Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa
File: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (raw, json)
Hash identifier: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=
Subject key identifier: B0:18:6D:44:8B:2B:2C:60:DC:08:79:B5:3A:E8:63:68:25:2B:DB:FD
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 019526F4A93BABB415197E7961E78DF4F057
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa
Signing time: Fri 21 Feb 2025 05:22:02 +0000
ROA not before: Fri 21 Feb 2025 05:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 193.176.184.0/24 maxlen: 24
193.176.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:26:f4:a9:3b:ab:b4:15:19:7e:79:61:e7:8d:f4:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Feb 21 05:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0186d448b2b2c60dc0879b53ae86368252bdbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:4f:58:96:ac:9c:88:aa:83:21:23:fa:ad:
3b:f7:a6:44:fb:62:fa:8e:50:53:2b:cc:97:5e:e4:
79:60:72:3f:14:a1:ad:c4:cb:c8:3c:46:18:f5:af:
0b:41:7a:8b:fb:15:3c:7f:13:56:ec:42:bf:b5:16:
47:7d:81:41:c9:d8:1e:03:97:5e:cd:e6:19:66:d3:
13:20:8b:71:5a:6a:41:0b:30:d8:51:0e:c2:c0:2a:
f6:73:8d:57:b3:cc:8a:71:a2:7d:94:4f:d8:97:fd:
9e:7d:37:20:fe:93:6d:97:08:be:e3:4e:91:10:2b:
6a:64:5b:1e:e5:ba:71:fb:63:26:dd:ba:6a:44:0c:
86:c4:75:62:3b:e1:e9:49:1d:4e:ba:17:c9:65:84:
e8:df:b0:17:c5:52:4e:88:b8:d9:0d:a8:d9:46:a7:
cb:fd:ab:87:65:0c:24:a7:1f:6e:2f:36:e1:9b:3d:
90:c0:05:25:d2:41:54:d6:6f:0b:5b:ac:05:b5:df:
29:1a:94:dc:26:76:14:56:1a:32:b6:df:80:73:37:
6d:de:5d:74:b4:3d:d1:1e:0a:6a:b8:53:91:d4:cd:
aa:eb:7c:22:70:ff:5b:b4:dd:2d:f5:9f:36:c2:6c:
b3:fe:21:0b:62:1c:00:2b:aa:06:1d:68:49:4f:d8:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:18:6D:44:8B:2B:2C:60:DC:08:79:B5:3A:E8:63:68:25:2B:DB:FD
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.184.0/24
193.176.187.0/24
Signature Algorithm: sha256WithRSAEncryption
02:42:14:f8:f2:a8:98:01:bc:d9:d5:58:93:4c:6d:e6:6e:af:
f3:73:99:57:9f:69:00:40:16:32:54:60:f9:14:e0:b5:30:b2:
a0:4a:a2:2d:c1:9c:ca:98:d4:3c:86:69:f2:5b:5e:b0:af:91:
46:c2:9d:4d:e2:42:16:a2:2c:2f:28:c6:5d:a0:a7:1d:29:f4:
06:69:c3:53:8f:46:9e:78:37:40:f4:2f:35:ec:92:a1:db:a6:
c5:8c:bf:ee:e6:65:23:6e:d6:d0:f4:78:81:e7:a9:06:cd:23:
6b:c4:51:59:da:84:77:13:d7:9b:bf:ac:1f:02:ce:74:8e:6b:
97:d0:bb:91:71:8c:02:e5:42:5b:ea:e5:bf:87:08:23:b6:1c:
b4:7b:d6:93:4c:5e:bc:4a:1d:3d:51:3e:de:b4:80:c5:01:87:
4f:fa:bc:c6:e7:0c:f8:f1:1d:33:89:3f:30:31:94:0d:00:dc:
7f:e8:8f:7c:35:d1:f3:fe:64:7b:cb:c7:69:cc:f9:3a:99:0f:
aa:32:d6:bf:c7:be:05:35:91:64:a7:09:59:44:66:23:c7:f6:
84:a9:49:6f:94:fb:36:77:32:16:97:8d:51:d1:87:3a:df:e8:
73:ee:84:4d:d3:dc:c0:2a:2c:32:64:bd:9a:c7:7c:0a:aa:b4:
b0:71:98:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:21 2025 by rpki-client