Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/vWlItCBxAXeKE8gJX96SzwOKVyc.roa
File: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (raw, json)
Hash identifier: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=
Subject key identifier: BD:69:48:B4:20:71:01:77:8A:13:C8:09:5F:DE:92:CF:03:8A:57:27
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01950EA3FB72490230C95526632E0BEE4D16
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/vWlItCBxAXeKE8gJX96SzwOKVyc.roa
Signing time: Sun 16 Feb 2025 12:03:02 +0000
ROA not before: Sun 16 Feb 2025 12:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207083
IP address blocks: 193.142.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:a3:fb:72:49:02:30:c9:55:26:63:2e:0b:ee:4d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Feb 16 12:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd6948b4207101778a13c8095fde92cf038a5727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:77:56:2e:4b:03:ee:cd:47:4b:8c:9a:54:
77:60:e5:da:24:c3:b6:cb:9f:cf:22:b7:dd:6a:e3:
f0:04:1f:71:f6:77:e3:79:7d:84:18:4d:28:31:1d:
e4:61:c2:22:7f:56:f6:c1:2a:87:63:cf:cf:9c:b8:
16:57:1c:5a:d9:5f:b5:23:60:36:0a:78:38:c3:7a:
f8:a2:1b:3f:8e:b7:42:8d:2d:5c:04:6a:b0:7a:ed:
57:3d:34:ea:a3:03:96:63:d5:a1:e3:b0:ed:6b:1b:
5f:3e:0c:0c:81:5e:f5:42:5f:48:72:80:92:90:19:
f4:13:73:02:8e:11:3c:e5:98:83:cb:c9:62:64:23:
2c:36:b1:85:d8:4e:2c:d6:20:c4:2b:ad:78:be:4d:
82:46:07:d0:a8:40:f9:25:f1:b5:ab:ad:92:75:7a:
a1:6e:02:f7:d9:10:5f:d4:d4:3c:f8:e4:d8:bc:e8:
59:62:84:ae:7c:e4:aa:f4:f5:b7:e4:7e:14:ae:05:
c1:da:23:af:6f:2a:27:83:88:51:ca:d0:25:ec:2c:
1a:92:8b:f3:50:76:43:01:dc:0c:07:a6:ff:45:18:
3f:db:3d:e4:8c:d2:36:66:ed:ee:a1:3a:17:bd:76:
29:46:05:2c:be:f3:ed:5b:aa:f1:21:43:ee:45:3a:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:48:B4:20:71:01:77:8A:13:C8:09:5F:DE:92:CF:03:8A:57:27
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/vWlItCBxAXeKE8gJX96SzwOKVyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ad:dd:99:af:ae:94:57:38:6e:c0:60:4e:42:cf:b8:56:63:
f8:24:c4:28:21:18:62:60:65:7d:f8:4b:e6:29:ae:dc:ac:61:
49:36:dd:f8:0d:ee:88:ab:74:fa:f4:14:da:9f:ee:57:62:c2:
e5:4c:3a:e6:6c:c2:d7:13:1e:93:03:e6:0c:8f:a6:ef:98:20:
fe:1e:67:61:1a:72:bb:ba:ec:ed:84:31:9c:eb:e1:8e:e4:f2:
11:13:33:03:2f:de:80:bb:7a:26:37:cb:97:e1:ac:8d:b3:1d:
63:68:48:25:b3:94:4f:7c:b8:c8:06:0a:57:99:e7:5d:93:df:
21:06:e1:3b:a2:fe:e5:64:38:03:33:7d:b9:a5:0f:1a:e3:d5:
fe:11:d5:5f:be:4d:fe:86:79:c4:c3:ef:1a:62:57:fa:e0:9d:
ae:3c:14:3a:ed:2d:1d:40:34:a5:17:62:c0:56:80:81:81:01:
0c:b4:b8:2b:d1:79:ba:4b:2b:5b:63:fe:4c:c7:bb:98:33:d7:
e0:81:bd:34:f4:71:95:7f:b7:a5:f4:f4:66:1c:2c:7b:81:c3:
c9:65:e0:19:de:be:27:4f:84:ca:94:e8:6d:3b:9b:8e:3d:be:
06:66:8d:b4:fa:63:f2:f1:15:ad:75:48:2b:62:f1:31:4a:df:
4f:04:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:17 2025 by rpki-client