Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/bHWRpVObU8p2b3J8TH9t9PGMgAc.roa
File: bHWRpVObU8p2b3J8TH9t9PGMgAc.roa (raw, json)
Hash identifier: j4B4wR0b1o2ucwRNZZHw5VaG7PlS7ffh3qU8xGJ/E+8=
Subject key identifier: 6C:75:91:A5:53:9B:53:CA:76:6F:72:7C:4C:7F:6D:F4:F1:8C:80:07
Certificate issuer: /CN=a30e4a07b3949cd59a706601658b7e3ccbbbaa6f
Certificate serial: 018571831BE2B571E3C53C4954D63DB758EE
Authority key identifier: A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/bHWRpVObU8p2b3J8TH9t9PGMgAc.roa
Signing time: Mon 02 Jan 2023 08:04:55 +0000
ROA not before: Mon 02 Jan 2023 08:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 193.111.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:1b:e2:b5:71:e3:c5:3c:49:54:d6:3d:b7:58:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30e4a07b3949cd59a706601658b7e3ccbbbaa6f
Validity
Not Before: Jan 2 08:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c7591a5539b53ca766f727c4c7f6df4f18c8007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:92:0a:e4:06:0a:96:4f:ef:2c:c9:33:ca:
d6:18:0a:01:c0:3b:18:55:03:fe:7b:91:44:17:81:
bc:32:1a:0f:6a:65:7b:33:07:29:ff:0f:e2:bd:5f:
9b:f8:c6:9e:b2:73:09:46:4d:ce:c4:1a:13:74:d8:
c3:cd:f0:39:1e:a4:21:85:45:72:b1:69:9b:9d:b8:
1d:74:83:ff:82:03:3e:e9:c1:46:b7:97:4f:0c:9f:
76:f6:81:14:d7:b8:18:c2:e7:d1:48:dc:bf:86:c7:
ad:9d:e8:54:07:d2:5e:39:ea:a5:5b:a4:1c:f1:06:
fe:3d:3a:61:48:6d:af:ff:21:9b:26:4b:06:aa:9d:
dc:5e:1b:3d:52:68:cf:2e:16:d5:23:7f:8a:0f:f6:
0b:36:5f:65:f0:e6:ba:f9:40:a5:4e:59:39:24:fa:
e8:4f:4b:fe:7f:20:13:34:df:04:0f:53:28:59:d0:
f0:a4:66:35:19:0f:31:30:7b:71:76:15:27:08:6f:
3d:4c:9c:16:76:be:6a:29:d2:6e:45:bc:33:c4:4c:
32:78:91:9e:87:c5:24:39:f9:d5:4c:90:6a:77:87:
70:9a:fc:96:9e:a8:54:a8:24:55:4a:6e:c5:ed:7a:
5a:66:d4:14:74:ed:9d:5a:aa:06:3f:71:26:b2:4d:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:75:91:A5:53:9B:53:CA:76:6F:72:7C:4C:7F:6D:F4:F1:8C:80:07
X509v3 Authority Key Identifier:
keyid:A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/bHWRpVObU8p2b3J8TH9t9PGMgAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:82:8f:a3:2d:0d:28:b9:12:1c:c4:ee:77:c9:fb:fa:0c:84:
c1:20:06:4d:ed:53:18:d1:a5:ba:d9:18:e4:fd:16:e3:b2:74:
69:66:c2:13:f8:54:81:fc:48:70:69:9c:be:2f:87:6a:62:93:
75:f2:7b:0a:99:ca:5c:55:e5:73:57:b7:1b:d5:48:50:76:bf:
14:36:17:3e:1a:54:a8:b1:4c:45:ae:72:fa:fb:84:fb:e6:78:
38:c7:56:06:d1:1b:d5:10:9b:0a:10:6c:63:00:14:17:c4:bd:
5a:b1:b6:25:94:52:0f:67:c9:0c:e7:b7:8a:be:72:e3:23:60:
f6:d4:0e:a7:f5:4b:f9:13:2e:ed:dd:9b:bf:62:a1:33:e1:6d:
aa:48:b0:74:10:62:17:6d:db:e0:46:26:27:29:e9:81:62:ad:
d0:5e:bc:25:04:e9:1b:c0:53:28:32:a7:a4:3c:27:73:78:66:
27:0d:c6:c0:55:a4:d8:30:a0:12:a3:c8:56:aa:22:b2:14:a9:
89:f8:96:61:56:81:c2:15:bb:16:76:ef:95:02:0e:d1:02:d0:
5b:96:42:90:13:d1:6e:11:d1:32:b2:85:f1:2b:c7:76:3a:ce:
15:bc:49:5f:dc:b0:c3:4c:d5:08:c4:91:f7:2c:bb:6b:83:ed:
bb:ea:59:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:58 2025 by rpki-client