Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa
File: CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa (raw, json)
Hash identifier: KNjghiY6hSTnyBcRx4J/plbhEv6EisGMOlJT9AxkWNs=
Subject key identifier: 0A:CB:D0:11:52:BE:11:52:54:8F:D3:BD:3B:2A:FD:6B:56:55:0E:3F
Certificate issuer: /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Certificate serial: 0194221FE3E1D7B40684807362BBDAFC0F0C
Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210104
IP address blocks: 193.105.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e3:e1:d7:b4:06:84:80:73:62:bb:da:fc:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0acbd01152be1152548fd3bd3b2afd6b56550e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:3d:31:62:a2:f3:0c:90:38:74:61:57:ce:
5f:e3:a3:a8:e2:5d:3e:75:8c:ce:ad:d5:ee:bf:09:
19:d7:05:1e:ef:02:6b:d6:86:50:5c:63:c0:46:9e:
7f:fc:a8:94:81:80:90:05:d0:ba:55:d3:4e:7b:a7:
9d:65:eb:54:7d:4e:18:6d:25:00:16:44:90:49:f7:
8c:4a:f2:3e:ae:c7:a0:af:5d:4a:95:95:1a:ff:23:
07:11:0a:3c:b4:66:b6:d1:c5:fb:c2:7a:dd:02:00:
c7:22:d0:c9:69:bc:b0:ae:99:54:4e:9f:3b:b9:d7:
37:3d:49:d0:98:bc:f4:d2:39:7e:4b:c9:b7:d7:9b:
01:c8:ef:99:c7:0d:43:9d:09:54:08:b9:d6:78:fb:
e1:79:24:6a:7b:0a:81:c7:6c:8d:e6:81:8d:a6:bc:
57:fc:c0:d8:8e:ff:ed:e0:c3:33:5b:fb:99:3c:e7:
a3:4a:21:0b:b0:39:3e:73:a3:63:4a:2d:9d:06:d0:
46:ac:2e:92:60:34:bd:cd:90:88:1d:d8:16:00:0f:
ee:62:5b:13:90:fc:1e:1e:35:60:b6:3f:aa:43:2a:
c6:35:4a:c3:18:87:6b:63:2e:2d:88:ef:41:f8:cb:
ec:ad:19:91:5f:25:9b:6a:38:38:56:5b:e0:49:55:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CB:D0:11:52:BE:11:52:54:8F:D3:BD:3B:2A:FD:6B:56:55:0E:3F
X509v3 Authority Key Identifier:
keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.83.0/24
Signature Algorithm: sha256WithRSAEncryption
18:bc:11:7f:ea:82:64:d6:b4:08:25:74:e7:4c:f5:87:de:86:
50:7f:d8:e5:30:f9:45:82:f9:72:49:23:f1:bd:c7:4e:da:4f:
e1:d3:98:f2:9c:db:a7:d9:4c:0f:71:a3:e9:80:d2:c1:c4:9a:
e8:77:c1:86:c8:06:e1:d1:c8:b4:dc:7b:e1:09:b3:14:b3:89:
93:0c:c6:5e:47:35:4a:55:72:0b:9d:7e:c8:b2:5b:5a:d0:0e:
db:52:92:07:f1:1c:15:a1:d2:62:71:04:06:f3:d4:bb:b7:52:
d2:2a:c5:fd:37:27:b4:08:0b:e7:cb:aa:57:00:cd:ec:fc:e3:
ba:33:ab:10:05:ea:09:a6:71:52:2c:bd:04:3d:55:af:41:8b:
5c:79:d7:d7:37:2e:99:05:95:65:62:1f:65:e9:3c:ef:c8:5c:
d0:62:31:ab:cd:eb:8f:fd:fe:81:10:32:ec:be:7c:8f:b8:34:
15:86:52:59:92:ba:31:44:ef:24:9d:55:fa:3b:90:d1:bc:ed:
99:0b:d8:fe:e4:f1:68:15:e3:19:68:c6:42:9b:32:9b:c3:9b:
7d:55:05:06:8d:ec:51:8d:78:7c:72:ac:4e:1f:69:6a:dd:4b:
82:53:20:4d:93:bd:fe:0c:f2:01:00:12:df:28:89:13:fb:a0:
7f:ed:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:10 2025 by rpki-client