Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa
File: 1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa (raw, json)
Hash identifier: a5qc0h3BhqmeqSpAZh7GFmd10hjtqvPl4/lqfepgblo=
Subject key identifier: F9:BA:17:A8:A6:3F:1F:2A:1E:D7:D6:79:24:86:77:2B:A0:09:8F:DE
Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial: 0194236A340FDD5E1AE0B82EF38C5C6F1701
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.73.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:34:0f:dd:5e:1a:e0:b8:2e:f3:8c:5c:6f:17:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9ba17a8a63f1f2a1ed7d6792486772ba0098fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:9c:6d:ba:3c:1c:c3:9c:bf:a7:98:9e:66:
38:21:c2:7a:a2:a6:54:68:80:15:5a:b6:39:34:9e:
9d:6c:fc:ea:43:50:c1:68:82:e9:fa:da:6f:fd:11:
30:63:01:73:13:f1:ae:d8:28:dd:30:aa:a7:75:81:
0e:17:71:3c:e4:9b:02:b9:d3:8f:e6:c4:07:1c:81:
bb:2c:db:f6:c2:b5:c0:4a:03:a2:97:a5:f0:c3:f0:
ba:33:3d:4e:3c:79:6a:bc:37:1f:26:7f:db:ec:72:
50:62:d2:1b:9d:ae:0e:b1:54:98:78:ea:12:dd:99:
11:d8:10:25:b6:99:d0:3c:48:29:5c:60:91:9e:aa:
17:a9:a2:b8:af:fc:86:c1:ff:96:30:a0:80:4a:94:
15:3c:58:47:e7:4b:62:e2:c2:0a:ac:be:88:cb:66:
cb:4f:f1:75:18:00:a1:7f:e2:83:f2:18:de:1f:50:
d6:51:bd:a8:af:d4:7a:b9:18:fe:06:f8:79:d1:5c:
6d:ab:c1:e2:22:3f:b8:8c:c2:04:e1:3b:29:51:52:
17:82:c8:bf:c5:e7:b4:1c:1f:2a:0f:56:88:5e:55:
33:c8:71:ce:e9:a0:42:74:99:7e:75:29:50:c8:86:
27:ec:94:aa:8b:ba:74:7d:0d:58:6b:ed:f1:ee:de:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BA:17:A8:A6:3F:1F:2A:1E:D7:D6:79:24:86:77:2B:A0:09:8F:DE
X509v3 Authority Key Identifier:
keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.242.0/23
Signature Algorithm: sha256WithRSAEncryption
63:43:0b:54:82:f5:37:59:dd:af:37:d4:8b:09:c6:aa:51:dc:
cd:ce:a6:d4:5f:a9:66:5c:98:35:23:7a:e1:d0:2b:85:f9:12:
bc:c4:b0:b8:55:e7:f2:f2:bd:c2:28:ed:38:55:25:24:7e:aa:
a9:2e:00:b9:1b:0b:29:5e:66:20:3a:30:2e:84:3f:2b:1b:8e:
2d:21:c0:c9:89:e8:d6:a7:10:10:80:68:9d:8b:59:fe:ee:96:
7f:8b:5c:86:cc:d0:8a:f6:9b:50:30:ae:24:fa:17:5a:e0:e9:
78:ea:ad:5a:30:3e:fe:ad:70:12:c7:7b:bd:4c:4e:49:97:d5:
a4:c8:03:78:6e:11:08:ac:67:14:54:c8:a2:ed:09:c3:fc:78:
23:d8:1d:b4:fd:de:66:17:16:4c:7b:03:ee:c6:45:7f:a9:0d:
53:06:c7:db:80:7e:2c:fb:f4:d8:62:fa:ab:fb:46:15:5d:e7:
91:f9:39:a6:9b:91:82:49:95:0e:4c:14:2b:3f:f1:36:eb:31:
a0:af:91:51:cb:89:28:32:6d:26:56:bc:fe:ae:c6:8c:bc:52:
49:ad:75:01:43:2c:cb:2c:5e:b2:7c:17:d5:ff:e9:66:8d:c9:
87:da:45:b0:8d:91:ed:00:c2:5d:d1:f1:e2:5e:8a:fc:c8:21:
b9:ab:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:33:47 2025 by rpki-client