Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/C6QrR_-eMlTUkk0YbCL4MEqbMsY.roa
File: C6QrR_-eMlTUkk0YbCL4MEqbMsY.roa (raw, json)
Hash identifier: vEzjCldlwBqvfdgSxkCe6K6ClsQneMMERI8fZEQWhiQ=
Subject key identifier: 0B:A4:2B:47:FF:9E:32:54:D4:92:4D:18:6C:22:F8:30:4A:9B:32:C6
Certificate issuer: /CN=219f8d1fba35d49835d42fcd2294008fa741da8f
Certificate serial: 0185735F02ACCB61818C6D2580CE2CD89615
Authority key identifier: 21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/C6QrR_-eMlTUkk0YbCL4MEqbMsY.roa
Signing time: Mon 02 Jan 2023 16:44:44 +0000
ROA not before: Mon 02 Jan 2023 16:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 193.32.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:02:ac:cb:61:81:8c:6d:25:80:ce:2c:d8:96:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219f8d1fba35d49835d42fcd2294008fa741da8f
Validity
Not Before: Jan 2 16:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba42b47ff9e3254d4924d186c22f8304a9b32c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c5:99:45:cd:98:16:de:02:d5:b9:5f:93:8b:
86:64:5d:49:23:b0:6c:ae:3c:38:00:eb:cf:ac:0d:
5b:e0:9b:92:fd:4b:4d:15:fa:26:54:be:3e:86:e7:
6b:2c:18:50:cd:cd:f1:97:ec:b8:9f:cf:19:3a:60:
b5:69:19:59:15:f5:32:1f:d4:06:4d:60:bb:04:22:
1e:32:86:0c:10:8c:b3:b8:8a:12:0b:2d:87:40:de:
fd:ed:95:c8:6d:64:73:4a:86:0a:41:46:a3:96:96:
7e:be:0b:bc:b3:3f:99:ba:cc:bb:eb:b0:86:5e:1f:
d0:83:65:c9:cc:2f:ca:04:9b:49:f4:eb:49:c8:28:
51:dd:be:3b:1e:74:97:ec:3e:ed:fe:7e:ba:3f:d8:
56:85:b7:f3:6f:ec:87:57:a2:c2:12:b7:7b:d5:ca:
4e:42:5f:19:f7:6e:19:9f:6d:11:96:24:12:ae:c4:
73:ed:f3:a7:c6:d6:a3:f3:fa:1b:f2:01:e0:e6:c8:
30:76:ea:51:87:d2:63:fb:34:71:de:16:cc:79:22:
ef:68:b2:b8:20:de:cd:05:4c:5b:38:3e:3a:81:09:
5f:df:f9:ff:58:c8:ee:20:0a:e5:57:01:93:81:6d:
a0:70:61:45:7a:46:ea:d0:b1:4b:34:65:f9:09:92:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:2B:47:FF:9E:32:54:D4:92:4D:18:6C:22:F8:30:4A:9B:32:C6
X509v3 Authority Key Identifier:
keyid:21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/C6QrR_-eMlTUkk0YbCL4MEqbMsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.85.0/24
Signature Algorithm: sha256WithRSAEncryption
61:71:64:b4:d6:82:76:ce:58:55:0a:13:f1:da:66:85:5e:0b:
6c:2f:3a:a1:0c:7c:c1:a5:42:85:c1:47:f3:3b:0b:0d:7d:0d:
79:45:eb:12:89:88:f2:66:fb:34:ff:5b:c0:2a:17:1d:ec:c2:
52:18:23:ed:6f:2b:dd:13:d7:c9:d5:14:dc:57:e1:72:02:8d:
ea:28:f2:96:76:be:69:a1:da:f2:d3:01:24:3a:f3:cf:50:d8:
1a:e1:ac:6a:51:cc:e5:d9:a2:48:86:03:01:4f:93:0c:31:ab:
ca:93:b4:91:32:1d:cd:8c:f3:d9:42:2b:a8:e3:a0:ab:ad:09:
eb:ce:4e:21:b8:27:a5:cf:13:c2:0e:7e:58:41:33:6a:58:dc:
48:73:89:89:45:42:9b:27:c8:d9:c6:f9:b6:cb:00:ff:37:b1:
ae:fc:d1:3f:23:cc:3a:77:44:0f:c3:b9:49:f8:16:2e:9d:d1:
4b:0b:18:bd:e3:56:87:ce:2e:bd:c7:d0:35:f1:89:66:22:ba:
9d:d5:ed:f5:0e:5b:af:87:a8:ea:c0:60:66:07:6a:35:08:b3:
64:6f:37:e9:57:3b:ce:33:7b:1d:0c:85:2c:07:cd:c5:27:90:
c6:cd:69:95:fd:49:12:e5:73:af:3c:f2:a0:b4:35:ee:e9:43:
12:d8:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:15 2025 by rpki-client