Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/bGKZ1NlHqe41dWwdsYM_XjXyvpU.roa
File: bGKZ1NlHqe41dWwdsYM_XjXyvpU.roa (raw, json)
Hash identifier: LCaiO7NqzbyvXwtj66xfQpThOjmODKQkgcf+XJEbc9w=
Subject key identifier: 6C:62:99:D4:D9:47:A9:EE:35:75:6C:1D:B1:83:3F:5E:35:F2:BE:95
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD517CB899F70866B72FE4C58AEEB0
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/bGKZ1NlHqe41dWwdsYM_XjXyvpU.roa
Signing time: Thu 02 Jan 2025 07:49:05 +0000
ROA not before: Thu 02 Jan 2025 07:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33844
IP address blocks: 193.232.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:51:7c:b8:99:f7:08:66:b7:2f:e4:c5:8a:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c6299d4d947a9ee35756c1db1833f5e35f2be95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:6f:be:50:14:6f:3f:d6:fe:65:60:0f:e4:
84:b5:a8:80:36:37:80:17:67:ba:05:fc:b4:63:c9:
60:cf:f2:0e:95:8a:9b:ae:07:8b:3e:29:a7:ea:9c:
99:43:25:1e:1c:f2:87:37:67:95:9c:d9:e9:be:6a:
77:3e:44:85:16:17:89:3e:02:67:2c:2f:4f:9b:3c:
d9:3b:fc:4a:08:c5:b4:86:91:ee:86:e4:8c:4a:bd:
c3:d7:5c:67:db:eb:f7:fb:41:0a:c6:eb:dc:e6:33:
e1:84:55:0e:f7:2f:35:ca:d4:53:f6:55:8a:3c:0e:
4e:fc:5a:7b:e2:72:8a:ca:21:28:26:76:4d:d8:ca:
6b:da:77:7c:47:17:2d:dc:c5:43:ec:69:61:be:eb:
ee:55:ec:d8:dc:2f:ed:9c:10:19:52:55:de:77:f2:
1d:53:3d:f8:3d:2a:08:48:5d:d3:82:8b:27:a8:fd:
47:35:35:32:4c:2b:d2:0d:8d:ec:9a:bb:4c:fe:62:
d5:64:a1:5a:7e:31:39:87:30:02:5a:8c:b1:96:8a:
e8:04:19:9a:84:44:30:ad:ca:c3:d3:b0:c8:82:f9:
49:03:53:f9:43:23:33:38:f1:f7:32:16:ad:2b:65:
9d:6f:87:e6:45:01:55:16:67:5f:f3:88:a9:a8:ca:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:99:D4:D9:47:A9:EE:35:75:6C:1D:B1:83:3F:5E:35:F2:BE:95
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/bGKZ1NlHqe41dWwdsYM_XjXyvpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5c:41:70:61:41:25:7f:1c:e0:a0:5f:16:cc:de:ae:13:dc:
e2:f4:a9:4f:02:6d:8d:3d:c5:cc:94:9c:8a:59:cd:a6:d0:5c:
e1:33:94:d5:89:3f:51:6e:12:b0:2c:d8:64:e3:92:d0:06:c0:
bb:f5:19:f1:ef:c8:b0:51:c3:85:bc:14:75:0e:fa:47:03:14:
a2:ed:a8:81:4b:d2:3d:8c:c1:b5:a6:69:f2:e7:04:02:32:2d:
74:0b:b6:36:05:26:72:4d:93:ca:fa:d6:f4:ed:84:90:9f:3f:
be:11:86:b2:e4:8a:86:27:71:5b:03:6c:c9:0f:eb:ce:00:32:
8a:2c:90:56:08:36:7c:8d:9f:fc:99:47:9b:0f:e6:93:6e:25:
ee:3d:01:c4:c2:4d:e1:a0:80:f0:a7:06:44:88:65:38:4c:51:
1f:5f:29:e2:44:22:23:74:4c:57:30:7f:e0:48:6b:73:2a:27:
60:d4:7f:28:2f:da:02:da:54:49:cf:c2:af:19:ca:e2:be:c9:
6f:22:58:4d:26:cf:30:d3:34:3f:63:7c:92:d8:22:6a:cb:da:
0a:fe:86:0d:3c:64:7c:e9:39:95:60:ad:9a:a2:ac:58:40:0a:
f1:c3:48:21:6f:ec:41:2f:1b:ec:f5:72:fc:42:95:a5:da:8b:
e2:b5:4a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:57:01 2025 by rpki-client