Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/bvyPRNj6uBvtrabHoJm5S8IFYC0.roa
File: bvyPRNj6uBvtrabHoJm5S8IFYC0.roa (raw, json)
Hash identifier: WaRs//gQRF7QtbnX9794OjSf2YiePlNYWVkK30+VY+8=
Subject key identifier: 6E:FC:8F:44:D8:FA:B8:1B:ED:AD:A6:C7:A0:99:B9:4B:C2:05:60:2D
Certificate issuer: /CN=19aed7327289167009b96c40e3880ade66800a3f
Certificate serial: 0194252181A20BDD063D4E0F2819A7AC5EB4
Authority key identifier: 19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/bvyPRNj6uBvtrabHoJm5S8IFYC0.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42404
IP address blocks: 193.33.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:81:a2:0b:dd:06:3d:4e:0f:28:19:a7:ac:5e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19aed7327289167009b96c40e3880ade66800a3f
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6efc8f44d8fab81bedada6c7a099b94bc205602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:78:61:df:3c:11:6d:77:96:1c:9e:08:e7:
bf:a1:16:2a:48:9f:03:ec:9f:42:fb:4a:e8:ab:5d:
ee:d0:40:4c:d6:10:9b:70:d8:ea:44:ee:75:30:2c:
66:d5:87:e8:ea:f9:0a:48:ff:18:d1:b4:d6:53:a3:
72:ac:6b:2b:04:c9:ca:8a:9f:72:2e:db:fb:13:cd:
0f:57:33:62:9d:d5:fd:01:5a:45:a5:8f:c5:4f:c1:
a1:eb:68:51:6c:a6:80:75:8a:6f:cd:76:61:71:cb:
3e:24:9c:0e:45:3c:34:37:70:88:2d:3f:8a:cd:0b:
7d:c5:88:56:2e:bf:57:94:10:a9:ce:e7:72:d3:0b:
ff:92:cf:72:c5:cb:2d:5b:93:62:b2:4c:6d:cb:f8:
8e:0c:09:11:da:ad:73:9a:04:4b:92:cd:50:28:41:
1c:03:ab:37:de:28:dd:1a:be:45:78:1c:1b:48:f8:
29:50:d3:56:e9:87:4b:5d:c6:e3:72:e3:f1:ee:f7:
cf:5d:59:78:2f:23:e6:b7:95:35:09:6c:46:ad:19:
5f:be:fd:1d:a2:6d:26:c9:43:bf:19:06:96:ca:61:
16:c9:e3:04:5f:f8:8b:db:47:b0:fb:54:3d:87:d0:
f8:d7:8d:ce:8d:1f:b0:12:63:cf:f1:00:69:b3:4b:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:8F:44:D8:FA:B8:1B:ED:AD:A6:C7:A0:99:B9:4B:C2:05:60:2D
X509v3 Authority Key Identifier:
keyid:19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/bvyPRNj6uBvtrabHoJm5S8IFYC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.90.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:b0:b8:01:ff:ab:31:fa:f5:8e:31:fc:a5:78:77:2b:17:30:
82:c7:99:52:4f:66:5a:e2:63:53:dd:97:60:d1:cd:16:b4:4e:
ce:ca:a1:dd:6b:7b:66:c6:7a:3c:9e:3e:a4:f4:29:7c:7d:64:
c5:1e:27:6e:e7:ec:73:47:d8:5f:73:84:3b:d9:b8:2c:41:a8:
b4:5c:3d:14:b9:95:ac:cd:e9:0b:a6:d4:2b:48:2e:aa:75:82:
3e:8b:f3:76:71:08:77:4e:d7:23:a2:e3:8c:bc:c6:e0:4e:df:
b9:63:ba:35:de:42:c3:00:e2:0f:86:a2:77:ca:41:89:0b:9f:
7d:c9:94:74:92:55:fd:30:74:5a:50:94:9e:58:d7:94:68:72:
bf:01:be:75:47:dc:58:f2:9a:08:ee:4b:57:23:20:cc:fb:e0:
0c:ea:47:0f:80:62:47:b5:f2:b4:6d:33:38:f8:04:a5:98:e9:
a0:36:ee:eb:b2:76:39:b0:be:f2:e2:d7:a5:34:08:ea:33:cd:
7e:32:86:38:e7:e7:a1:a1:ac:90:47:5e:da:29:9c:c1:7d:00:
8c:83:ab:53:7d:12:13:8d:f9:8e:18:c9:9a:d5:ab:d1:c3:6d:
15:b0:47:34:39:e6:32:a6:f5:29:ad:25:58:00:02:18:e2:af:
7c:07:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:15 2025 by rpki-client