Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/E83atA65ZSwSovzP5kYTbF9AHgE.roa
File: E83atA65ZSwSovzP5kYTbF9AHgE.roa (raw, json)
Hash identifier: da/aOTmhG9vH406YLE00QzTtn93KfhIxb7bgNAmG49I=
Subject key identifier: 13:CD:DA:B4:0E:B9:65:2C:12:A2:FC:CF:E6:46:13:6C:5F:40:1E:01
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 33AA8E4B
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/E83atA65ZSwSovzP5kYTbF9AHgE.roa
Signing time: Sat 01 Jan 2022 15:03:58 +0000
ROA not before: Sat 01 Jan 2022 15:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399746
IP address blocks: 193.106.197.0/24 maxlen: 24
193.106.198.0/24 maxlen: 24
193.106.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866815563 (0x33aa8e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 1 15:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13cddab40eb9652c12a2fccfe646136c5f401e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:c3:7d:23:ed:27:10:43:f5:25:c1:22:b2:
0e:cf:00:e3:44:9d:c5:5a:bb:31:7f:85:60:96:f2:
e0:4d:e2:3b:c4:1b:c1:b1:5a:c3:0d:f2:61:81:8e:
92:2d:07:c2:ac:b8:37:c4:47:c4:39:84:9a:03:43:
04:c1:ae:4f:b5:33:bf:6f:39:ca:c3:cf:a1:ac:1f:
bc:02:2b:45:9a:3c:57:fd:93:ec:f8:26:c5:a9:0b:
58:12:06:69:f5:ba:76:ff:54:dc:7e:e6:35:29:21:
29:34:20:c6:ff:e0:58:42:df:2d:cc:55:ec:7a:96:
f8:e6:31:88:5f:e8:de:35:be:2f:eb:94:af:5e:35:
40:20:c2:4c:57:c6:c5:51:81:f0:4c:e5:83:ea:84:
12:53:ee:26:48:a4:a8:9f:f0:72:2d:43:8e:ac:25:
24:a2:c9:e9:28:0f:6d:27:8f:f5:62:14:f9:2e:4c:
3f:9a:26:e7:a8:89:ae:fd:6a:2d:1f:ac:f2:c2:ce:
0f:e2:7b:52:0c:c7:c2:1c:af:06:9e:3b:9c:29:1b:
6f:5c:6e:9e:37:8e:bc:88:43:d5:a4:ec:d1:9e:ec:
cd:d7:97:4b:e7:d4:bd:95:04:ec:55:2d:2a:fe:a9:
1c:9d:28:8e:9c:ee:bf:9c:0f:e4:a2:94:88:7a:f4:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CD:DA:B4:0E:B9:65:2C:12:A2:FC:CF:E6:46:13:6C:5F:40:1E:01
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/E83atA65ZSwSovzP5kYTbF9AHgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.197.0-193.106.199.255
Signature Algorithm: sha256WithRSAEncryption
6d:e3:c5:58:96:b9:61:20:55:31:2d:73:88:cb:a6:5c:f7:79:
3d:02:07:6d:1e:e1:3a:a2:f4:3e:73:c1:e8:8b:ae:14:c7:f9:
b3:5f:fb:62:f4:4a:e6:a6:57:86:94:e2:20:0c:ac:16:ea:e1:
42:8d:bd:66:71:57:e3:57:6d:ff:16:6b:67:21:fb:b8:00:b4:
53:7e:e1:2d:20:e0:3b:91:fd:9c:c7:0b:68:b5:40:d5:db:e3:
47:3e:fd:16:02:a1:64:e7:32:d7:1c:20:47:00:14:f4:32:ce:
05:dd:27:c9:e9:9a:ce:a6:7d:46:03:97:24:dc:e2:83:7e:40:
74:86:27:24:d6:d8:e4:1c:b8:2f:b8:d3:33:29:2a:20:b8:9e:
1f:cd:91:22:a3:59:4e:8c:38:6a:06:6c:cf:45:8e:7b:32:56:
c5:62:31:4c:ef:e8:ae:41:f3:4a:49:55:f8:76:af:1d:ef:3e:
76:44:4b:f7:10:5c:68:2f:4f:c2:17:d5:1c:06:85:24:2a:8a:
e7:09:5b:3b:cd:82:48:0e:d0:bf:34:5f:af:0e:7d:e0:99:e7:
be:ee:58:18:d5:1f:97:b8:65:14:c0:43:ad:6c:0d:52:c4:01:
a8:c7:60:9e:fd:17:7c:bf:e1:ee:9b:f2:2b:fa:94:01:52:2f:
b2:cc:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:36:39 2025 by rpki-client