Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa
File: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (raw, json)
Hash identifier: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=
Subject key identifier: AB:53:AB:C0:19:CE:80:D1:A0:FE:D4:B4:CD:9A:00:CC:F0:47:C3:57
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 01942067C5F115E12373A97C6B2D3FEDCC75
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60860
IP address blocks: 193.106.64.0/24 maxlen: 24
193.106.65.0/24 maxlen: 24
193.106.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c5:f1:15:e1:23:73:a9:7c:6b:2d:3f:ed:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab53abc019ce80d1a0fed4b4cd9a00ccf047c357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:40:dc:67:ef:30:e3:37:bf:4a:ea:f4:2e:
f7:dd:45:34:65:90:cc:58:f1:30:06:10:7e:53:9d:
51:f1:fa:8a:be:e4:e8:7b:d6:11:07:c9:5d:38:3c:
2e:d6:a1:89:0f:9d:97:34:f4:5f:95:0f:04:06:58:
77:9b:c9:2e:62:e8:27:8a:b4:f4:56:db:86:40:ad:
0b:14:72:39:30:9f:1c:b2:1c:bb:bc:9b:2e:5e:f0:
6b:96:8d:32:7e:71:ef:69:e5:60:24:bf:ed:7e:50:
22:21:60:c6:3e:97:4b:ae:5b:57:fb:90:bf:78:27:
20:ae:bb:7e:1a:b8:8c:19:8f:58:e1:3c:04:d9:31:
2d:f5:2f:1b:82:a6:3e:30:4a:e9:b8:83:82:4d:ed:
69:68:cc:a9:a1:63:85:e0:01:95:19:72:0e:c4:6d:
0c:0c:ae:08:8a:0b:f4:02:35:29:3b:18:90:a9:4e:
ff:14:30:b2:e7:8a:91:08:a0:ab:44:7b:a0:fa:db:
e2:fc:6d:20:93:26:2f:ac:79:20:53:74:32:5a:42:
b9:eb:66:51:a8:ac:d0:20:53:cd:e9:aa:eb:46:be:
b5:bc:95:b2:27:ea:49:6c:07:35:c0:17:81:1e:8c:
f0:65:ed:53:87:f7:a8:a2:c8:fb:20:71:01:f7:cb:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:53:AB:C0:19:CE:80:D1:A0:FE:D4:B4:CD:9A:00:CC:F0:47:C3:57
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.64.0/23
193.106.67.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:31:75:0d:d5:98:bb:d2:aa:c8:f7:f6:0f:ea:38:52:c3:d4:
74:3c:48:e2:05:b9:c1:34:af:86:1a:4e:e1:c0:72:29:33:a2:
fa:33:c1:ad:6d:1e:92:52:60:de:ca:c8:f9:7e:22:90:05:c1:
b5:dd:40:c7:e3:de:e5:52:ae:d8:6e:10:aa:38:4b:b9:f1:9b:
ed:1c:ac:c8:b8:4a:3b:67:49:9f:fb:41:02:45:65:b5:86:77:
f4:fb:25:79:be:d3:bf:27:11:07:9d:8a:08:b1:33:4a:f6:d7:
03:0e:aa:91:87:0c:74:72:d0:12:f8:25:b5:d6:c0:c3:ce:23:
d8:2e:b1:b8:95:6a:bd:0b:72:c3:b7:e1:94:28:42:1f:b9:59:
d3:28:07:2c:b9:7c:e7:3d:38:20:d3:c6:a1:9f:e4:ef:25:4f:
13:b7:5a:4b:70:ba:bd:4b:eb:0a:81:61:f4:e0:36:f1:d6:9d:
14:43:83:a3:3a:b7:70:52:71:e6:12:42:8e:76:f0:64:2c:91:
75:9b:a0:bb:91:13:8c:31:09:de:2b:a8:3a:f4:42:25:7b:20:
f8:19:ea:fb:5a:ad:57:2a:90:4b:89:9e:29:84:e0:36:8a:f9:
0d:fa:93:d8:55:82:c4:2b:f1:e8:74:7d:a9:91:14:5b:db:5d:
45:79:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:45:49 2025 by rpki-client