Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa
File: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (raw, json)
Hash identifier: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=
Subject key identifier: 06:A1:DB:FF:3A:A7:30:CD:DD:22:00:45:FC:14:DF:81:56:39:6B:99
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 019422FBAE2C5557143CA8C3D1B9E0016711
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 193.161.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ae:2c:55:57:14:3c:a8:c3:d1:b9:e0:01:67:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06a1dbff3aa730cddd220045fc14df8156396b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:e1:ef:3f:27:c2:a2:46:8f:91:66:0e:e0:
d8:02:ee:be:cb:c5:8f:1a:57:65:59:37:af:5c:57:
0f:aa:c8:32:0c:83:7b:f0:48:ff:03:c2:20:e2:e1:
60:0f:8e:99:94:b2:0b:2e:a9:a7:31:71:55:66:d8:
c3:05:22:12:45:4d:99:69:d3:01:cd:c6:01:f8:27:
74:30:8d:31:62:79:ac:38:ad:7d:1b:d6:78:2c:e4:
d0:84:2f:cc:e2:99:63:0f:82:77:3e:9c:67:46:4d:
6a:d6:3e:2d:61:53:ee:9f:4c:d1:b0:8d:54:95:5e:
80:fd:01:ec:07:2c:d6:82:7d:ad:62:23:61:f1:26:
6b:49:19:69:f1:fd:25:86:40:56:75:fc:f6:f5:c5:
70:26:2a:01:c5:43:ba:f0:23:fb:97:0c:8c:1a:31:
26:42:a9:ea:eb:72:27:12:b8:19:78:2e:56:36:7a:
e8:6f:da:e8:b9:5f:a8:6b:81:b4:86:c5:e2:62:fd:
4b:63:07:63:0e:a0:35:82:47:9b:d5:b3:d1:ce:29:
d1:19:3a:7a:0f:ee:d2:02:89:4c:41:ec:f5:5d:89:
83:e3:47:70:12:7d:fc:f7:35:07:d7:b1:1b:09:d5:
90:03:91:df:cc:5f:64:15:7a:4f:df:13:f1:11:23:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A1:DB:FF:3A:A7:30:CD:DD:22:00:45:FC:14:DF:81:56:39:6B:99
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:f4:08:89:95:a3:96:94:c0:5b:b2:2b:15:40:e0:ae:0e:fb:
b2:d8:23:82:40:37:24:2c:5a:0b:3e:11:f0:1e:60:60:3b:b2:
90:80:52:a5:c7:9f:c7:c6:70:7b:bf:69:54:c5:e8:63:24:64:
46:a8:82:c0:63:dc:37:e9:d1:e6:a7:35:0d:f7:34:8b:d2:eb:
e7:58:66:68:bf:9f:5d:de:c5:fe:6c:63:de:c8:b4:fa:bb:20:
f2:53:ce:ec:bb:b8:8f:72:be:e0:55:1d:61:37:89:5a:15:93:
ef:99:02:e9:9e:b7:02:0c:6e:9f:18:5a:56:74:6e:ea:4e:d3:
2d:15:e4:b9:48:c5:70:69:9c:da:0e:2a:c8:ef:d7:22:23:88:
fe:4c:e0:f5:04:c4:fa:20:19:12:95:69:03:81:ce:1d:aa:47:
9c:03:d4:89:2f:73:dc:4f:74:9b:b6:6a:15:50:65:98:90:b0:
bc:1d:7d:de:a3:fc:f6:21:72:10:a2:b7:e3:9b:d0:e3:50:09:
dd:9d:49:ed:7b:2d:73:df:1a:d7:79:83:b9:e1:a4:de:fa:8e:
32:1c:53:4b:ef:d4:f8:98:e8:39:32:be:7c:3b:f4:4d:ea:1b:
38:37:cd:ac:d9:12:7e:58:9b:9c:8d:fb:78:93:de:9b:b5:f0:
fa:82:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:58 2025 by rpki-client