Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/b8d45aGK2_jlUvYMzuARLpkxTkc.roa
File: b8d45aGK2_jlUvYMzuARLpkxTkc.roa (raw, json)
Hash identifier: mrAy2GS8ZLSyHrVAKiLyVnOz9c+S9c272C1tKMiwaYg=
Subject key identifier: 6F:C7:78:E5:A1:8A:DB:F8:E5:52:F6:0C:CE:E0:11:2E:99:31:4E:47
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF1F7FE20AA7D891C74B9B7EECACA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/b8d45aGK2_jlUvYMzuARLpkxTkc.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205342
IP address blocks: 193.192.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f1:f7:fe:20:aa:7d:89:1c:74:b9:b7:ee:ca:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fc778e5a18adbf8e552f60ccee0112e99314e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:49:b0:42:e8:65:c4:6f:9a:b6:98:a5:2d:
ff:54:ef:f4:91:8b:04:50:17:9f:48:2b:11:0d:48:
4f:d8:c4:51:ac:d6:6d:e8:30:ff:0e:27:e9:98:fd:
fb:82:d5:6b:20:79:01:d7:1e:ab:f6:ed:51:e0:d1:
0b:c2:79:33:00:d0:cc:09:4f:8e:83:df:2f:ec:6a:
c4:28:56:50:ff:78:7d:f6:cc:1f:e8:88:3f:c1:8e:
01:9c:d8:e2:b9:6a:29:15:ab:2c:30:52:0f:17:e8:
13:28:25:7b:5f:55:90:68:8e:b9:95:91:35:9d:46:
d2:b2:62:a4:d5:ad:5d:80:88:65:fb:6b:1d:12:61:
e8:aa:aa:2a:0f:6c:0e:57:82:b8:d9:47:2a:86:3f:
c5:74:0e:83:0a:6d:a0:f9:6f:f6:87:11:18:5b:7d:
1f:df:9c:6c:47:18:8e:9e:0d:ad:7e:6d:da:ba:32:
9f:76:6a:57:d2:fa:8d:a3:fd:0b:6b:56:74:d4:2b:
c2:5f:88:46:33:53:42:ed:42:91:13:b0:7b:ca:13:
2e:b1:bc:cc:59:d0:1a:7c:17:38:46:33:77:97:b7:
3b:1f:5b:6f:bf:d1:a3:f4:1c:a7:1f:23:31:63:20:
0a:da:fa:2f:65:aa:ed:88:df:58:b6:a8:b4:ef:f6:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C7:78:E5:A1:8A:DB:F8:E5:52:F6:0C:CE:E0:11:2E:99:31:4E:47
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/b8d45aGK2_jlUvYMzuARLpkxTkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ed:f0:4e:3c:87:41:1c:1a:63:35:c3:a9:a0:a2:2e:59:a9:
55:b9:4d:39:c5:25:78:30:81:af:45:26:98:3c:e3:b8:57:25:
eb:00:23:d8:11:99:f6:ce:ac:b2:00:29:0f:b4:73:d4:a0:32:
b7:57:ce:25:7c:6e:a9:a7:b5:92:54:d6:00:54:87:bf:7b:07:
39:ff:42:b3:e1:0c:85:5e:28:b6:14:6c:54:0b:ec:16:54:e8:
74:2e:91:da:a6:b5:32:9d:5e:e9:15:e5:df:66:d3:c5:f3:41:
55:80:f8:96:81:b8:fb:74:3d:b8:0a:a3:37:e3:db:4c:e3:48:
8d:db:84:b8:88:16:08:92:4d:f4:a8:a4:e4:a8:93:38:48:7b:
75:bb:d2:53:bf:0f:e8:3c:1c:96:a7:13:5f:17:c9:6a:63:ff:
f0:73:0b:5e:b8:07:39:69:cc:51:93:e9:3f:6e:84:67:32:ce:
77:db:65:fc:49:26:88:05:32:90:36:a9:f9:c8:14:56:36:ed:
6e:65:02:3d:ca:5e:71:d2:0b:1f:0e:dc:1f:97:09:a6:95:29:
d6:1c:e4:02:c9:ba:ad:31:1a:1f:86:24:65:a2:3e:fc:5c:d9:
8a:ef:40:98:7b:5a:09:e1:7a:44:de:57:4b:d6:21:14:1b:27:
3e:a8:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:39:59 2025 by rpki-client