Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/l3Pw7n1bly_YjDL1TAe1spiOskw.roa
File: l3Pw7n1bly_YjDL1TAe1spiOskw.roa (raw, json)
Hash identifier: l3riZcGaUXQRPs2G/8Yn+5HU/Wzt4EedI1wjzsV76ko=
Subject key identifier: 97:73:F0:EE:7D:5B:97:2F:D8:8C:32:F5:4C:07:B5:B2:98:8E:B2:4C
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 019509DB03C836689048E4B081384487E7C2
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/l3Pw7n1bly_YjDL1TAe1spiOskw.roa
Signing time: Sat 15 Feb 2025 13:45:03 +0000
ROA not before: Sat 15 Feb 2025 13:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 193.142.146.0/24 maxlen: 24
193.142.147.0/24 maxlen: 24
2a0f:ca86::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:09:db:03:c8:36:68:90:48:e4:b0:81:38:44:87:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Feb 15 13:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9773f0ee7d5b972fd88c32f54c07b5b2988eb24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:26:45:20:1e:b5:22:36:f9:e6:72:61:2a:
01:b3:5f:0e:d5:d0:78:df:5c:a4:92:2a:0c:69:50:
c1:a3:e3:b1:7d:d7:db:ff:56:4d:28:f6:2f:8f:9d:
84:dd:53:13:2c:ac:a5:8e:7a:4a:ca:ce:bd:54:40:
4f:76:ce:e6:0f:da:47:41:a7:45:ce:45:20:5d:df:
6b:d4:5c:2d:89:b9:ad:0d:f6:20:53:6b:85:3d:4e:
cc:2f:c2:e6:70:41:97:a5:ec:c9:38:0b:c4:0e:87:
5b:21:49:bf:4a:66:25:e7:17:fe:c9:63:71:70:99:
0f:e5:c6:af:f1:2b:cc:15:83:9d:cd:0b:86:fd:3e:
40:69:05:a4:84:77:49:ed:be:c9:a6:60:eb:d7:a3:
6c:65:66:55:ae:49:76:4e:32:7e:7d:f9:dc:bd:23:
4e:b3:98:56:df:dd:1e:6b:c0:f8:3a:aa:21:2e:a6:
08:1d:ee:fc:77:27:1d:ae:29:60:20:b0:a9:ef:9a:
14:1e:08:f7:97:3a:69:7d:c6:d7:eb:b9:f4:58:00:
c6:51:34:63:c7:d1:8e:c1:e1:5c:37:10:d6:f1:e1:
f1:47:93:bb:71:be:51:c7:bf:24:79:1d:34:3d:9f:
35:09:7b:6e:ca:35:d9:7b:93:ed:fc:73:17:d5:1a:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:73:F0:EE:7D:5B:97:2F:D8:8C:32:F5:4C:07:B5:B2:98:8E:B2:4C
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/l3Pw7n1bly_YjDL1TAe1spiOskw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
IPv6:
2a0f:ca86::/40
Signature Algorithm: sha256WithRSAEncryption
03:f0:fa:64:d8:bd:67:d2:0e:02:01:87:3c:2d:9c:e8:9c:6a:
55:b5:98:59:15:3f:ea:ef:a7:e4:03:95:59:c5:b4:c0:b5:ef:
0b:a1:9f:81:c8:5b:f6:ba:f9:4b:5b:ca:a1:19:8a:9b:89:fa:
f0:81:a5:f0:7d:b7:bb:b2:b6:61:a9:12:f2:53:40:8d:24:63:
5b:67:09:c9:24:81:de:57:65:78:86:9f:60:c5:1a:c6:53:e0:
8e:fa:e2:d8:d8:b3:5b:e6:5c:24:04:34:b4:08:aa:6b:3d:35:
2f:52:a5:af:e5:b7:75:bf:2d:1f:5a:fe:44:ff:cd:34:60:cd:
0e:1d:b8:6e:84:56:3b:2d:42:21:90:f7:ef:03:e4:be:bf:c4:
6d:ae:c9:f6:b5:99:30:dd:c0:d1:d2:7a:c2:fe:bd:64:fb:e8:
f5:57:d0:dc:39:a6:78:4c:99:62:f2:e7:7f:40:07:38:ec:b9:
ba:4f:57:bf:a6:5c:7d:6a:9f:45:f1:36:23:2b:6e:ee:49:a7:
ea:8f:25:93:29:3f:75:3a:cb:6f:47:cd:d7:1c:4a:8f:2b:af:
db:29:07:dd:e1:ea:74:14:51:96:ad:6c:96:44:e8:b4:cd:b4:
b7:a9:69:ac:5e:69:5f:97:f4:4f:1e:d7:17:f4:4e:53:1b:1f:
a8:2d:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:20:54 2025 by rpki-client