Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/teWsxLl9UxMj2Kg2LV885UEXtBs.roa
File: teWsxLl9UxMj2Kg2LV885UEXtBs.roa (raw, json)
Hash identifier: ZwKl0NAlGw0kpVRl3+bmWBFp/xFATu8jsyEj+n7/Y6k=
Subject key identifier: B5:E5:AC:C4:B9:7D:53:13:23:D8:A8:36:2D:5F:3C:E5:41:17:B4:1B
Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial: 0194266BAB84049EE3134CFFF273040D54DA
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/teWsxLl9UxMj2Kg2LV885UEXtBs.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 193.57.116.0/24 maxlen: 24
193.57.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ab:84:04:9e:e3:13:4c:ff:f2:73:04:0d:54:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e5acc4b97d531323d8a8362d5f3ce54117b41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:fd:d8:df:13:e8:fc:8b:e4:5e:ad:94:53:
b7:f8:e3:a1:91:ab:b7:fd:a9:cb:ea:87:c4:b5:ce:
97:9b:f3:d4:28:b1:e3:8a:15:53:f4:aa:75:5f:2e:
35:34:71:c1:55:79:9b:2e:55:18:b1:0d:be:a3:69:
4e:f5:ef:ad:c2:5d:8e:a0:78:95:9d:08:1a:d3:2d:
dc:a1:79:f6:b1:5e:e3:85:d7:bb:f1:0a:a7:e2:45:
42:aa:5c:7e:4e:e5:31:d1:e4:bf:5b:91:0c:fd:8d:
ef:ca:db:1d:c7:63:e5:35:bb:fc:a8:8b:5c:57:cd:
fe:89:0d:53:b5:c4:b1:64:08:95:89:99:4e:ea:20:
04:b2:37:b1:64:d3:b4:a9:93:e4:2d:74:14:e0:da:
da:43:f5:72:63:c6:26:81:c6:6f:e0:fd:22:82:b5:
e1:81:68:53:1a:37:e7:25:f1:8d:4b:65:57:84:1f:
1e:c4:3f:18:91:23:af:d3:81:1f:4e:0b:5e:5e:b9:
23:fd:c4:2c:a9:7f:0c:fe:5c:a2:28:52:c1:63:9f:
17:93:93:ef:d6:34:33:6f:c2:9a:38:33:2f:61:7e:
53:2b:86:8c:38:41:b4:12:84:8f:00:33:e9:c9:10:
db:f3:c5:f7:8e:eb:7d:82:7d:51:87:87:1a:a5:e0:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:AC:C4:B9:7D:53:13:23:D8:A8:36:2D:5F:3C:E5:41:17:B4:1B
X509v3 Authority Key Identifier:
keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/teWsxLl9UxMj2Kg2LV885UEXtBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.116.0/24
193.57.123.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a6:db:a3:ce:a7:cb:69:af:a3:43:07:72:9b:39:28:ae:d4:
dc:0d:9b:1d:c4:da:5c:7b:53:2b:33:66:80:3c:e4:8d:f4:e9:
73:73:b6:c6:d3:e2:81:48:76:12:32:48:dc:62:ae:bf:ae:e5:
0f:9d:35:97:b4:db:9c:4d:13:8f:7e:1f:72:a2:c4:ac:08:9e:
74:57:23:fa:85:1f:43:4b:ce:6c:37:b9:68:96:aa:3e:b2:28:
74:1b:8c:ff:c9:33:3a:68:52:3f:dc:63:60:ac:64:c2:fc:e2:
7e:ae:82:61:fa:35:ad:53:c5:65:43:52:22:95:96:c4:48:04:
2e:df:da:95:29:89:28:33:e8:02:0e:7d:2e:dc:56:66:6d:5b:
ed:71:58:27:17:52:4f:e2:be:e2:7a:b3:a2:5b:a9:4e:61:3e:
71:62:f9:dd:24:e2:ee:56:2a:f7:6a:0e:6f:3a:0d:61:bf:41:
5b:73:a2:c0:bf:d5:fa:5e:5c:80:98:8f:8c:52:c3:a2:56:63:
b6:c9:21:e6:41:8e:ea:0e:bd:76:dd:28:d4:cb:f6:ad:f5:85:
a7:5a:18:ce:2a:a5:19:81:f7:47:25:61:cb:b8:7e:41:dc:06:
6f:96:ee:33:e5:b6:3b:84:73:db:2a:aa:24:18:2d:59:26:d3:
fd:69:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:35 2025 by rpki-client