Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/L175cZnrhuaaCGRSTwTdxuhzAtw.roa
File: L175cZnrhuaaCGRSTwTdxuhzAtw.roa (raw, json)
Hash identifier: X8PLF6LdWi8lemDA9EoE7uR57LYy2WOLkImDUdiS1O4=
Subject key identifier: 2F:5E:F9:71:99:EB:86:E6:9A:08:64:52:4F:04:DD:C6:E8:73:02:DC
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0194D5618932F8DD7CE2B5CA91925AA0843A
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/L175cZnrhuaaCGRSTwTdxuhzAtw.roa
Signing time: Wed 05 Feb 2025 09:12:06 +0000
ROA not before: Wed 05 Feb 2025 09:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215009
IP address blocks: 193.34.48.0/24 maxlen: 24
193.34.49.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
195.13.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:61:89:32:f8:dd:7c:e2:b5:ca:91:92:5a:a0:84:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Feb 5 09:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f5ef97199eb86e69a0864524f04ddc6e87302dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:be:e6:57:22:8c:ef:9f:5f:05:96:e0:27:ba:
e8:0a:df:7d:03:87:e4:e2:a9:69:5c:7d:46:40:46:
8a:a4:91:21:4b:6e:66:b2:23:ea:b1:ee:2c:ae:ab:
5e:9b:f8:0c:97:c9:20:df:a1:61:31:34:2c:14:5f:
01:23:09:1c:7b:78:7f:ef:f4:1c:17:e6:65:f6:08:
2c:22:77:11:14:51:ea:5e:89:da:8f:74:5b:6e:e8:
7a:49:a9:6b:e1:f5:56:77:54:a1:79:2f:0f:2b:4a:
8a:8e:53:f9:e1:9f:42:b5:38:c9:29:61:f9:b4:c9:
6f:16:11:35:cf:65:1c:f6:ce:6c:83:17:77:62:8b:
2a:83:fa:c4:bd:b1:03:bc:0f:30:46:98:5f:72:e9:
06:34:9d:b0:75:41:d4:85:6f:1d:12:31:73:8b:9b:
80:b8:de:96:7b:af:cc:88:5a:3c:f6:c9:62:eb:55:
66:bc:0e:46:d1:1c:c3:56:49:2c:71:ec:9e:12:3f:
8d:85:49:2c:4d:fb:17:87:35:7d:c8:ac:65:33:de:
2c:48:31:72:35:5b:9a:06:6e:de:49:b1:fe:5a:cc:
5b:0a:d5:c7:b4:5f:b5:f4:b7:19:9a:33:20:dd:f6:
82:22:5d:00:fc:41:11:35:91:5b:d2:a1:62:bb:ae:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5E:F9:71:99:EB:86:E6:9A:08:64:52:4F:04:DD:C6:E8:73:02:DC
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/L175cZnrhuaaCGRSTwTdxuhzAtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0/23
193.34.51.0/24
195.13.62.0/23
Signature Algorithm: sha256WithRSAEncryption
34:c9:eb:de:41:a1:af:7c:47:44:1c:56:6b:11:10:36:f6:bb:
5d:db:8a:42:47:5f:ed:6c:a3:a0:ab:fd:be:1c:cd:c7:fb:bb:
53:e4:52:d6:b0:01:18:c5:76:77:81:be:d2:9e:c9:f5:87:6c:
07:02:3d:22:b6:f1:7e:c4:04:42:66:f6:01:94:3c:ea:81:72:
47:a3:de:de:1c:de:b6:7d:72:96:61:dd:1a:ff:29:cc:59:21:
37:a3:9a:c8:70:0f:8b:0a:ba:56:c9:1a:ad:65:9c:8d:5d:09:
32:9e:38:f2:4c:16:f0:b2:ef:f2:af:c8:59:42:e8:4c:22:06:
09:64:c1:52:06:c5:2b:7f:c7:79:2f:fc:c8:8c:c6:4b:64:5a:
c4:f0:bc:ab:f7:8b:3f:90:7a:c0:4b:3f:06:5c:64:0c:20:80:
de:13:19:6d:ce:66:75:e9:14:4a:87:fa:1d:d7:63:62:36:aa:
50:49:f9:c1:43:71:62:b3:a5:f2:3c:23:b1:d9:17:a5:f9:56:
ef:59:92:10:e9:10:00:1c:d9:10:55:40:fb:14:72:fe:e2:0d:
86:3a:ed:08:07:95:74:19:95:a4:44:26:fc:6d:8d:b1:22:c7:
0b:66:83:62:5f:99:14:0f:7e:55:03:12:83:47:91:c4:17:80:
48:23:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:41:57 2025 by rpki-client