Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/BWWawtweWO4e1vsN4mbMqPGNk7k.roa
File: BWWawtweWO4e1vsN4mbMqPGNk7k.roa (raw, json)
Hash identifier: p3AL6zbP5eqgdV4aUkmBvTmyezC+WTwnsFVUtaxTcH0=
Subject key identifier: 05:65:9A:C2:DC:1E:58:EE:1E:D6:FB:0D:E2:66:CC:A8:F1:8D:93:B9
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 34A58E4B
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/BWWawtweWO4e1vsN4mbMqPGNk7k.roa
Signing time: Wed 13 Apr 2022 15:33:34 +0000
ROA not before: Wed 13 Apr 2022 15:33:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 193.106.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883265099 (0x34a58e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Apr 13 15:33:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05659ac2dc1e58ee1ed6fb0de266cca8f18d93b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:73:e3:18:95:c1:84:68:3f:d7:94:71:40:
e1:9d:b9:f7:f0:5b:40:e8:16:c8:b3:62:66:06:51:
98:d9:77:2a:67:ca:0e:74:93:ef:5a:73:e3:6d:28:
76:80:5d:ff:39:88:85:86:cb:ce:65:7a:ff:2a:24:
3f:98:a2:d0:25:b9:a8:29:23:e6:07:88:68:ac:b6:
09:0a:03:9f:a1:d1:ac:f8:40:98:84:43:84:67:c6:
07:12:79:33:22:c5:f5:d4:25:d1:b0:f8:f1:5d:aa:
0c:d5:73:3d:9c:97:7f:98:c2:14:3f:33:15:70:82:
93:45:38:ba:e3:12:97:5b:fc:e0:38:d9:8b:cf:61:
9c:e2:8f:12:3b:19:99:c1:e4:64:f1:8e:7e:24:ef:
7d:59:2b:78:95:5e:f6:73:13:c2:0b:ed:97:c2:3f:
71:b1:73:2d:02:56:b1:8d:ef:11:d0:b7:0a:77:c0:
87:f5:9e:d7:94:3e:ad:74:c6:24:bd:96:a6:e1:d1:
64:88:f4:03:ff:fb:2c:b5:29:99:9c:7f:b2:a6:dc:
3b:8a:94:9f:c1:46:5d:03:08:e8:e4:32:d2:f5:c2:
d1:7c:05:26:a6:18:fa:ad:ad:4a:56:d7:9a:32:79:
5f:c0:d8:4c:66:a7:6e:83:64:f0:c9:15:02:d6:90:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:65:9A:C2:DC:1E:58:EE:1E:D6:FB:0D:E2:66:CC:A8:F1:8D:93:B9
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/BWWawtweWO4e1vsN4mbMqPGNk7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:0e:fd:e8:b8:c3:f1:a9:7a:c4:ae:ed:9d:bc:2a:34:9e:19:
2c:67:3e:65:45:c7:83:4f:0e:8c:c3:0c:61:fa:cd:1a:18:0d:
9f:98:80:6c:6d:53:af:9b:d7:58:7a:01:3c:d9:8d:cc:34:8d:
17:0b:ee:9d:7b:59:4d:87:8e:b5:db:94:0b:b0:7e:3a:b7:90:
29:4a:5b:55:12:80:68:40:cb:1b:6f:b3:0e:11:c9:60:6b:e4:
49:5c:5e:e6:80:23:61:f7:f7:e0:79:05:a4:74:e0:b4:86:46:
6e:f4:98:37:25:ce:41:f0:c9:c8:cf:bd:c1:3f:5a:a5:d7:30:
fa:82:81:af:25:e0:d0:8e:34:32:7e:42:ea:d1:1c:4b:e3:b2:
1c:a1:c3:b5:22:2d:cf:fa:c0:6a:bb:12:c0:b5:37:5f:23:38:
a2:d4:dc:48:4d:3a:7e:a5:97:82:e9:7e:05:23:8b:72:8f:26:
8e:e2:6a:a2:b5:35:7e:78:06:f8:16:22:d4:ff:6f:6e:f9:f3:
b1:35:7b:00:de:4c:7e:71:73:77:49:7f:17:fd:90:31:5c:1b:
c5:aa:07:b7:ee:6d:21:ce:54:01:09:db:45:3b:52:7b:a6:2e:
65:51:c7:20:fe:a4:51:69:be:09:00:d9:40:25:bc:51:ea:e1:
65:50:38:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:28 2025 by rpki-client