Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/Bs-6wD-b-2HmqrRNQGw4bUGRqkA.roa
File: Bs-6wD-b-2HmqrRNQGw4bUGRqkA.roa (raw, json)
Hash identifier: pi2Y4l36TN8ZxxyBSK3IZRfMnWMegqDfWl4mInI0tPY=
Subject key identifier: 06:CF:BA:C0:3F:9B:FB:61:E6:AA:B4:4D:40:6C:38:6D:41:91:AA:40
Certificate issuer: /CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
Certificate serial: 0185711E7342B4A6B69D166E475187946AE7
Authority key identifier: 0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/Bs-6wD-b-2HmqrRNQGw4bUGRqkA.roa
Signing time: Mon 02 Jan 2023 06:14:59 +0000
ROA not before: Mon 02 Jan 2023 06:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 193.105.95.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:73:42:b4:a6:b6:9d:16:6e:47:51:87:94:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
Validity
Not Before: Jan 2 06:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06cfbac03f9bfb61e6aab44d406c386d4191aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:78:ee:b7:4a:05:b6:f6:b3:57:78:04:32:
f1:21:46:e9:fb:fe:a9:91:11:58:1e:81:c3:a6:2a:
75:2e:53:07:f7:c5:ee:aa:60:05:6d:3f:44:e0:b6:
5b:79:82:ed:2d:69:0b:29:84:25:ac:28:d2:96:f5:
02:fd:e2:7d:a6:3c:29:ed:27:41:ca:db:6a:b9:f9:
ed:c1:8b:6f:bf:0d:9c:50:0c:67:3b:f3:3d:72:a9:
aa:14:08:9f:01:17:8b:02:6b:6d:0b:f3:85:02:40:
22:95:a7:c8:ac:6c:eb:44:23:6a:3c:0b:36:1c:cf:
fd:26:d3:0f:ed:35:88:a3:bc:3b:e3:e6:40:12:72:
fa:cf:4f:ef:77:17:52:5b:7b:34:6e:af:cf:a4:66:
2c:d3:0f:bf:79:87:e4:b3:71:53:72:8e:57:19:a8:
f5:9e:14:a4:e0:f4:e5:36:82:a4:2c:b8:64:70:3f:
76:2d:29:9a:3a:bc:3b:37:51:e0:05:a5:48:4f:21:
34:eb:36:52:0e:1a:63:95:dc:ef:8b:da:ad:b4:9d:
14:b0:e0:12:a6:ab:cb:45:1b:f4:81:28:19:e5:54:
88:ff:25:d0:39:b4:2f:70:b6:12:0b:8e:c5:98:c7:
cd:f4:29:a4:1c:56:6f:4d:fa:8b:50:7e:d6:14:fb:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CF:BA:C0:3F:9B:FB:61:E6:AA:B4:4D:40:6C:38:6D:41:91:AA:40
X509v3 Authority Key Identifier:
keyid:0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/Bs-6wD-b-2HmqrRNQGw4bUGRqkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.95.0/24
Signature Algorithm: sha256WithRSAEncryption
11:74:58:6f:cb:75:32:f5:41:85:8f:06:c2:b0:31:68:ef:f7:
69:f4:85:9b:25:df:a0:f1:d0:4e:e1:46:af:fb:46:e9:d9:ec:
52:3d:63:00:b2:dd:33:f3:88:0b:f4:99:1d:32:34:59:da:37:
5c:9d:b4:25:bc:ea:90:d1:91:e5:d7:8a:5e:aa:7b:26:d3:92:
76:0a:79:f8:cd:42:37:58:17:ff:b8:73:1d:32:3d:58:30:db:
93:4e:00:bc:64:5a:e5:8d:17:1a:d8:f9:7f:2d:cf:52:7d:93:
3e:22:b6:24:16:be:77:93:7d:48:b6:ec:22:8d:d9:a1:20:27:
06:b2:27:ab:18:04:53:64:cb:8a:80:c0:22:98:9c:8b:e3:00:
6a:2e:15:a0:53:6d:75:e7:98:34:ca:f5:1c:72:fd:ec:bb:4e:
18:8b:de:81:42:cc:a0:3b:7b:88:c2:28:eb:58:05:aa:48:7d:
ac:43:3b:e6:49:4c:bb:08:c8:d8:6c:4e:77:79:ea:f5:c7:98:
77:e3:a9:c1:32:8d:b6:e5:27:b2:f2:0f:bb:20:bd:3b:ab:c0:
c2:e5:72:46:fe:d1:d8:ec:0b:4c:78:37:18:60:51:83:db:4e:
b8:7a:fd:3b:c2:73:27:48:7a:6d:83:0e:77:75:8f:12:0b:ef:
ea:ef:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:33:19 2025 by rpki-client