Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uk4BqTCEoL3sEaJj8MD_xHDAHpo.roa
File: uk4BqTCEoL3sEaJj8MD_xHDAHpo.roa (raw, json)
Hash identifier: 29n5TTHTIvka15eqX14Lw3BAv1nZlFp1nRl40efgO9k=
Subject key identifier: BA:4E:01:A9:30:84:A0:BD:EC:11:A2:63:F0:C0:FF:C4:70:C0:1E:9A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0195D6F0A61FD2DD49D5EBE6FA93EC528CA6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uk4BqTCEoL3sEaJj8MD_xHDAHpo.roa
Signing time: Thu 27 Mar 2025 09:30:50 +0000
ROA not before: Thu 27 Mar 2025 09:30:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57014
IP address blocks: 193.58.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:f0:a6:1f:d2:dd:49:d5:eb:e6:fa:93:ec:52:8c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 27 09:30:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba4e01a93084a0bdec11a263f0c0ffc470c01e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:95:a8:67:4f:47:e9:0b:4d:71:73:83:a8:
00:78:f2:57:31:65:67:10:71:4b:f5:b9:62:82:34:
08:74:3b:c9:17:65:7a:90:88:14:35:5b:da:c0:07:
a1:be:90:82:8d:60:fd:e2:66:29:9f:54:b1:66:97:
4f:b8:35:91:b6:8f:ea:37:e9:62:1e:62:19:33:58:
ac:4b:34:9c:a1:a3:c6:1f:1d:16:46:85:c2:11:f4:
07:f5:47:48:f2:e0:8f:e8:a1:f3:27:08:89:7a:c9:
6f:c9:54:d9:ae:10:66:27:b9:19:3b:e4:4e:f6:d0:
bc:d1:22:8c:c8:ab:57:f4:2e:72:4f:3d:fc:13:e5:
46:49:8e:5a:28:46:a7:2a:8c:75:0b:fd:6a:54:03:
e0:ac:68:1b:4b:de:63:a3:f5:60:3d:1f:ea:4a:d4:
b7:a3:0b:a2:8b:d0:ab:c0:e9:d0:fb:52:4e:d2:e4:
33:90:36:bc:7c:2d:9f:3b:55:ce:b5:b8:98:51:bc:
b4:d2:d5:aa:ad:3c:3d:b8:96:bf:ae:27:e0:8b:6b:
f0:1f:f4:b4:a4:6c:ce:d7:79:ac:4e:62:0d:ab:d9:
d2:37:7d:be:09:ef:a1:b8:cb:c4:15:31:af:f5:54:
03:fe:4a:98:4b:b8:77:98:ae:c6:ce:bb:92:de:a6:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:01:A9:30:84:A0:BD:EC:11:A2:63:F0:C0:FF:C4:70:C0:1E:9A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uk4BqTCEoL3sEaJj8MD_xHDAHpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e9:b3:0e:11:e0:e1:04:d0:a3:c5:0f:41:38:ec:bd:0a:c0:
94:0c:40:27:fc:94:e4:2e:d8:dd:76:75:4d:1a:fd:2f:9e:11:
65:fa:96:62:c3:52:f0:59:76:95:5a:15:48:49:9b:8b:c0:38:
71:21:b4:cc:50:02:ab:32:8d:81:87:ce:ba:ea:6d:ed:45:65:
f0:64:e1:27:76:16:5f:f1:18:f1:55:12:55:b5:4c:23:c0:70:
1d:f3:a0:5d:2a:c7:c0:83:7f:f5:47:ac:fe:61:78:f0:45:7f:
f2:bd:f5:d2:e1:14:39:3c:08:52:31:40:a2:9a:f4:22:c4:93:
d2:d7:a8:42:24:a5:06:8c:a9:ba:3d:34:91:be:05:bf:60:ea:
d4:f6:71:a5:52:31:dd:13:86:62:a1:c8:fc:f6:aa:ba:cb:2c:
a4:16:1f:ab:f3:11:00:d0:d4:97:25:01:1f:6f:cb:7c:5e:37:
64:25:fb:9c:1a:26:61:e1:aa:20:a6:6d:bc:b4:45:b6:57:ca:
71:4f:09:26:d7:11:d9:ad:1c:21:55:35:0b:77:4d:31:fd:ba:
a7:3e:20:bd:1f:15:17:83:a5:8b:23:e5:db:65:fe:de:43:da:
d0:c0:15:5a:5e:51:0c:2f:5d:90:1b:5a:84:1e:4a:b7:62:89:
6d:bc:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:54 2025 by rpki-client