Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa
File: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (raw, json)
Hash identifier: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=
Subject key identifier: EA:A7:09:C8:B9:06:1C:62:98:11:62:5C:46:23:78:2F:A6:7C:AA:7F
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019425FD805BE8ECEB89193FD6D28C6F5BC0
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa
Signing time: Thu 02 Jan 2025 07:49:17 +0000
ROA not before: Thu 02 Jan 2025 07:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212707
IP address blocks: 193.163.47.0/24 maxlen: 24
2a10:5bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:80:5b:e8:ec:eb:89:19:3f:d6:d2:8c:6f:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Jan 2 07:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaa709c8b9061c629811625c4623782fa67caa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:c8:34:bc:45:ec:0e:c1:19:79:5d:c1:55:
86:8d:47:1d:e9:c2:21:59:55:d4:31:22:7c:3b:17:
75:a8:e8:89:b2:7b:fe:b4:cd:fb:71:d0:56:a9:6a:
65:7c:ca:3a:5f:3d:d7:d7:0a:f7:89:2d:d6:dc:f3:
36:51:76:61:0b:5d:32:1b:da:42:11:12:e0:b9:05:
07:32:c9:a9:de:c3:a9:ff:e5:5b:c6:05:c5:53:c4:
97:d4:33:bf:75:43:3e:5b:9c:7b:96:70:e2:85:ce:
0f:47:ba:10:0f:40:ec:e0:53:cd:ad:be:00:4f:e1:
a6:ca:a5:5b:82:0f:38:d9:1c:60:e9:62:96:01:4c:
10:22:e7:00:15:c9:03:b3:27:1b:47:96:b1:00:7b:
eb:9c:de:36:68:d6:35:26:85:d4:97:42:2b:92:f5:
c8:d6:88:89:cd:35:c9:d8:3f:8b:43:04:7a:3c:26:
d1:ea:5a:57:45:2b:44:d0:ee:49:17:23:f9:cb:a1:
1b:10:45:7c:96:4b:50:a7:63:da:37:cb:97:17:09:
52:01:6a:f6:77:a7:2d:19:6c:41:b3:94:bc:86:00:
e6:ec:41:12:44:5b:5f:a4:65:f5:8b:5c:33:b2:c0:
cd:bb:94:31:7b:64:0f:3a:76:04:af:d6:37:b3:3d:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:09:C8:B9:06:1C:62:98:11:62:5C:46:23:78:2F:A6:7C:AA:7F
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.47.0/24
IPv6:
2a10:5bc0::/29
Signature Algorithm: sha256WithRSAEncryption
56:95:e6:83:29:27:af:00:62:0a:ff:79:92:3f:07:51:1c:c6:
92:70:01:94:af:a9:05:85:14:d0:48:37:60:01:97:70:05:2d:
0e:07:54:53:e6:7c:58:f8:c2:52:a9:67:75:c0:4f:1f:97:74:
f5:3a:85:2b:36:a3:83:9c:2c:e6:1c:29:f2:a9:d4:93:a1:96:
d7:e1:41:94:b3:54:6a:4b:d3:47:9a:8f:7c:92:49:13:b1:ad:
b0:71:07:48:19:ee:dc:a4:b9:94:1f:52:b1:f0:c3:fb:f2:ec:
3e:9a:af:07:d7:08:4f:b8:5d:db:35:5b:ff:57:fe:7f:50:67:
14:c2:c7:fe:6b:97:93:55:ba:16:7b:ff:49:0e:8a:84:b5:1d:
e7:dc:7f:8e:74:84:90:39:ce:53:e1:1f:35:55:f6:8e:9a:52:
4a:2d:2f:03:f8:0f:10:7c:ca:97:38:33:58:c2:e2:ba:e5:93:
37:3a:43:40:3e:de:b4:17:00:bc:3b:91:48:9c:50:8f:69:d3:
87:90:48:bf:a2:74:ce:7a:46:21:d0:ba:5a:81:f0:e4:05:ae:
b0:ff:79:88:24:34:9a:2b:a2:97:e8:b3:f3:68:09:65:98:f1:
4e:7a:4c:13:05:41:e2:e6:19:7c:b1:d9:71:f5:4e:98:7b:0b:
c5:14:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:10:43 2025 by rpki-client