Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/bKSpPE5-kXmlbnT7r_1atj4jQSY.roa
File: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (raw, json)
Hash identifier: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=
Subject key identifier: 6C:A4:A9:3C:4E:7E:91:79:A5:6E:74:FB:AF:FD:5A:B6:3E:23:41:26
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 0194266B55B8789D2011691CF9B6C83FB29C
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/bKSpPE5-kXmlbnT7r_1atj4jQSY.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 193.163.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:55:b8:78:9d:20:11:69:1c:f9:b6:c8:3f:b2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ca4a93c4e7e9179a56e74fbaffd5ab63e234126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:22:21:a1:65:5d:7c:9a:14:89:27:86:4c:
49:4e:27:74:e2:ce:89:8b:96:23:fc:c8:a2:8f:96:
65:32:b5:20:d3:ac:ad:9c:8c:83:6f:92:39:35:27:
d9:cd:9e:5e:1d:f4:aa:e2:f3:17:1d:80:ae:a7:c4:
38:84:55:24:35:78:21:7b:b9:08:8d:4f:6c:b7:d1:
69:da:40:d5:e2:92:18:4b:4d:f7:81:d9:0c:90:50:
1a:4f:d3:02:26:65:91:7e:f9:a6:95:4d:4f:ac:c7:
68:68:c9:42:8f:0a:fe:e7:cc:6f:4a:ca:64:b3:25:
4c:91:64:d1:3d:b2:ca:fc:16:f9:64:6a:f0:57:d7:
3b:24:d4:63:dd:d8:0d:f2:7b:c7:5f:30:e9:bc:14:
5b:f5:88:29:b6:39:b2:a7:8c:64:55:ea:31:c8:75:
51:bf:ce:e5:23:67:30:34:3f:98:04:9b:45:bf:c3:
72:d0:19:f9:e0:8c:d5:79:e2:eb:33:81:25:26:c7:
e1:95:a0:06:12:37:59:0b:2b:b5:c3:34:f3:ac:c6:
b5:69:17:21:52:1a:14:52:ff:b8:11:c6:dd:50:f1:
98:79:63:30:1d:c8:5b:cf:62:55:f1:31:6d:ea:22:
5b:93:a8:40:1e:83:b1:ce:d7:0d:6c:34:e1:85:bc:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A4:A9:3C:4E:7E:91:79:A5:6E:74:FB:AF:FD:5A:B6:3E:23:41:26
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/bKSpPE5-kXmlbnT7r_1atj4jQSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.36.0/22
Signature Algorithm: sha256WithRSAEncryption
97:19:db:f0:9e:dd:2b:ab:cc:71:13:5d:98:23:45:41:8d:7c:
d4:41:1a:ab:ea:54:ba:ac:d8:d2:f8:20:46:d8:a2:af:84:df:
4c:64:c3:83:4d:c5:0d:61:43:6b:86:74:20:e8:d9:82:ff:72:
25:48:3c:10:f9:7a:dc:9c:c0:66:41:c5:ae:8c:72:b6:18:00:
5e:58:e8:00:39:b5:bb:fa:3e:c3:4e:61:ed:1d:42:a3:bf:48:
54:54:cf:af:d6:2f:5c:2d:22:d4:b0:a2:1d:d7:90:7d:09:96:
83:f5:bc:43:97:d1:62:31:e5:26:8a:50:a4:f8:3d:a7:bc:19:
28:fa:e0:83:da:6b:7b:8e:48:0b:98:98:56:d8:c4:33:b3:6b:
a5:ed:5a:35:c7:b9:c1:46:29:4b:c5:33:1e:6d:0f:03:f4:16:
16:b0:a2:94:92:05:f6:d1:6e:45:e4:7c:00:04:62:54:83:5d:
d9:8e:fc:76:09:2d:55:1a:b7:81:0a:e2:34:1e:eb:98:54:92:
a0:35:9c:d1:5e:62:52:66:1d:8b:2c:66:fe:17:66:53:c3:3a:
50:00:96:14:2c:26:05:14:79:de:0f:f7:c7:dd:6b:ea:46:2b:
9a:41:a9:5f:54:2d:e9:ce:73:31:a0:ac:d4:7a:02:e9:2a:79:
77:e7:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:58:22 2025 by rpki-client