3
Authority key identifier: 01:E7:34:3B:1B:D7:A2:DE:91:A3:ED:E8:CC:97:1C:55:80:A2:1D:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aec0OxvXot6Ro-3ozJccVYCiHRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9141d0-07ec-446b-8ac4-0d1e8dcf38cd/1/CuPqK6F1G0Zi0CzXbyGkCmhYnQ8.roa
Signing time: Sat 01 Jan 2022 07:53:24 +0000
ROA not before: Sat 01 Jan 2022 07:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13287
IP address blocks: 193.246.154.0/23 maxlen: 23
193.246.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111531763 (0x6a5d6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7343b1bd7a2de91a3ede8cc971c5580a21d10
Validity
Not Before: Jan 1 07:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ae3ea2ba1751b4662d02cd76f21a40a68589d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:a1:59:30:ed:f4:d9:f6:03:c5:b3:da:f6:
4a:c5:de:60:c5:d1:e2:72:f5:4a:77:05:3b:02:0b:
7a:ea:fc:f6:a6:9d:c1:c3:20:eb:e3:34:f1:9b:c9:
4c:58:97:13:a6:74:36:bc:ef:49:26:b9:a9:61:8b:
66:7e:2d:0c:ed:61:48:60:40:01:26:68:7c:6f:62:
d0:18:44:23:3e:59:12:1f:0a:ff:c0:1d:43:41:39:
2e:05:58:f3:ec:25:f8:1e:63:9a:70:97:23:f6:f3:
cd:b9:a1:87:20:0e:c5:08:7f:bf:28:37:e4:7d:ac:
d6:81:16:a8:5b:20:33:fd:7b:90:7b:15:c6:22:ee:
b3:81:fa:76:f6:54:23:69:45:5b:60:a4:01:c4:2d:
e2:30:15:9f:fa:fe:e7:b2:c2:a4:7d:be:e6:8a:e4:
68:d0:5c:f6:9a:6a:6b:04:9f:20:c1:92:fd:13:17:
a9:25:1e:0a:97:41:cd:ef:a8:18:c5:50:a4:20:ed:
04:24:44:ac:d6:ec:73:83:63:6e:52:31:b7:ce:be:
a8:6f:21:a5:70:b5:02:8c:b9:d3:f4:d3:e2:a2:63:
87:26:85:07:45:c4:c8:94:05:b8:cb:1a:f4:f6:35:
db:ff:9f:11:80:63:31:2c:b9:12:7e:bf:69:f9:9c:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:EA:2B:A1:75:1B:46:62:D0:2C:D7:6F:21:A4:0A:68:58:9D:0F
X509v3 Authority Key Identifier:
keyid:01:E7:34:3B:1B:D7:A2:DE:91:A3:ED:E8:CC:97:1C:55:80:A2:1D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aec0OxvXot6Ro-3ozJccVYCiHRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9141d0-07ec-446b-8ac4-0d1e8dcf38cd/1/CuPqK6F1G0Zi0CzXbyGkCmhYnQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9141d0-07ec-446b-8ac4-0d1e8dcf38cd/1/Aec0OxvXot6Ro-3ozJccVYCiHRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.154.0-193.246.157.255
Signature Algorithm: sha256WithRSAEncryption
5c:12:3f:59:6f:62:07:93:7e:06:ed:8f:a4:13:b8:01:cc:64:
34:07:2b:8e:fc:ef:b1:83:56:98:1c:55:d4:d3:d4:e6:6b:15:
99:c8:3c:63:c2:d5:8c:8c:93:73:e3:f4:02:0c:7c:e8:5b:b2:
40:63:e3:43:d4:3d:7f:d4:45:fb:21:58:3f:a3:a4:56:11:22:
a9:5a:e7:c1:6c:97:2a:42:62:93:cd:52:88:91:bd:dd:af:99:
27:f3:57:d9:00:16:31:0e:0d:1a:d1:4d:82:22:25:4b:5e:b7:
1d:86:e0:58:94:09:ff:dc:a0:04:33:e0:39:4e:24:e1:f6:27:
b3:e2:18:5a:93:0d:d8:97:de:61:38:34:86:cf:e2:3b:75:c5:
d0:2b:f1:5b:7e:28:90:3a:2b:ee:eb:dc:9f:b9:18:14:34:c2:
04:a5:a0:24:5c:d7:28:06:96:1a:e7:c6:92:9c:63:4f:14:08:
66:c5:78:73:cb:85:db:07:69:17:97:36:ec:df:2f:d3:66:fc:
26:1f:c4:c9:64:17:5b:cb:ee:a8:a2:99:16:52:84:b2:54:e7:
7c:f1:30:59:93:aa:ac:df:81:eb:50:df:b0:15:b5:f0:6d:87:
13:45:ad:d3:ea:09:63:9e:8c:b6:0b:24:48:73:75:b1:57:39:
ab:61:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:02 2025 by rpki-client