Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/bA2-1nnLbrWRGqFV2afM2bzGsYs.roa
File: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (raw, json)
Hash identifier: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=
Subject key identifier: 6C:0D:BE:D6:79:CB:6E:B5:91:1A:A1:55:D9:A7:CC:D9:BC:C6:B1:8B
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0194236A0A6CCD7B664CA4386201899C981A
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/bA2-1nnLbrWRGqFV2afM2bzGsYs.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 193.163.200.0/24 maxlen: 24
194.9.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0a:6c:cd:7b:66:4c:a4:38:62:01:89:9c:98:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c0dbed679cb6eb5911aa155d9a7ccd9bcc6b18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:35:d0:5f:85:e3:0c:a6:c3:a1:db:ae:4d:
81:b1:f4:55:6b:9c:92:38:3d:71:1e:2d:bd:48:06:
9f:11:ff:93:ef:2c:43:73:b1:c7:f5:6a:89:f0:92:
67:58:1e:87:a0:28:5a:3c:44:3f:03:72:5a:90:f0:
6e:6d:7c:17:12:d3:3f:30:75:e6:83:a9:df:b4:3e:
fa:a8:a9:ae:3e:49:ea:a2:6c:dc:e9:08:e4:05:d5:
13:ac:e3:bf:93:a8:77:d0:15:50:83:e4:a4:93:4a:
79:c7:0c:d0:3f:a1:06:4a:0c:37:d3:ae:68:c0:8f:
f3:89:7a:99:6d:a6:95:2e:3a:78:49:34:78:49:b8:
9d:6e:2c:e5:cb:b6:dd:a9:7b:6c:ed:7f:c6:11:f9:
66:69:b3:48:c7:8b:76:09:c5:fd:d4:f8:4d:6e:91:
69:f9:d8:c3:f3:08:91:76:5f:e8:ce:da:1e:5e:97:
c6:c1:2c:76:33:f5:13:cb:6a:a3:66:17:1d:cc:d8:
38:8d:a1:14:bd:6d:97:f0:04:25:b7:48:d8:f8:dc:
6f:c6:43:c8:6a:ce:64:a4:7d:c4:31:82:9e:d2:92:
b8:bc:eb:fc:06:25:3c:57:e9:5d:aa:75:ab:ba:41:
df:44:45:c1:ef:af:2e:5d:40:fd:85:b3:54:ef:46:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0D:BE:D6:79:CB:6E:B5:91:1A:A1:55:D9:A7:CC:D9:BC:C6:B1:8B
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/bA2-1nnLbrWRGqFV2afM2bzGsYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.200.0/24
194.9.181.0/24
Signature Algorithm: sha256WithRSAEncryption
85:25:e6:66:54:4a:d9:77:c1:1b:5c:60:f5:08:bd:93:ba:77:
4a:be:38:8e:f0:0a:1e:aa:c6:ca:1b:5b:7a:16:2f:82:30:1e:
ac:c2:6b:fe:18:68:d4:54:0f:57:08:92:0f:61:5c:de:84:8f:
60:76:dc:2b:c4:87:f8:d9:f3:df:19:00:08:b3:ee:cc:74:d4:
9d:5a:3f:29:11:72:82:40:d3:e7:23:7c:80:e4:69:4c:2a:e7:
1d:88:d4:30:c8:5d:32:b9:0c:d9:56:c0:a9:3a:97:c9:b5:5f:
d0:84:87:6a:4e:fe:77:b6:7b:ef:9c:e9:22:c5:8b:81:27:dd:
c3:29:41:46:fe:55:cb:84:98:1c:7e:f3:05:77:e6:73:cb:40:
ae:89:ff:17:30:5b:3d:31:d8:74:84:e8:a4:70:93:8c:c6:6c:
95:64:6a:e9:ad:9f:43:e8:0e:5d:67:c9:c8:20:71:34:a2:6b:
6d:41:70:94:0c:d9:54:6e:e7:10:98:0c:c3:ab:d5:b7:df:ec:
ad:65:5e:31:8e:30:b1:14:ff:56:15:79:27:16:df:a3:35:7b:
19:b4:28:c2:c8:57:5e:e7:4b:59:40:9b:72:d5:22:23:40:69:
30:09:3a:fe:78:39:8d:e2:5a:d1:8e:78:ed:9c:a1:15:be:36:
da:a0:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:31:11 2025 by rpki-client