Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/a2N7ZqNTTwHGwfd7829psoPCAf8.roa
File: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (raw, json)
Hash identifier: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=
Subject key identifier: 6B:63:7B:66:A3:53:4F:01:C6:C1:F7:7B:F3:6F:69:B2:83:C2:01:FF
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01941FFA26C6587D938A4C2549E17BAEF6F3
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/a2N7ZqNTTwHGwfd7829psoPCAf8.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209605
IP address blocks: 193.31.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:26:c6:58:7d:93:8a:4c:25:49:e1:7b:ae:f6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b637b66a3534f01c6c1f77bf36f69b283c201ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:ab:5c:e8:aa:59:06:9d:cf:ce:d7:be:15:
d0:62:60:79:61:2e:dc:7a:77:0d:f8:23:ed:65:8b:
54:a7:5b:4f:a0:9d:b8:42:03:e1:af:c3:12:29:5f:
c5:ee:37:d1:8c:cb:43:77:63:4e:fc:d8:c3:cd:29:
17:0c:04:93:6f:72:e0:ff:fe:82:0c:bb:12:e0:95:
90:28:10:da:63:34:c3:42:a2:5f:50:4d:39:bb:f6:
76:54:72:d8:64:5a:82:0a:c4:1b:29:2e:0c:b0:5a:
ae:6b:48:5f:06:18:0e:af:fa:78:c1:4b:c2:da:da:
77:05:52:82:43:72:cb:db:b0:0a:15:1e:2f:76:15:
0c:fe:af:37:3f:00:02:73:90:60:18:cf:60:4f:e0:
4a:e6:68:94:c1:99:55:65:25:40:92:48:bf:7c:5f:
0f:53:5b:3d:64:7f:e0:fc:d5:b7:8a:e5:f6:8b:59:
fc:b1:82:90:27:1a:00:a0:6f:9e:81:5e:36:da:6d:
83:58:15:f2:dc:2c:01:d9:ae:61:88:0e:ad:fe:cf:
8b:81:26:86:bc:cd:20:3c:a6:0f:90:22:39:1e:23:
89:25:aa:19:89:ed:5e:e9:c8:7f:4a:dc:2c:56:f1:
65:c1:e5:73:32:54:e1:a8:5c:a9:80:9f:86:70:04:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:63:7B:66:A3:53:4F:01:C6:C1:F7:7B:F3:6F:69:B2:83:C2:01:FF
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/a2N7ZqNTTwHGwfd7829psoPCAf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.6.0/24
Signature Algorithm: sha256WithRSAEncryption
00:be:6e:d0:1e:7c:c0:62:f8:15:3b:ca:ff:ee:db:58:e2:94:
58:b3:4b:2f:2b:9e:99:e6:bc:c5:41:8a:a5:b3:f5:25:6e:4c:
ad:5a:2d:d9:45:c8:0e:f4:25:7f:52:3d:60:b3:af:c8:80:5d:
f8:6a:ac:1b:13:04:4d:f3:61:6b:e0:eb:dd:19:6f:b5:80:f6:
d9:24:19:fc:9e:12:59:f2:b5:da:a9:d3:7e:5e:62:43:9e:b4:
43:d6:87:2d:23:84:07:21:f8:a3:bf:bb:32:d9:da:e5:8f:4a:
d4:b6:3f:1b:bf:32:e2:66:bc:13:a6:2b:c4:d5:a5:44:18:4d:
a2:45:eb:33:5c:c2:26:c3:e0:1e:59:4a:62:a2:ad:bc:fa:5f:
56:1b:f8:e6:65:db:96:52:8a:11:8d:4c:fa:e6:68:0b:09:d2:
01:10:00:46:b5:cb:7f:cf:39:43:b2:24:bf:4c:f6:6c:94:21:
e4:56:f0:91:f4:d0:42:13:ce:94:47:f2:7a:b5:f2:55:61:3e:
9e:fd:1d:c3:1a:14:c5:2f:5d:43:9f:c9:a0:5d:f2:bd:ec:b0:
a0:2f:6d:83:90:90:9b:ce:40:08:19:ff:be:1f:54:b7:e3:fe:
4b:a7:22:ab:21:6f:73:34:d7:b4:c5:52:e6:fc:24:2f:e9:ee:
25:25:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:12 2025 by rpki-client