Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/tj6K5SjptWHwjdC118oFQLdh9d0.roa
File: tj6K5SjptWHwjdC118oFQLdh9d0.roa (raw, json)
Hash identifier: r+olKMGe/rwlvBp2fd9whUIN+tGxqF1STWjeBypW8Gg=
Subject key identifier: B6:3E:8A:E5:28:E9:B5:61:F0:8D:D0:B5:D7:CA:05:40:B7:61:F5:DD
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 01942143F4EEE36A8C1FA4F47D7245860CA1
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/tj6K5SjptWHwjdC118oFQLdh9d0.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394256
IP address blocks: 193.188.2.0/23 maxlen: 24
193.188.14.0/23 maxlen: 24
193.188.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f4:ee:e3:6a:8c:1f:a4:f4:7d:72:45:86:0c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b63e8ae528e9b561f08dd0b5d7ca0540b761f5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:92:c8:33:11:b8:6a:97:ba:ab:b7:0a:f6:
bb:8a:78:e7:e5:fa:f3:ca:32:35:79:f5:20:92:80:
7d:ff:81:a8:cf:75:75:0f:48:bd:99:56:cd:20:b2:
08:42:80:5c:3b:fb:ef:f2:e8:a0:2a:86:e2:a9:5d:
18:5d:46:2d:84:df:0d:d2:3c:7b:fb:fa:0f:e5:f7:
39:e7:ad:a7:47:6d:b0:3c:07:13:4a:91:62:25:27:
f6:2b:ca:89:aa:37:b7:a3:d8:d5:04:86:c9:33:bc:
ba:27:df:4b:78:2b:5e:a2:2c:59:65:70:75:65:82:
23:59:32:2b:a4:f7:a4:c5:2f:fa:49:25:e6:1d:d9:
34:09:eb:05:d1:30:da:96:3a:2e:a1:82:0e:ee:0a:
85:b7:3f:f7:11:c5:7a:89:c1:fd:5c:44:db:e7:8e:
c8:e1:9a:f1:db:99:ef:a3:3c:d8:d5:c6:14:74:fd:
f3:97:dd:97:4e:d1:f8:f8:8b:14:0d:33:5f:25:f7:
b5:d1:3e:da:77:14:89:c4:6a:af:a5:80:21:c6:e5:
bc:80:2a:99:4c:29:0b:1c:8d:9a:08:c5:ca:47:2f:
16:f7:cf:2a:ae:fa:d6:5c:48:5e:c4:d3:20:2f:f5:
06:64:66:3d:89:07:7b:8f:97:0f:2d:ac:f6:fb:5d:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3E:8A:E5:28:E9:B5:61:F0:8D:D0:B5:D7:CA:05:40:B7:61:F5:DD
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/tj6K5SjptWHwjdC118oFQLdh9d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.2.0/23
193.188.14.0/23
Signature Algorithm: sha256WithRSAEncryption
02:b2:8b:64:d8:69:96:6f:73:93:f1:9c:8e:ab:2e:5b:3c:c4:
9e:ea:66:7a:b6:25:67:1d:a9:c9:c3:5c:10:ae:17:0c:98:72:
97:f8:0d:de:59:a2:6f:5a:d2:45:5f:bd:c7:00:8e:04:77:6d:
f3:09:6a:cd:9a:c6:81:ca:99:fa:41:1f:42:a1:73:b7:e6:99:
17:6f:cc:d3:eb:4d:bc:54:00:9f:c6:1b:cb:86:f0:04:bc:7c:
7b:ca:43:04:a8:67:ce:d5:f6:f3:bd:8d:51:07:ce:3d:c8:dd:
bd:88:f6:16:b3:b0:2d:29:73:25:00:7e:79:5b:08:bd:c9:c2:
dc:e4:14:87:cd:64:81:e6:5c:0d:a2:28:4a:8d:40:9a:ed:95:
a3:d8:6d:45:c5:5a:3b:4e:fe:2d:e9:8e:38:e7:b5:c4:89:a4:
c3:b7:9b:16:de:1b:4b:b7:c4:90:a4:bf:80:b6:76:23:5c:12:
70:72:7f:ae:43:af:84:f5:f5:54:75:5c:b0:9d:29:3f:1b:c3:
ac:8e:ba:7c:6b:86:42:12:ae:e2:1d:0a:8c:d4:a9:5f:d2:2e:
f7:17:4f:38:ce:da:93:32:cd:86:d7:7b:de:03:c2:e6:64:71:
5d:50:e6:b8:72:18:b1:f9:21:7b:81:2a:83:02:11:31:8b:a1:
dd:45:63:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:36 2025 by rpki-client