Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/vS0I_AOYCa-h18b0dXPDbEfS0K4.roa
File: vS0I_AOYCa-h18b0dXPDbEfS0K4.roa (raw, json)
Hash identifier: O/7Sw7MS+bpXDU4HfVGuZ8qOx9sRGuh4hwNebz6lxRU=
Subject key identifier: BD:2D:08:FC:03:98:09:AF:A1:D7:C6:F4:75:73:C3:6C:47:D2:D0:AE
Certificate issuer: /CN=3269cc291ba260fc71118684e7b302f50ce9628d
Certificate serial: 06D80D6F
Authority key identifier: 32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/vS0I_AOYCa-h18b0dXPDbEfS0K4.roa
Signing time: Sat 01 Jan 2022 10:57:43 +0000
ROA not before: Sat 01 Jan 2022 10:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3399
IP address blocks: 193.53.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114822511 (0x6d80d6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3269cc291ba260fc71118684e7b302f50ce9628d
Validity
Not Before: Jan 1 10:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd2d08fc039809afa1d7c6f47573c36c47d2d0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:77:93:e1:fb:ef:10:32:7a:70:cb:f3:02:
89:88:e5:ff:e5:4a:a9:7b:54:ff:92:d5:81:66:d7:
89:87:38:df:79:83:b9:19:d0:4b:34:4b:59:e0:99:
67:8d:c2:5a:8a:f0:1b:a3:4b:2e:d3:77:c8:af:60:
1b:57:c1:59:f0:57:da:1f:21:ce:8d:fd:d0:2a:53:
d1:e8:36:87:1a:19:42:5a:ea:82:24:12:06:96:66:
0f:bf:3d:f9:23:b3:13:6d:00:37:76:91:46:16:55:
73:55:fe:38:cc:18:f4:5c:dc:20:6a:7f:78:23:d8:
48:45:af:a6:9e:9a:ce:36:fa:f3:9f:c0:c1:3f:b8:
ae:fb:4e:9d:d2:e2:aa:e9:e4:f7:97:a8:03:b1:74:
96:23:08:d0:2d:ab:97:84:45:22:41:94:c2:67:0e:
ae:d4:98:67:25:a0:23:b8:56:7d:61:d8:4e:3d:57:
e2:75:0a:0a:c8:11:67:78:4f:bb:32:fd:e8:d1:93:
6b:ae:60:11:5c:a1:b8:02:fa:ae:06:e1:7e:35:c5:
50:ea:8c:ad:de:99:2c:3f:7b:90:7c:44:49:b5:aa:
f8:d8:17:16:fd:41:df:aa:66:53:cf:28:46:db:38:
d0:86:58:5a:a3:23:8f:9f:01:ca:c0:eb:55:43:9f:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:08:FC:03:98:09:AF:A1:D7:C6:F4:75:73:C3:6C:47:D2:D0:AE
X509v3 Authority Key Identifier:
keyid:32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/vS0I_AOYCa-h18b0dXPDbEfS0K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.82.0/24
Signature Algorithm: sha256WithRSAEncryption
be:0e:7a:23:76:d8:30:08:71:6f:fb:b6:80:05:8e:98:0e:0b:
62:52:0c:56:c8:40:e8:5c:85:59:74:99:f8:8e:a1:9f:74:62:
d8:10:12:1c:b5:80:17:4d:43:03:21:79:18:15:45:56:7c:ca:
0a:b3:fa:ee:3b:ee:d2:1d:74:23:36:41:23:30:3c:e6:cb:9d:
a0:9d:08:f1:24:13:26:dc:9d:96:64:6a:fc:7e:a3:c5:04:81:
93:c7:4d:53:a7:af:0c:4b:a1:c1:ef:5b:da:3f:5d:d5:9b:e9:
60:06:e6:2a:6d:6a:bd:72:b8:35:be:b8:13:14:22:cd:ec:35:
cd:e9:a4:53:66:e9:95:23:70:98:dc:f9:1c:1b:c7:1a:0a:db:
0c:36:d5:3c:20:52:b1:02:27:41:65:46:fe:4e:d9:2f:95:1b:
8c:46:7b:09:d7:d7:c3:2c:2a:1a:45:eb:6e:07:87:bb:63:72:
9e:fb:27:48:80:1c:4b:d2:e3:53:cf:70:fe:a4:7f:c8:20:90:
a8:20:37:34:3a:36:8f:1b:7e:24:c4:61:c6:09:7f:d6:a7:4d:
5b:cf:5e:ab:d7:44:0d:ac:54:fb:65:04:6d:c4:5f:cc:8d:6e:
e3:99:e8:97:94:f3:23:ee:7b:3f:f8:eb:de:a9:50:55:56:47:
37:6b:03:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:48 2025 by rpki-client