Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/RbEpAKQG7wVxJeMBAAdcRq0yzb0.roa
File: RbEpAKQG7wVxJeMBAAdcRq0yzb0.roa (raw, json)
Hash identifier: KywTCwg5EUalLAX2qqAKglnkKODQnvKVTRxz862ZQ/8=
Subject key identifier: 45:B1:29:00:A4:06:EF:05:71:25:E3:01:00:07:5C:46:AD:32:CD:BD
Certificate issuer: /CN=6d1ad5941b3ab2b4f1f1b999ae41deddc7b9d79a
Certificate serial: B9A5
Authority key identifier: 6D:1A:D5:94:1B:3A:B2:B4:F1:F1:B9:99:AE:41:DE:DD:C7:B9:D7:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRrVlBs6srTx8bmZrkHe3ce515o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/RbEpAKQG7wVxJeMBAAdcRq0yzb0.roa
Signing time: Tue 10 May 2022 13:51:32 +0000
ROA not before: Tue 10 May 2022 13:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 193.47.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47525 (0xb9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d1ad5941b3ab2b4f1f1b999ae41deddc7b9d79a
Validity
Not Before: May 10 13:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45b12900a406ef057125e30100075c46ad32cdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:04:80:dd:09:ad:2e:32:3f:5a:59:28:af:
f0:26:e8:81:49:f4:5c:41:b9:1b:fe:5f:aa:02:02:
62:0c:15:a7:5f:ea:4f:a2:cc:27:bd:e5:41:5b:11:
44:0e:9e:3a:5c:4f:f1:0b:75:4f:1a:b5:e2:ed:fe:
c7:21:9d:4e:ce:24:04:3f:18:1b:00:cb:05:25:c9:
af:fa:1f:94:a9:a2:41:cb:ed:5b:0a:e2:ea:b6:1b:
fb:81:25:7d:42:b1:a0:31:29:ee:0e:7f:84:b2:14:
71:d2:5a:d2:79:b1:51:e3:ad:e1:5e:0f:06:42:db:
08:c3:41:c7:aa:d5:9b:cf:ea:83:2e:a2:78:8b:64:
6a:dc:44:26:e8:9b:15:7b:d9:a4:90:dc:66:06:9c:
cf:61:23:78:1f:3f:d4:55:3d:42:07:44:aa:7a:54:
ec:7e:d8:bc:98:f2:71:0f:c2:0f:a4:98:5a:b2:de:
65:79:fc:2a:e5:c7:92:d7:1b:c3:ad:b6:af:59:de:
b0:93:e4:11:8f:06:30:51:84:dd:d2:cc:7a:4a:50:
26:0b:83:75:36:49:f8:6e:52:14:54:77:53:a7:77:
06:09:95:2e:4e:e7:eb:66:71:4e:19:fa:d3:14:e5:
1e:16:04:d5:80:78:6a:b0:43:c1:96:f8:31:c2:84:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:29:00:A4:06:EF:05:71:25:E3:01:00:07:5C:46:AD:32:CD:BD
X509v3 Authority Key Identifier:
keyid:6D:1A:D5:94:1B:3A:B2:B4:F1:F1:B9:99:AE:41:DE:DD:C7:B9:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRrVlBs6srTx8bmZrkHe3ce515o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/RbEpAKQG7wVxJeMBAAdcRq0yzb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/bRrVlBs6srTx8bmZrkHe3ce515o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.140.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4a:9d:cd:be:9d:51:02:dc:2b:a3:1d:d1:14:fc:53:db:0b:
fa:29:a6:52:41:f2:0c:43:27:b8:cd:66:ab:5a:01:63:5b:8f:
de:5e:ff:64:3f:62:f5:d2:4f:3c:d1:7c:fb:27:e3:3d:f4:ce:
ad:b7:23:ef:ec:0c:6b:fd:ec:73:d9:9c:f8:5a:01:81:72:35:
f8:ec:26:9d:65:58:ee:12:6e:04:c8:8d:51:40:c7:ab:49:08:
ab:02:23:ee:83:07:6b:f1:23:b7:24:08:c7:0c:6f:28:4b:66:
9d:90:1a:9f:40:55:9c:97:08:7b:28:0c:45:93:59:77:d1:c3:
3c:4d:f7:07:7d:e8:a5:e3:e3:a5:2b:70:4d:2e:a3:0c:46:7a:
b3:25:6e:47:58:70:72:8d:64:49:db:62:17:27:c5:f4:7d:e4:
e4:43:35:3a:c9:94:50:6f:5b:d7:21:30:16:64:a1:ff:0d:d5:
90:c1:6a:22:2a:c8:92:6e:c1:0b:fe:ec:33:8f:73:18:1e:55:
c2:db:b3:f4:91:77:58:e1:5e:75:48:25:e0:08:7b:fd:f8:0f:
14:6d:2c:45:85:d3:b8:a2:e9:a2:cc:e4:38:9d:af:68:87:06:
fb:56:45:bb:d9:ed:a6:f7:80:8f:98:6a:20:ac:0f:40:c5:76:
03:b4:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:04 2025 by rpki-client