Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/bAttX97RzMOQ1qZ4HNmPUlpQfng.roa
File: bAttX97RzMOQ1qZ4HNmPUlpQfng.roa (raw, json)
Hash identifier: YLRYjqt74FnjIduetj4BOJ/FB85gxZ+gkeFk/pa5oN0=
Subject key identifier: 6C:0B:6D:5F:DE:D1:CC:C3:90:D6:A6:78:1C:D9:8F:52:5A:50:7E:78
Certificate issuer: /CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Certificate serial: 018CCA96C84F634EF98EE3814D01D7AAC8CD
Authority key identifier: 8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/bAttX97RzMOQ1qZ4HNmPUlpQfng.roa
Signing time: Tue 02 Jan 2024 14:32:08 +0000
ROA not before: Tue 02 Jan 2024 14:32:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209535
IP address blocks: 193.33.40.0/23 maxlen: 24
193.33.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:c8:4f:63:4e:f9:8e:e3:81:4d:01:d7:aa:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Validity
Not Before: Jan 2 14:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c0b6d5fded1ccc390d6a6781cd98f525a507e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:21:d2:72:74:70:e1:82:30:e3:74:a1:ec:
12:5a:fe:1b:d0:6d:ad:0f:4c:24:e8:f8:7e:b8:0d:
c5:e2:b6:80:e9:9e:3a:07:c9:38:47:5d:07:49:2e:
90:9d:23:d3:50:ab:3a:a8:86:28:f6:2d:62:55:f2:
1e:6b:5b:c1:a3:ba:d6:94:b7:9a:c7:de:f9:20:a5:
a4:32:87:f8:74:76:65:1f:af:53:c5:4f:76:43:52:
a1:7d:4d:3c:b5:b6:03:be:6b:ed:bc:99:8a:de:d6:
d8:00:76:2a:28:bf:ef:7c:61:f3:07:37:c6:c8:97:
c5:f4:cd:e4:0e:fb:27:f9:5b:7a:f6:83:0c:04:1b:
ac:c1:a1:f9:e6:70:b2:0f:b2:a6:83:34:c1:4a:87:
c4:c5:10:da:60:0f:5a:e8:9a:c3:4c:97:7e:db:6c:
70:24:be:06:91:3b:1d:14:8f:70:e1:93:16:f3:11:
f9:81:a1:ac:6f:88:2e:1c:6a:81:c6:d2:42:ba:0f:
9b:17:cc:ec:57:92:d4:ea:72:04:69:6a:ef:e8:e0:
a7:eb:ac:3f:9f:e3:b2:dd:fe:af:41:73:7b:2c:1f:
e4:14:df:4a:b6:d3:7a:f2:5d:3b:84:85:bf:e4:59:
19:3b:63:52:41:46:ff:d6:07:b4:bb:07:16:ca:1e:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0B:6D:5F:DE:D1:CC:C3:90:D6:A6:78:1C:D9:8F:52:5A:50:7E:78
X509v3 Authority Key Identifier:
keyid:8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/bAttX97RzMOQ1qZ4HNmPUlpQfng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.6.0/23
193.33.40.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:70:58:2e:8c:70:37:46:6e:fc:29:48:ae:28:10:4c:11:24:
3d:d1:03:1d:22:49:5c:b8:46:48:5c:e9:1f:d5:3c:8b:56:3d:
a0:c7:b5:b2:41:83:54:c2:c4:67:f0:a6:7c:22:f1:bb:7c:78:
3d:53:5f:60:f8:b0:7f:9c:33:39:eb:2d:d0:56:2d:fc:f2:bf:
db:c1:e8:13:e7:54:24:27:be:8c:92:6a:b9:d1:db:9a:1a:e6:
a0:55:cf:b4:2c:db:8d:87:b4:e0:3e:bf:30:99:db:b3:19:46:
d3:fc:71:6d:69:52:d8:ac:43:db:c7:c1:70:b7:97:c7:07:51:
5c:25:aa:11:82:fa:04:42:37:b5:05:b5:f8:ec:03:18:f1:6a:
a3:43:19:90:02:4d:e5:56:25:80:90:0e:c8:95:63:25:a9:1d:
61:bd:ca:e9:99:5e:ce:fb:87:80:f7:79:e1:be:93:d7:27:06:
70:8b:ce:1f:9d:7e:cb:72:89:14:fc:fc:6b:d2:c1:ec:bb:4e:
55:1e:df:dd:56:a2:ca:b4:64:c8:f0:cc:8e:43:b4:05:69:c7:
cf:ca:60:4d:26:de:34:7f:ec:6a:89:3f:57:5b:70:a1:8f:18:
2d:8e:df:60:fd:e0:c2:f1:5f:3d:a9:39:67:31:f5:cd:a3:5d:
1d:a6:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:34:02 2025 by rpki-client