Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/u2KSOkA9Tk7vaFv7OCby2G46AIs.roa
File: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (raw, json)
Hash identifier: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=
Subject key identifier: BB:62:92:3A:40:3D:4E:4E:EF:68:5B:FB:38:26:F2:D8:6E:3A:00:8B
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 01941F8CA10674BC7623803B4B4C40E76228
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/u2KSOkA9Tk7vaFv7OCby2G46AIs.roa
Signing time: Wed 01 Jan 2025 01:48:17 +0000
ROA not before: Wed 01 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12886
IP address blocks: 193.96.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a1:06:74:bc:76:23:80:3b:4b:4c:40:e7:62:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb62923a403d4e4eef685bfb3826f2d86e3a008b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:89:78:a9:55:fb:cb:63:48:41:05:7e:e0:fc:
63:28:8c:df:25:0f:b8:1a:e3:02:ea:6f:dd:ca:58:
f4:e9:70:65:79:01:35:1e:c0:75:5c:ac:94:7e:05:
5f:bf:d4:12:46:88:9d:4a:50:f1:5b:69:98:4d:99:
d2:d4:d4:2d:91:33:5f:d5:ea:e0:78:c1:8f:d7:f7:
96:95:60:f2:15:e6:8a:b6:c6:5e:11:1d:7a:dc:f8:
a7:b4:c3:64:4a:1f:85:05:9a:71:66:a7:67:16:c6:
d0:5a:64:67:10:17:9b:e6:00:51:6b:89:ee:c3:b3:
13:36:ac:78:9c:55:2a:cb:3b:3b:c2:a9:48:42:4f:
c3:7a:97:2d:fe:77:33:3f:a3:0b:29:7a:df:f6:66:
7e:81:15:89:d8:68:4a:2f:8a:f6:12:5d:56:e7:90:
02:0e:20:17:6f:7c:17:41:5d:e5:c3:6f:51:17:93:
86:78:2f:8e:1f:3b:99:85:93:6c:10:da:07:d5:68:
55:67:ce:1b:0c:89:65:e4:0b:d6:e1:e1:2f:99:74:
4b:ba:0f:74:0e:af:f3:09:20:de:64:e7:aa:36:6e:
f4:32:8c:c2:49:c9:0b:e6:d8:a9:8a:c2:05:b9:43:
c3:09:92:5c:5a:1a:f0:79:bb:df:d8:b0:f6:04:c2:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:62:92:3A:40:3D:4E:4E:EF:68:5B:FB:38:26:F2:D8:6E:3A:00:8B
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/u2KSOkA9Tk7vaFv7OCby2G46AIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ec:1a:25:33:5f:37:ee:d1:5f:f5:80:d9:5e:5a:ed:bf:f6:
1b:76:60:b7:7a:20:9d:8c:3c:c0:32:f3:4f:bd:e7:a9:88:fc:
71:11:46:81:ae:e9:68:fd:8b:a8:c4:8e:76:90:f9:d4:fc:a1:
6d:62:4b:66:b8:02:12:e8:22:d2:fc:4b:48:6d:b4:0a:d2:3c:
69:4a:f7:bd:6e:d3:35:e7:9a:3f:13:c0:f2:10:df:13:d1:a9:
ad:e8:c5:0b:7a:74:18:3c:02:04:6f:b3:09:13:04:0e:1f:b5:
24:8c:02:0f:41:70:9d:53:7f:df:91:32:b4:c3:9f:6a:ec:04:
17:e2:96:7e:51:f1:b8:02:61:5d:a6:eb:d8:16:20:f9:22:7a:
42:06:1f:9c:88:12:e3:75:b4:0d:c1:6a:30:b2:ea:05:1e:2e:
e7:48:81:28:4a:80:6b:89:74:5c:80:85:cc:20:29:16:fb:90:
52:47:73:d8:05:cf:59:36:98:ad:af:1a:45:40:34:25:07:45:
cf:1e:3e:f2:30:77:73:0b:92:79:5c:6f:51:16:37:ab:59:a2:
bf:c2:62:95:ad:ad:c4:52:87:8c:0e:d6:4c:d6:d3:4d:9c:57:
46:ef:ab:ee:08:c4:31:56:24:80:e2:5f:43:7d:72:38:dd:72:
70:a6:6d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:10:49 2025 by rpki-client