Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/b1dkMuscA36O0Qm_BgPxorZ-3GY.roa
File: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (raw, json)
Hash identifier: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=
Subject key identifier: 6F:57:64:32:EB:1C:03:7E:8E:D1:09:BF:06:03:F1:A2:B6:7E:DC:66
Certificate issuer: /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial: 01941FFA5C2F02B3E0BE5692DD135B46A924
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/b1dkMuscA36O0Qm_BgPxorZ-3GY.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56485
IP address blocks: 193.104.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5c:2f:02:b3:e0:be:56:92:dd:13:5b:46:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f576432eb1c037e8ed109bf0603f1a2b67edc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:71:19:26:6b:2a:43:0d:37:c3:4c:e0:33:
79:1e:b3:20:c5:74:04:14:c7:2d:7d:05:54:44:28:
5c:18:0c:8f:f8:64:25:30:b3:f8:30:6c:5d:66:6e:
e7:af:58:f5:28:0d:c5:c4:a9:a4:b3:f4:f2:0c:06:
98:9e:8f:36:b9:14:04:23:3c:22:2a:9a:6b:88:01:
da:ff:ab:1d:48:de:2f:86:e6:10:fb:8c:59:b8:d6:
6d:24:92:89:e6:f8:09:3f:49:8b:12:68:3e:86:09:
74:fa:5d:f6:e1:f9:59:0a:58:bb:79:22:33:64:c4:
ee:a4:fc:29:77:b0:84:20:0b:4a:3d:15:79:82:a5:
5d:8b:bf:23:cf:fc:fa:42:11:d8:c4:c5:f7:be:fd:
d8:50:be:ca:d0:e3:86:6a:e6:a8:b5:d2:12:33:75:
e6:ba:e9:d6:aa:55:0f:57:c8:db:6e:4f:be:9b:a6:
28:a6:a4:24:42:0d:d8:88:1d:c9:a1:7c:f9:81:b6:
5f:06:b0:da:ab:f0:6a:76:a1:d1:09:9a:d5:1e:a8:
e7:19:e9:07:de:4f:78:f3:16:f4:46:05:e2:aa:92:
2c:93:6f:99:ca:98:25:57:52:1c:3a:ed:de:45:40:
40:50:4e:11:d0:75:02:c1:b1:1b:be:61:57:e0:fe:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:64:32:EB:1C:03:7E:8E:D1:09:BF:06:03:F1:A2:B6:7E:DC:66
X509v3 Authority Key Identifier:
keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/b1dkMuscA36O0Qm_BgPxorZ-3GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.53.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fa:2d:f6:0b:7c:aa:6f:7f:ac:83:3e:20:1a:a5:2a:12:7e:
80:c3:d9:1b:6f:57:3d:2f:11:da:ec:98:90:e3:cb:19:72:27:
e6:96:6b:ad:bc:10:df:43:44:0b:43:c6:09:37:43:68:9d:ad:
ae:da:11:32:cb:c2:fa:96:2e:db:d1:06:38:d4:52:7e:40:62:
b4:41:55:74:2c:81:5f:69:ea:91:54:94:52:7d:ca:37:77:e8:
37:f4:d2:01:58:4b:fa:0b:c3:1d:5f:6f:22:6f:fe:c2:08:32:
ac:1a:95:fd:70:0f:cc:d3:7d:5e:24:25:ee:7c:06:83:18:e8:
62:74:53:a2:1d:4a:f5:89:4f:f5:ac:c4:78:a3:c5:d6:c5:11:
67:a3:94:f1:42:24:82:2a:da:e3:1b:48:d7:bd:53:1e:bf:b6:
65:39:1e:e4:98:cb:08:c0:09:f5:85:d1:fe:4c:5b:53:c4:65:
2a:f6:c0:a8:78:3a:d9:3b:53:88:00:de:db:8f:30:a3:55:6f:
7e:0b:ef:87:30:8c:58:c7:7f:64:9d:3e:c3:55:b0:cb:15:f7:
77:61:c6:c5:04:aa:08:24:e1:bc:67:39:63:8b:0f:be:c1:39:
0a:28:3d:0a:3b:e8:30:16:47:97:ae:7c:44:5b:64:d3:b6:44:
b6:2d:b1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:24 2025 by rpki-client