Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/4ylciqY8jqFbgkvhNmhn6kXHXWI.roa
File: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (raw, json)
Hash identifier: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=
Subject key identifier: E3:29:5C:8A:A6:3C:8E:A1:5B:82:4B:E1:36:68:67:EA:45:C7:5D:62
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 01942143D7AA2003916636E955B7DDEE949E
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/4ylciqY8jqFbgkvhNmhn6kXHXWI.roa
Signing time: Wed 01 Jan 2025 09:48:01 +0000
ROA not before: Wed 01 Jan 2025 09:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49868
IP address blocks: 193.201.124.0/23 maxlen: 23
193.201.124.0/24 maxlen: 24
193.201.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d7:aa:20:03:91:66:36:e9:55:b7:dd:ee:94:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Jan 1 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3295c8aa63c8ea15b824be1366867ea45c75d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:f5:d7:98:e1:23:e9:4f:40:7d:3e:9a:0c:
a6:4c:50:42:20:c1:20:12:34:25:3d:43:26:8e:99:
74:b7:cb:de:11:b4:a7:de:f5:eb:39:96:08:1f:1f:
4c:7b:f4:08:8a:6a:2f:f0:6c:07:f6:e0:7f:50:3d:
c8:50:d8:96:22:ad:82:e6:af:c2:03:74:77:8b:60:
08:4c:f3:af:da:12:ee:10:37:98:63:cb:f7:7c:2f:
20:aa:5c:34:82:7f:18:af:ef:16:5b:2b:86:e9:89:
ee:10:ce:4d:47:8d:a9:84:8d:6e:be:eb:b8:c6:dd:
e1:da:6b:63:52:63:eb:94:65:bc:9a:a8:da:56:b9:
5f:4b:2a:c2:6a:4b:c6:0d:39:34:e2:c7:51:3b:be:
21:f7:dc:c5:1b:99:78:b8:8d:2d:46:fd:91:ab:79:
a8:4b:54:71:be:65:b0:ee:ba:1b:7c:15:04:98:69:
bb:23:85:b3:0b:8b:a4:1f:e7:a7:df:a5:44:a0:1a:
dc:43:a0:4b:04:9f:07:b0:3a:be:44:bc:fa:9b:1d:
1d:fa:db:3b:eb:2e:43:32:c2:95:f2:f7:f6:b3:66:
cf:7c:88:59:40:a3:46:99:d7:11:15:db:a0:e3:f3:
81:ec:9f:7e:7a:f4:66:8b:7f:49:e1:dc:40:60:cb:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:29:5C:8A:A6:3C:8E:A1:5B:82:4B:E1:36:68:67:EA:45:C7:5D:62
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/4ylciqY8jqFbgkvhNmhn6kXHXWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.124.0/23
Signature Algorithm: sha256WithRSAEncryption
71:1a:b0:e7:33:52:49:72:30:a0:ed:af:95:9c:11:14:b7:74:
82:d0:4f:aa:ea:3c:e9:0c:f1:08:75:a0:f8:c8:27:e0:80:ba:
20:01:5f:d6:40:d5:11:e1:8e:70:63:1c:3d:49:6d:1d:83:c8:
0b:01:ff:47:67:71:d9:1e:e5:63:f7:ac:2d:b3:09:79:e6:a0:
e9:fb:e4:6a:30:a9:e3:d0:d5:38:e5:88:83:df:02:71:c3:71:
76:07:04:a5:76:9c:4e:60:9f:2b:bf:df:e3:87:f7:18:16:9f:
8b:b5:00:f0:95:f2:54:5c:7c:13:dc:ef:38:31:6d:a5:98:22:
a9:31:f7:24:45:4c:2c:8a:a7:0a:dc:04:d9:f3:19:3e:0c:50:
e3:b6:ca:90:6f:85:21:c1:86:b4:0c:1b:f8:33:7d:79:42:75:
7c:a1:a6:bb:f5:f8:ba:61:9c:12:4a:2c:ec:da:7b:f6:63:1e:
fd:bd:7c:4f:7e:ed:9b:1d:fd:fc:d1:bc:2e:1b:a3:91:b4:ac:
78:c7:84:0f:e8:c0:04:6e:b3:3d:f7:b2:d8:66:d7:25:d8:c0:
e0:43:72:96:c7:2a:cd:63:4c:a4:dd:fc:c3:ce:8e:32:b5:e0:
8c:d8:75:29:2e:fb:ba:fc:ba:d0:5f:e7:ef:b2:f3:04:d8:5b:
3a:ca:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:00 2025 by rpki-client