Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa
File: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (raw, json)
Hash identifier: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=
Subject key identifier: 0B:06:F5:28:3C:E3:C9:93:F4:E8:44:50:0A:43:AA:13:C7:83:9F:E4
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 019425214427A6F709DF674AD96AA1AF279D
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60721
IP address blocks: 193.164.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:44:27:a6:f7:09:df:67:4a:d9:6a:a1:af:27:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b06f5283ce3c993f4e844500a43aa13c7839fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:d3:5f:21:36:12:5b:b0:d9:ac:76:47:c8:
45:3b:87:9a:88:33:51:20:6d:54:85:90:ca:9b:0a:
0f:1e:0c:3b:a2:d8:8b:43:ca:ed:9c:e0:d1:00:53:
fd:2a:da:d2:e8:bd:dc:06:e1:76:74:73:a5:50:2f:
9a:3f:a2:0d:15:aa:73:d6:b1:d4:8a:d0:42:79:1f:
dc:cc:32:9b:c4:c2:e4:bd:0a:49:67:5f:db:6d:0c:
7c:93:78:75:69:6b:1c:5c:1f:ce:96:57:b1:fd:ba:
22:50:ee:b4:66:bd:23:cb:46:c5:4d:8f:89:6c:85:
71:29:79:2a:97:92:17:db:e0:d6:92:09:fd:4b:56:
b2:b0:e5:67:98:45:4e:76:4a:c5:46:8d:72:8a:0a:
67:fc:4e:7a:27:15:87:dc:4c:78:58:7b:97:bc:e0:
fd:3f:62:5d:99:e0:f2:ef:e0:ea:5d:9a:cc:f5:eb:
06:3f:21:bf:e0:5c:9b:18:81:13:a4:62:51:b6:d1:
b6:f6:27:73:29:1d:eb:e9:19:49:57:53:f0:93:6a:
6e:51:ab:30:f5:50:45:f9:31:9f:32:0a:48:98:c3:
6a:03:ca:f1:52:40:22:73:28:00:c4:16:f4:91:10:
ea:e1:58:f9:cd:dc:af:8f:bc:93:1e:fc:27:34:3d:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:06:F5:28:3C:E3:C9:93:F4:E8:44:50:0A:43:AA:13:C7:83:9F:E4
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2a:fd:7d:7d:34:d7:df:0b:08:15:11:29:64:da:24:1a:b0:
3f:2d:cb:12:b8:28:53:90:06:fc:61:5a:50:19:c4:0c:67:13:
03:2b:3c:44:8d:1e:c5:4b:e0:ca:fd:78:1a:71:77:a8:f8:c1:
17:44:8e:ce:5e:86:a4:17:46:6d:8a:38:78:b2:cd:76:b6:4e:
a5:99:49:5c:0f:f6:68:75:a2:aa:12:d5:30:43:37:82:54:33:
20:1a:34:11:b5:a2:9e:cf:7a:5f:cc:bc:f9:fb:37:94:2c:25:
70:e0:ac:5c:be:85:1d:5f:ba:71:69:8a:fa:6f:8c:0c:22:80:
08:61:fd:12:9c:6e:e2:78:74:60:b7:d3:19:b5:40:20:d6:16:
7e:b0:08:60:d4:d1:36:7c:85:1b:37:4a:8a:b7:ad:61:62:be:
7d:d7:d6:02:f4:15:5a:cb:95:1b:d2:1f:06:6b:1c:8e:b9:bd:
93:42:04:1a:d6:88:c5:b1:9e:d7:ab:a4:b4:26:7b:14:e9:ed:
20:2b:00:ca:a1:67:f5:b4:92:ae:3d:ca:c5:13:dc:43:25:37:
ae:7b:7b:da:e4:ca:36:73:a7:10:8f:ae:49:7d:7b:29:7a:fc:
b7:aa:64:60:32:95:17:62:f6:55:3d:09:ca:e9:c9:cd:d7:9c:
c2:90:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:37 2025 by rpki-client