Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/aPRiC93mhmuPrf-OuvwR88nSJ9M.roa
File: aPRiC93mhmuPrf-OuvwR88nSJ9M.roa (raw, json)
Hash identifier: 5K0rB5kBYwflw6qV3EDAjiNHWawnx+uc62/4skZDM+8=
Subject key identifier: 68:F4:62:0B:DD:E6:86:6B:8F:AD:FF:8E:BA:FC:11:F3:C9:D2:27:D3
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 019424B393E5E89E7E9B95CADCE3BFD86FC1
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/aPRiC93mhmuPrf-OuvwR88nSJ9M.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208046
IP address blocks: 193.142.146.0/24 maxlen: 24
193.142.147.0/24 maxlen: 24
2a0f:ca80::/48 maxlen: 48
2a0f:ca80:1::/48 maxlen: 48
2a0f:ca80:617::/48 maxlen: 48
2a0f:ca80:618::/48 maxlen: 48
2a0f:ca80:619::/48 maxlen: 48
2a0f:ca80:1100::/40 maxlen: 40
2a0f:ca80:1200::/40 maxlen: 40
2a0f:ca80:1337::/48 maxlen: 48
2a0f:ca80:1338::/48 maxlen: 48
2a0f:ca81:b00b::/48 maxlen: 48
2a0f:ca83:1337::/48 maxlen: 48
2a0f:ca84::/40 maxlen: 40
2a0f:ca86::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:93:e5:e8:9e:7e:9b:95:ca:dc:e3:bf:d8:6f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f4620bdde6866b8fadff8ebafc11f3c9d227d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:cb:c7:7c:8e:cc:7a:14:e0:92:7c:b7:2f:
b7:ee:a2:19:55:f6:e1:51:64:fa:ec:d7:4d:6a:ba:
a6:d8:b5:3c:b0:a4:9f:da:76:73:d5:df:cf:02:a5:
31:cf:67:4a:8f:39:95:ae:26:b7:80:ae:f6:f2:1f:
20:f5:f0:b1:ea:cc:6f:51:f8:5b:c9:d6:86:9a:40:
7e:ab:63:46:45:eb:ae:a1:e5:5b:dd:c5:c3:2c:ac:
4d:c4:eb:f6:32:f5:eb:d7:8b:48:fa:34:fe:a4:73:
53:0d:47:6a:7c:5e:e5:bd:58:ac:14:22:0a:1f:64:
f0:b1:46:52:ee:54:98:da:ad:a6:f8:a6:60:8e:d4:
4b:26:ee:08:98:42:7a:57:df:06:54:30:98:a0:d2:
60:09:c0:20:09:54:ba:06:7f:ff:e6:8f:a4:4d:e0:
ca:29:a1:b0:d6:6f:f6:90:38:b9:79:3d:77:25:ee:
e2:7f:71:df:ba:7c:b3:d3:d9:53:af:e0:af:3f:d7:
67:6d:6a:f9:99:70:ff:99:a7:8c:8e:14:31:5b:8f:
52:0e:1a:18:8a:35:21:5e:c7:44:9c:90:65:69:f8:
40:04:2b:06:95:c4:10:1e:45:df:be:68:be:54:74:
dc:b7:74:32:19:a9:0b:89:5e:85:1b:5a:23:18:56:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F4:62:0B:DD:E6:86:6B:8F:AD:FF:8E:BA:FC:11:F3:C9:D2:27:D3
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/aPRiC93mhmuPrf-OuvwR88nSJ9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
IPv6:
2a0f:ca80::/47
2a0f:ca80:617::-2a0f:ca80:619:ffff:ffff:ffff:ffff:ffff
2a0f:ca80:1100::-2a0f:ca80:12ff:ffff:ffff:ffff:ffff:ffff
2a0f:ca80:1337::-2a0f:ca80:1338:ffff:ffff:ffff:ffff:ffff
2a0f:ca81:b00b::/48
2a0f:ca83:1337::/48
2a0f:ca84::/40
2a0f:ca86::/40
Signature Algorithm: sha256WithRSAEncryption
58:a6:19:c7:c2:36:e6:cc:ab:9d:e3:7f:e0:ab:15:6d:11:4d:
30:70:3a:97:3d:3d:74:c0:61:c9:85:20:46:b7:82:1f:82:d7:
e5:1e:96:e1:8a:7a:5b:4f:a3:5a:e6:14:dc:c9:b8:aa:22:5c:
6f:df:98:9c:7b:f6:bd:b3:0f:78:f0:6e:e2:e2:84:00:65:7e:
c6:eb:c1:4c:44:03:d1:b8:0c:a1:f2:6b:e6:af:60:00:74:c0:
ce:30:24:af:d6:75:8b:0b:f2:fc:21:1a:aa:12:28:fb:66:0f:
fe:f2:76:32:f0:07:26:16:4b:45:57:95:a9:a8:26:10:d6:da:
39:e0:54:a7:35:4a:1b:bd:25:e3:0c:f1:4b:a6:7f:9b:63:ad:
56:ea:1c:65:fe:54:89:40:97:50:89:dc:1b:a3:d7:3c:50:77:
e3:8b:5b:0a:29:17:9d:f4:05:14:a4:f3:24:97:11:fe:c1:cb:
3f:1d:0b:2c:1f:0e:56:af:be:a3:73:0c:ae:82:6e:b3:08:81:
8f:f8:44:1d:ae:35:0b:89:53:c7:2f:29:13:ba:15:cb:aa:40:
d0:02:42:13:a0:05:3f:d0:a6:a3:01:d7:ec:32:c2:89:5c:86:
1b:73:b9:52:33:32:4d:67:58:95:33:45:39:ef:da:b2:b2:d4:
4d:6e:96:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:06 2025 by rpki-client