Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/vP2xgKPjxexBd9elzajYP9djzSw.roa
File: vP2xgKPjxexBd9elzajYP9djzSw.roa (raw, json)
Hash identifier: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=
Subject key identifier: BC:FD:B1:80:A3:E3:C5:EC:41:77:D7:A5:CD:A8:D8:3F:D7:63:CD:2C
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0194206834A07FE76B1226CFD07CA8DD3B89
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/vP2xgKPjxexBd9elzajYP9djzSw.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210421
IP address blocks: 193.26.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:34:a0:7f:e7:6b:12:26:cf:d0:7c:a8:dd:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcfdb180a3e3c5ec4177d7a5cda8d83fd763cd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:ef:f9:69:97:f0:22:ed:41:27:b5:8f:5a:
02:2e:63:04:a4:1f:1a:b2:c6:df:d7:3c:37:90:4b:
ac:9e:ef:20:6f:89:b7:2a:cf:fb:49:3f:a5:41:e6:
46:5c:43:2d:f2:69:c6:02:51:fe:8e:45:1c:b0:0a:
4a:98:f2:b8:25:47:c4:1e:e4:92:5c:05:fb:54:f7:
bf:2f:b3:75:52:5e:44:ad:37:9b:69:ca:29:89:42:
3e:7f:06:fd:52:26:d4:fe:92:96:87:a3:ba:31:eb:
19:bd:27:ff:60:ef:fa:b6:7e:8e:de:ef:ac:0a:39:
5a:cb:b4:dd:fa:45:a0:32:77:a7:2b:8e:5f:33:cb:
d9:ab:92:62:ca:ac:b0:89:42:73:f1:3d:ff:07:e1:
f0:0d:a2:6c:4b:8f:3f:96:9a:3a:2c:2a:69:31:5b:
0e:f8:60:9d:e7:dc:00:ec:fe:f4:74:b5:2e:18:7f:
4e:22:05:78:79:90:0e:3a:6d:00:16:db:10:71:27:
86:b0:e6:9c:f5:d3:c5:7e:a2:28:4a:b1:1e:7a:66:
2d:4f:f9:5a:82:a7:11:3a:4d:ad:8f:b0:e1:7b:f2:
f8:70:e9:3d:8d:b4:02:dc:4b:d2:1f:3f:84:61:ae:
98:fd:be:ff:4c:97:d9:a3:e7:84:87:67:13:9d:1e:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:B1:80:A3:E3:C5:EC:41:77:D7:A5:CD:A8:D8:3F:D7:63:CD:2C
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/vP2xgKPjxexBd9elzajYP9djzSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:19:71:77:a4:81:32:95:d8:55:d3:76:c2:ce:ae:f5:8e:a2:
11:5b:39:96:20:20:fa:f4:f2:99:69:f2:52:94:63:2c:7b:2b:
8c:62:76:6e:cf:26:97:1f:a4:42:c2:fb:f0:d3:93:c9:8a:1c:
71:cc:fe:62:e0:83:6d:e0:57:7b:ab:d9:36:e9:e5:99:26:e3:
6b:99:af:94:ae:9a:79:81:95:05:f5:1b:b3:13:3c:73:a9:ae:
7f:83:75:95:99:68:e2:76:b4:e6:84:0c:58:95:22:8d:fa:9d:
32:25:8e:2c:7f:26:85:c8:64:de:78:54:b8:d9:45:45:20:55:
f9:34:0e:7c:3a:64:60:bf:c3:75:a3:f2:7c:2d:be:2a:37:40:
eb:d7:a0:2c:d0:a1:a4:1c:b2:0e:12:fb:cf:25:27:58:8b:a5:
a2:ec:70:ca:36:82:b4:63:26:75:19:04:06:6c:73:fd:ba:5f:
82:8a:11:3f:86:48:75:d6:31:87:f7:f7:e7:50:26:79:10:58:
4b:45:c1:eb:c4:42:ae:ab:53:d3:7f:f6:3e:0a:7f:7d:34:00:
8c:9a:26:fb:84:5b:23:e3:31:9d:91:ac:54:66:aa:2a:7a:19:
d0:14:53:28:10:94:00:c7:69:64:ba:1d:c8:c9:34:b6:54:4a:
36:d6:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:02 2025 by rpki-client