Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10034d-3f6a-43e3-8799-9a0a4943daa4/1/AR1bImffp3DqZfE0IsHuYTX14Vw.roa
File: AR1bImffp3DqZfE0IsHuYTX14Vw.roa (raw, json)
Hash identifier: +R/Sf7q/E5O23ePKj4eSQ6mpMbsoHbH+mrOAStM+U6c=
Subject key identifier: 01:1D:5B:22:67:DF:A7:70:EA:65:F1:34:22:C1:EE:61:35:F5:E1:5C
Certificate issuer: /CN=6e1a4b94a2e8c9b25ddc8c60ab254ab8190fb785
Certificate serial: 0185729EF024555CBFCFB94863D04D93C428
Authority key identifier: 6E:1A:4B:94:A2:E8:C9:B2:5D:DC:8C:60:AB:25:4A:B8:19:0F:B7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhpLlKLoybJd3IxgqyVKuBkPt4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10034d-3f6a-43e3-8799-9a0a4943daa4/1/AR1bImffp3DqZfE0IsHuYTX14Vw.roa
Signing time: Mon 02 Jan 2023 13:14:56 +0000
ROA not before: Mon 02 Jan 2023 13:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 193.201.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:f0:24:55:5c:bf:cf:b9:48:63:d0:4d:93:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1a4b94a2e8c9b25ddc8c60ab254ab8190fb785
Validity
Not Before: Jan 2 13:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=011d5b2267dfa770ea65f13422c1ee6135f5e15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:5c:cb:ed:db:93:ea:4e:67:33:8b:c1:70:
7f:9e:b4:6f:df:e3:94:c5:92:fc:ca:b9:91:ff:c6:
6d:fb:fa:3e:b4:0a:62:90:70:2d:4f:94:0b:6b:d6:
f1:81:1d:1e:55:75:46:12:4c:96:f7:df:55:1a:57:
6b:69:ad:83:4b:25:35:28:c5:3e:fe:7f:35:28:55:
af:99:1d:18:5a:4e:46:af:f7:75:04:13:78:91:b3:
ea:1a:be:d5:06:8c:98:9d:3c:60:05:20:49:c7:a9:
41:c1:bf:44:65:e3:8c:be:24:7d:79:9c:cf:06:66:
92:a8:91:f7:50:f6:97:0d:c0:d7:77:60:8d:f9:0b:
e4:1c:a4:5f:e3:18:81:bf:18:16:f1:53:23:1f:e8:
ff:a7:99:52:91:24:fd:02:59:55:c3:80:d1:0f:d9:
f7:f7:0f:a8:83:70:70:3b:54:25:f2:ba:2c:6c:50:
8f:27:88:32:5f:6a:9a:10:f3:67:9d:38:7a:14:7c:
9c:66:7a:ba:c4:c0:9e:a6:f7:2c:f9:73:14:9f:e3:
0e:72:e6:db:62:c6:be:0b:ca:f0:e6:de:ab:1a:65:
67:ce:f5:3d:11:ba:cc:69:c5:4a:c9:b6:1d:8c:00:
28:12:7d:22:ed:8a:7a:27:a7:41:ed:40:52:7e:b9:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:5B:22:67:DF:A7:70:EA:65:F1:34:22:C1:EE:61:35:F5:E1:5C
X509v3 Authority Key Identifier:
keyid:6E:1A:4B:94:A2:E8:C9:B2:5D:DC:8C:60:AB:25:4A:B8:19:0F:B7:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhpLlKLoybJd3IxgqyVKuBkPt4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10034d-3f6a-43e3-8799-9a0a4943daa4/1/AR1bImffp3DqZfE0IsHuYTX14Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10034d-3f6a-43e3-8799-9a0a4943daa4/1/bhpLlKLoybJd3IxgqyVKuBkPt4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.8.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:47:c1:2d:d6:0e:91:59:a4:54:eb:fa:74:53:64:09:60:d1:
25:f5:24:1d:c4:78:21:4a:75:f6:12:a2:db:01:fa:d8:66:c3:
1f:89:45:07:c9:1a:d0:a0:a6:a4:9c:ee:57:39:14:4f:e9:95:
46:72:43:47:70:33:c5:81:f8:57:7b:ad:5f:01:6f:e8:c2:6e:
f7:58:17:0c:98:15:43:d5:e5:1a:d6:8a:69:e8:91:f5:ca:16:
89:a3:61:90:ac:04:09:ac:2e:f5:43:90:be:5c:48:04:22:43:
52:28:3e:bf:28:d7:6f:0c:03:92:63:2d:c0:1b:30:0c:2a:b5:
2b:35:07:63:0a:3f:53:ce:42:69:9c:3c:13:c1:44:78:48:d8:
bb:92:6c:f6:48:76:98:c3:7c:68:3d:54:32:b2:7a:99:a8:0a:
b8:04:0f:24:b7:3d:8f:d4:9e:0c:9d:31:3c:30:e4:6b:fd:dc:
9b:de:f9:ea:ee:87:92:42:ea:78:dd:a6:8d:9c:ed:03:fb:52:
cf:03:12:ca:1f:3c:e3:41:e4:72:dd:8e:20:03:a7:10:d6:0a:
8e:fe:5a:6d:6d:35:c2:34:0a:f9:f6:c7:32:f6:6d:36:a3:7e:
86:f5:1b:a0:e7:83:d7:46:2e:f0:0e:07:ec:32:a5:40:50:bf:
0f:17:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:47 2025 by rpki-client