Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/B0641shvDQ9p2BIgOLZHHAVjZSw.roa
File: B0641shvDQ9p2BIgOLZHHAVjZSw.roa (raw, json)
Hash identifier: bvzmPdErYhIKPNksHZ+/ri9guEtRIMbmfasCvweNx4w=
Subject key identifier: 07:4E:B8:D6:C8:6F:0D:0F:69:D8:12:20:38:B6:47:1C:05:63:65:2C
Certificate issuer: /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial: 0194266C12F713E5F4D27A4C084FCEE1604E
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/B0641shvDQ9p2BIgOLZHHAVjZSw.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.56.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:12:f7:13:e5:f4:d2:7a:4c:08:4f:ce:e1:60:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=074eb8d6c86f0d0f69d8122038b6471c0563652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:ba:43:90:89:6b:c7:24:f9:be:1b:48:40:
24:51:b8:5e:aa:f2:7a:0d:f7:6b:60:84:4b:af:f6:
d7:70:85:61:6d:b6:66:af:02:24:8a:94:1c:d3:ce:
3a:b7:31:f9:b7:1b:29:e5:35:cd:4e:1a:f8:00:85:
fd:cf:f7:5d:95:76:23:5e:e0:67:a3:3d:1d:f9:02:
4d:10:10:e3:52:49:32:4d:c9:bc:31:52:a8:6c:4b:
55:3c:11:9f:3b:ef:ef:08:d9:38:1b:3d:25:9e:8b:
31:f9:86:a4:af:42:0b:0d:22:06:b2:dc:16:7e:b1:
36:ea:1c:8b:0f:14:20:62:4f:0d:87:1e:ee:5b:12:
07:88:2c:e6:d2:ba:e0:0b:91:03:39:c3:07:05:f9:
c3:ef:4d:a2:b0:6e:d3:6d:97:e5:1d:32:16:91:f8:
40:2e:44:bb:4b:3c:99:cb:4f:04:88:d0:fd:90:d1:
c7:66:74:e1:79:55:b3:07:13:0e:96:6c:d3:8d:ba:
61:ca:a6:20:be:62:81:df:81:08:3d:c7:65:01:a9:
30:f6:5e:d4:ff:f9:0b:c0:c9:03:da:35:f3:96:6f:
07:54:19:04:50:ba:af:92:71:b4:e2:e5:22:6b:a0:
79:9f:16:32:ef:ca:4d:d4:c7:09:02:c7:96:16:58:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4E:B8:D6:C8:6F:0D:0F:69:D8:12:20:38:B6:47:1C:05:63:65:2C
X509v3 Authority Key Identifier:
keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/B0641shvDQ9p2BIgOLZHHAVjZSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.33.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1e:02:fd:98:9b:5d:91:87:78:bd:d5:64:d2:aa:8b:d4:e7:
b8:a9:57:db:c5:56:1e:32:ea:7d:12:ed:d7:ba:60:b6:9d:c1:
e3:28:af:ee:65:b6:51:a2:c1:ca:9a:11:61:5e:ba:cd:f2:df:
6c:52:a5:e9:93:91:84:11:0b:82:30:0c:a2:0d:6a:9c:5d:de:
f2:e5:1a:f3:5d:c3:ab:0d:ce:e7:d6:b0:73:72:fa:71:07:14:
8d:8e:26:82:f9:ec:ba:82:d0:26:1f:11:5e:f5:a6:c9:e6:7e:
9a:0e:44:85:c0:e1:e3:aa:8c:c7:48:8a:30:25:14:96:ff:a4:
d4:dc:f1:64:b6:a5:8b:ed:c2:61:20:65:78:88:0e:80:48:28:
78:a4:68:c3:2d:ea:74:0b:01:a1:dc:b0:d0:78:79:b3:fe:56:
d1:21:b8:b7:7d:f3:93:45:08:37:dd:01:ab:f6:80:88:27:8b:
f4:48:a5:a5:92:1c:88:3d:5d:3f:f6:27:ea:10:81:52:a3:f2:
37:73:bc:02:df:ad:12:f1:86:01:18:7d:98:4f:8d:53:aa:38:
96:68:5e:9a:0c:73:6b:05:f6:f2:44:d1:ec:c4:5e:5d:1b:63:
ca:b1:d9:a7:d7:ed:2b:46:8a:ad:09:11:06:3a:d1:af:54:95:
8b:2d:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:23 2025 by rpki-client