Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/81s5U2W3VjMlwzgJYg74p9C-Bfs.roa
File: 81s5U2W3VjMlwzgJYg74p9C-Bfs.roa (raw, json)
Hash identifier: Ctpe7cbMgL6v4VvCVz/MKuwTdONMfDqCZIozvTwmeNg=
Subject key identifier: F3:5B:39:53:65:B7:56:33:25:C3:38:09:62:0E:F8:A7:D0:BE:05:FB
Certificate issuer: /CN=696780c7a6111b9fa1c9b11e83b6096815b957a4
Certificate serial: 0185711545CCCC4B04DCE244C54B488A92C2
Authority key identifier: 69:67:80:C7:A6:11:1B:9F:A1:C9:B1:1E:83:B6:09:68:15:B9:57:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWeAx6YRG5-hybEeg7YJaBW5V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/81s5U2W3VjMlwzgJYg74p9C-Bfs.roa
Signing time: Mon 02 Jan 2023 06:04:57 +0000
ROA not before: Mon 02 Jan 2023 06:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202423
IP address blocks: 193.0.178.0/24 maxlen: 24
193.0.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:45:cc:cc:4b:04:dc:e2:44:c5:4b:48:8a:92:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696780c7a6111b9fa1c9b11e83b6096815b957a4
Validity
Not Before: Jan 2 06:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f35b395365b7563325c33809620ef8a7d0be05fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:fe:2a:d6:76:c5:54:c9:59:41:a4:d0:17:
ad:71:c7:5a:53:c8:0b:42:d2:89:b9:d9:a9:37:59:
7c:3b:b8:c1:66:85:1b:15:0a:86:ec:28:2a:2e:eb:
10:4b:05:95:2e:63:7a:ed:d6:cd:85:b5:ae:13:a8:
d8:a5:0a:b9:8f:75:9e:c0:ea:25:24:18:74:36:54:
51:eb:35:4e:76:ab:dc:45:f3:5d:ac:c0:83:80:9a:
73:fb:70:cf:41:c1:28:af:6a:05:c7:50:04:65:25:
89:94:4a:91:df:80:1f:96:0e:c7:cb:d0:b6:ba:53:
b9:36:a7:30:9c:1b:23:d4:1a:21:d1:80:40:f8:5c:
cf:43:e2:29:39:25:1d:44:90:15:78:3c:8c:36:c4:
c8:1f:c0:e4:50:08:0a:7f:d2:42:e1:4a:c3:b1:1d:
13:54:d7:c6:4f:f3:00:78:c3:b0:4a:65:6a:c4:f9:
a5:62:e5:8d:cb:f6:54:ad:8b:a5:5d:fa:38:0b:57:
48:ad:92:5b:9b:d0:e8:03:fb:13:a7:b7:38:5a:5f:
fb:5d:fb:11:c2:41:b8:3f:19:ec:88:42:fd:f2:21:
a2:6d:0f:20:76:83:14:b5:9a:d9:76:7a:36:76:ef:
a2:28:4f:50:a6:01:55:9c:76:63:32:5b:f5:d7:6e:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5B:39:53:65:B7:56:33:25:C3:38:09:62:0E:F8:A7:D0:BE:05:FB
X509v3 Authority Key Identifier:
keyid:69:67:80:C7:A6:11:1B:9F:A1:C9:B1:1E:83:B6:09:68:15:B9:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWeAx6YRG5-hybEeg7YJaBW5V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/81s5U2W3VjMlwzgJYg74p9C-Bfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/aWeAx6YRG5-hybEeg7YJaBW5V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.178.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:89:8c:a4:d6:90:2e:c2:c4:ab:4f:1f:b3:52:31:a3:33:81:
7b:e7:b5:4d:d6:28:f3:c8:c1:93:ac:83:c2:bc:ad:d4:f5:c2:
09:2a:e8:4e:23:d3:3a:cf:bb:2f:67:93:b8:1c:c2:98:47:fa:
c3:5d:41:0e:ed:07:25:0a:ac:aa:e3:ca:2a:e4:b1:05:07:2b:
20:6a:38:00:10:00:3f:13:85:df:66:02:93:03:60:6d:9c:82:
09:09:76:34:3d:ad:8b:19:5f:f1:8f:e9:4a:dd:3a:5b:ce:bf:
96:ca:d0:7b:ae:00:87:66:c0:b2:f9:7e:f9:63:48:79:b1:53:
c9:d4:52:68:48:ad:cb:f1:62:b5:3c:3b:d8:37:99:8a:46:db:
6e:00:00:2d:bc:07:f8:b2:12:4b:41:dc:e0:cb:bd:3a:4b:69:
53:9c:fb:6c:75:b2:3b:8d:4e:46:4d:5d:57:77:32:d0:1e:d4:
6d:7d:7f:1b:63:e4:bd:16:be:f4:72:80:8b:7a:ec:26:c9:a6:
b0:ff:25:97:78:c8:28:66:2c:c9:d0:a7:8c:4b:d1:89:77:81:
70:4e:23:b3:ce:54:09:1b:31:9c:fc:e6:d4:dc:e4:ab:26:f5:
4e:01:45:db:4b:8b:7c:54:8b:3f:c8:b5:8d:18:d7:00:6e:65:
b0:f0:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:29 2025 by rpki-client