Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/B2Bwlt6G96BS0tusbcg99EyjGhs.roa
File: B2Bwlt6G96BS0tusbcg99EyjGhs.roa (raw, json)
Hash identifier: lDF8ifIS531G2aBes5GG0ueKRZbgfZF7VUMFYPpziVw=
Subject key identifier: 07:60:70:96:DE:86:F7:A0:52:D2:DB:AC:6D:C8:3D:F4:4C:A3:1A:1B
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 01896478E8E3D1A29AE5CC2410803463DE00
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/B2Bwlt6G96BS0tusbcg99EyjGhs.roa
Signing time: Mon 17 Jul 2023 15:29:52 +0000
ROA not before: Mon 17 Jul 2023 15:29:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 193.160.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:e8:e3:d1:a2:9a:e5:cc:24:10:80:34:63:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jul 17 15:29:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07607096de86f7a052d2dbac6dc83df44ca31a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:aa:4b:5f:ea:3b:e6:5f:1d:57:2d:11:66:
91:e0:55:1a:5a:a1:ed:c6:6d:1c:be:3e:4f:13:59:
90:ed:a9:c9:31:94:7c:ae:ad:87:99:06:4a:ff:dc:
c0:d2:e6:43:4a:2c:b7:72:ff:8b:db:13:2d:2e:8a:
fd:b5:9f:ca:98:78:99:84:de:c5:50:a9:78:21:f5:
1d:10:37:11:b9:e0:15:b6:59:71:5d:ed:6c:b9:27:
f9:67:be:b7:dd:9d:4b:7f:58:97:c3:91:44:7b:f3:
f8:80:23:35:35:0a:5e:06:e2:68:ab:30:96:f2:a0:
c3:77:78:7c:af:73:d4:12:fd:ee:e3:23:81:63:4e:
d3:a1:d3:4e:0e:96:d7:48:18:a3:8e:43:7a:c6:dd:
25:df:7b:76:b7:09:1d:3e:df:21:48:07:e5:4a:5a:
12:e4:b4:17:14:a0:6c:c1:c9:a0:c0:97:94:3e:6c:
4f:7e:13:e4:c7:98:d4:ef:12:4f:bb:67:70:14:c5:
dc:e9:ce:e3:b1:80:38:ef:4d:bc:da:b4:0b:0e:e3:
a7:a2:84:32:7e:35:f6:e7:a4:57:6b:b4:82:cd:b2:
35:4c:9c:e6:5d:a8:75:68:d2:b5:19:8b:14:f5:f1:
98:3c:ed:02:3b:50:38:7f:e9:fb:c2:31:2b:92:5d:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:60:70:96:DE:86:F7:A0:52:D2:DB:AC:6D:C8:3D:F4:4C:A3:1A:1B
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/B2Bwlt6G96BS0tusbcg99EyjGhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.219.0/24
Signature Algorithm: sha256WithRSAEncryption
70:26:f3:64:ee:be:ae:fc:2b:7e:ea:b8:e6:9d:7f:87:99:35:
24:e2:d8:16:84:e8:8c:fa:a0:8e:d0:3a:d1:64:f3:7d:00:50:
5c:1b:38:5f:a2:a1:f5:49:c5:07:f0:b5:d9:1a:ff:06:1c:f3:
6c:49:27:1b:5b:ed:a1:73:13:b3:da:95:0e:94:0b:82:c6:85:
ff:b1:8e:eb:67:03:a4:61:d9:95:35:36:db:da:72:93:0d:92:
e3:f0:ef:1e:94:9f:d5:59:5d:a7:44:b9:93:48:bc:eb:af:f2:
30:e6:21:8b:1e:a9:3c:c9:8a:3c:56:14:cb:08:38:eb:63:16:
80:1c:0f:f5:8f:42:f2:1f:41:82:b8:9b:bb:dd:0a:39:9e:7a:
98:b2:54:92:38:7e:41:50:1b:de:5d:09:82:1c:0c:0a:cf:2d:
13:ca:ea:0b:c1:da:f0:db:b8:31:65:1f:be:44:05:8d:2f:4c:
15:bb:71:73:87:01:1a:19:1d:dd:e8:17:a5:56:11:ff:1a:e2:
b7:7f:12:55:29:7d:b1:ec:6c:32:10:4c:2f:94:04:cd:df:67:
ff:5e:0e:19:18:94:b4:20:4a:d5:a6:58:57:23:cb:c7:fd:d8:
3a:b5:45:7d:28:33:6a:f9:19:de:bf:22:47:9b:15:0c:76:da:
5c:ab:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:16:14 2025 by rpki-client