Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BlDHoAmyD8o37KNiJ065guJysC8.roa
File: BlDHoAmyD8o37KNiJ065guJysC8.roa (raw, json)
Hash identifier: jVj3xki34Z5WHDWkpw4bO9O0EDWa9x7g3oiQfOJSuqE=
Subject key identifier: 06:50:C7:A0:09:B2:0F:CA:37:EC:A3:62:27:4E:B9:82:E2:72:B0:2F
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE898350D7B2C127B7BC161515FD9
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BlDHoAmyD8o37KNiJ065guJysC8.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199980
IP address blocks: 193.192.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e8:98:35:0d:7b:2c:12:7b:7b:c1:61:51:5f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0650c7a009b20fca37eca362274eb982e272b02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:58:b7:c0:82:34:4c:80:12:93:a0:39:f0:
72:37:f5:c2:4d:4f:b9:22:56:69:12:4f:98:8e:d7:
29:6f:45:c6:2e:78:5e:d3:2f:9d:43:9c:24:38:ca:
11:91:f0:ac:3d:6c:04:c4:eb:14:5d:63:31:6d:a0:
0f:a9:c6:fe:90:ed:0d:4d:c6:93:18:d5:95:42:af:
55:61:2f:4b:57:08:08:05:99:21:47:32:9c:5d:68:
f8:3d:85:cd:04:2c:55:ab:b8:0d:1f:e1:ea:4c:1d:
03:83:fc:d0:e9:0f:f6:14:16:19:57:01:63:76:29:
db:cb:3c:32:2e:76:7f:3d:4c:5a:4d:56:d7:fe:8f:
3d:50:0a:9f:e7:b6:4b:eb:06:6c:42:4c:ad:b4:a1:
ba:36:b4:03:db:45:38:6a:22:54:3f:93:67:20:42:
75:f8:80:32:38:ca:78:11:dd:ec:6f:bc:37:5d:53:
1c:dc:e4:b1:e2:cd:ec:df:f0:81:48:31:23:7d:a9:
87:01:4e:74:17:54:b0:d3:a4:d7:c8:55:e2:7f:d1:
eb:99:ea:52:36:93:da:27:5a:b8:b8:07:b3:64:05:
85:d1:4d:a9:76:ac:5d:de:3e:a5:56:6d:04:de:12:
be:70:3c:c1:f0:f1:ae:59:74:59:ec:2b:40:d5:6a:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:50:C7:A0:09:B2:0F:CA:37:EC:A3:62:27:4E:B9:82:E2:72:B0:2F
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BlDHoAmyD8o37KNiJ065guJysC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.174.0/23
Signature Algorithm: sha256WithRSAEncryption
20:09:f3:99:e4:d7:c1:34:e0:f9:c6:a0:98:1b:95:6d:89:b0:
42:4e:85:8f:96:86:ed:3c:41:25:ec:2a:b6:55:e9:86:db:31:
75:b8:ac:94:cd:64:48:b2:65:aa:93:6c:8a:63:e5:3d:fe:c0:
4e:d5:40:5c:7c:f4:6d:dc:a9:95:b0:6a:f3:14:88:99:ce:4f:
5f:e8:8d:ab:dd:82:79:29:b7:58:c4:59:81:16:2b:7e:e7:f3:
b7:69:88:a6:cb:a1:63:c1:50:d9:29:21:f2:7e:56:3c:34:2f:
03:b3:59:30:e6:a2:9e:67:1c:7b:8d:51:c4:0a:3e:d2:4d:a8:
42:49:c3:b9:d5:f7:7a:95:3c:82:a5:8f:78:b8:d3:44:9a:b3:
5a:d7:17:b2:5c:71:19:36:d7:fd:91:e0:c8:14:10:1d:c9:88:
1f:d0:e9:da:d3:0f:34:8f:a0:a0:35:ed:65:d5:77:7f:0b:a7:
6d:c1:93:09:58:04:8c:da:37:6b:f7:b8:54:c6:e8:94:ed:11:
c3:95:75:a2:38:4c:80:2a:a0:3f:5a:da:a3:9b:5d:c3:e4:60:
b1:e6:92:b5:3a:3e:96:d2:ba:26:ab:51:44:e9:63:c1:18:52:
35:27:04:9c:d1:50:5b:2d:b2:24:ab:78:5d:c1:8e:01:ad:e4:
00:19:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:23 2025 by rpki-client