Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HrBRmTFS8Ys6uQLM7rhI98nFihs.roa
File: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (raw, json)
Hash identifier: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=
Subject key identifier: 1E:B0:51:99:31:52:F1:8B:3A:B9:02:CC:EE:B8:48:F7:C9:C5:8A:1B
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0194228DD3301320F22C4FE87939D334716B
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HrBRmTFS8Ys6uQLM7rhI98nFihs.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208814
IP address blocks: 193.138.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d3:30:13:20:f2:2c:4f:e8:79:39:d3:34:71:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1eb051993152f18b3ab902cceeb848f7c9c58a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:1c:7b:75:a4:01:7d:5c:5c:c1:57:2f:7a:
33:eb:42:0e:cc:b4:f9:58:b1:19:68:b9:d4:46:f4:
22:29:8d:ac:7c:ef:0d:5f:9a:aa:21:ed:12:7a:d5:
da:7d:be:b3:b7:ce:ee:8c:42:c6:10:11:cb:8f:e8:
02:ae:80:de:9d:e8:9d:d0:7e:b9:78:5c:98:cc:75:
08:7a:3c:39:bf:af:8e:60:98:d7:7f:53:3c:21:95:
ec:6e:91:0b:d5:10:18:f9:b1:d2:ef:34:45:d6:8c:
f0:8c:85:bd:40:8b:be:3f:af:7a:e3:b7:83:e4:b4:
07:32:b3:e9:55:e8:9f:7c:08:ae:e1:41:cd:f2:63:
b7:8a:bc:c8:fd:79:4c:dd:ae:59:f5:8a:47:59:02:
56:c8:4b:ba:8c:50:e5:89:88:4c:e8:29:9d:03:7b:
4e:ca:f8:ab:52:34:30:eb:7f:b8:2f:48:3c:d2:fc:
c9:52:a7:96:a7:92:7d:c0:02:54:f1:57:f0:23:21:
eb:72:b2:bf:ec:46:1d:a8:c4:53:10:72:9f:82:3e:
a7:26:75:fc:69:1f:ff:3c:e9:9f:cc:16:21:07:95:
57:fe:0d:d6:40:36:49:31:85:1b:0e:80:53:ef:4f:
1b:3c:8b:21:f3:18:41:f0:ce:35:a5:45:ff:64:c2:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B0:51:99:31:52:F1:8B:3A:B9:02:CC:EE:B8:48:F7:C9:C5:8A:1B
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HrBRmTFS8Ys6uQLM7rhI98nFihs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.81.0/24
Signature Algorithm: sha256WithRSAEncryption
78:48:e8:48:52:b6:df:d9:73:1d:42:0d:62:92:ce:13:9e:59:
ca:d5:8c:73:1e:c4:e6:9f:14:ab:f5:de:f7:61:3e:f8:16:e7:
93:ce:7f:80:02:f8:b6:d6:1d:1e:72:90:c8:cb:bb:a4:97:67:
7e:2e:53:b7:b8:2b:62:20:8c:46:88:a2:ce:55:6f:42:66:c2:
22:69:5d:e3:32:aa:fc:49:76:82:fa:2c:c3:d0:32:86:41:3d:
8e:7b:fb:32:0c:97:a9:73:8a:f7:39:dc:91:72:14:22:3e:c7:
2c:4d:a7:02:1d:61:31:8e:d5:af:93:a7:8c:71:42:75:5c:be:
5a:33:7c:c6:4d:2a:9f:91:04:06:c7:2c:f9:4b:50:da:bc:57:
a5:8f:5b:a8:0e:22:35:93:f2:23:47:8f:62:9c:2b:52:85:ae:
3e:36:53:7c:21:79:e1:cd:2e:45:57:36:28:f3:db:ae:df:48:
15:e5:86:fc:8e:99:60:07:b4:ec:96:e2:0c:c3:30:f4:02:9b:
95:a3:d6:c2:39:16:e6:a2:38:a8:ff:15:4e:a1:50:ad:b6:8a:
27:81:97:b5:0f:ed:f9:e1:ff:75:d9:f1:06:02:ff:98:bb:20:
f9:15:e5:59:43:e8:84:8c:aa:8e:cd:29:7d:38:97:e5:1d:8b:
1e:56:93:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:12 2025 by rpki-client