Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa
File: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (raw, json)
Hash identifier: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=
Subject key identifier: F9:37:51:26:3E:21:D9:19:AE:6C:E7:71:6F:DA:E4:1C:71:BA:6E:17
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019422FB91AC638032965244B97F4DA2753E
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa
Signing time: Wed 01 Jan 2025 17:48:19 +0000
ROA not before: Wed 01 Jan 2025 17:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207983
IP address blocks: 193.33.164.0/24 maxlen: 24
193.33.165.0/24 maxlen: 24
193.33.204.0/24 maxlen: 24
193.33.205.0/24 maxlen: 24
2a0f:640::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:91:ac:63:80:32:96:52:44:b9:7f:4d:a2:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jan 1 17:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f93751263e21d919ae6ce7716fdae41c71ba6e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:9a:35:c7:76:a3:54:b2:de:4b:35:19:18:
17:25:ad:45:91:9d:88:c7:c0:5e:ef:e7:a4:7b:0a:
3b:e6:8f:51:a4:bc:54:52:1f:19:6a:8f:14:72:eb:
6d:c2:2b:af:cb:d7:ae:85:04:9b:16:40:58:64:58:
ec:32:0d:f1:da:e6:9b:93:9f:2e:10:31:c0:9c:bc:
47:9c:3e:58:f8:14:f8:a5:e9:5a:6f:09:4b:e2:f5:
9b:9d:a0:5a:a6:0e:f4:ef:9a:61:c6:b6:0a:e2:2d:
2d:13:93:b9:93:d2:15:c8:82:9a:25:b8:aa:58:99:
a0:36:ab:ff:17:71:34:f8:52:00:2a:85:33:e6:a7:
ad:1d:d3:84:5a:ed:80:de:30:26:50:c1:16:69:17:
7b:17:56:39:8d:06:67:93:be:6f:90:58:30:e0:8d:
2e:86:53:5a:1a:f0:6c:64:99:95:3b:41:3f:0d:2f:
3e:6c:c2:10:43:f0:c3:56:99:62:df:3d:3a:29:2f:
3f:84:f8:f6:9c:93:72:17:9f:cd:49:e1:a0:6c:72:
2d:67:26:cf:53:87:6f:98:ac:83:3b:4c:8e:7d:40:
81:9c:e8:67:8b:c1:07:25:c2:d3:73:68:55:26:68:
b5:8e:33:14:84:77:bc:f7:d5:69:18:0d:e9:c3:3a:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:37:51:26:3E:21:D9:19:AE:6C:E7:71:6F:DA:E4:1C:71:BA:6E:17
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.164.0/23
193.33.204.0/23
IPv6:
2a0f:640::/48
Signature Algorithm: sha256WithRSAEncryption
32:e0:65:6e:cd:87:54:c1:c4:1a:77:da:2f:72:15:3c:cf:fa:
0b:7c:95:c8:a2:2a:64:a9:96:be:da:6c:90:e7:0c:79:57:c1:
30:67:5a:66:07:ec:6e:6c:52:b0:55:d6:01:48:f7:63:b7:c2:
30:a1:ee:6d:f2:92:5c:d8:77:9a:c9:43:92:a0:2c:a4:c4:9e:
6e:2a:82:e2:3b:64:fc:9a:58:ce:a6:d1:b6:43:e5:97:88:43:
e4:15:9c:c3:dd:ed:0d:8a:be:32:ad:75:75:fa:7c:6e:56:eb:
45:a3:58:67:f8:8f:f3:f4:9f:16:69:46:9b:41:2d:f3:f0:4f:
b1:7d:3a:76:da:e7:89:8f:f9:5f:f9:37:9f:cc:d1:7b:91:c5:
8b:55:19:f7:c0:25:85:1b:9b:0e:47:a4:c1:eb:e4:e6:af:b1:
4b:10:d0:ec:a0:76:df:0f:73:6b:09:d0:88:59:14:dd:5a:92:
60:ed:7a:f7:69:a5:15:c4:c7:ce:5f:99:ac:4c:19:20:79:70:
2f:f4:ca:7b:08:ee:b1:2a:19:dd:50:2c:12:5e:e5:ef:25:a7:
a2:40:36:9c:52:90:f5:cf:26:3b:7d:22:39:ac:5f:fe:53:62:
41:ee:8a:9f:04:dd:29:8a:97:82:bf:bd:af:5f:e1:a6:7f:af:
ae:1a:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:12 2025 by rpki-client