Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/BqUsGxJbAHaodSor8dzxhiBDYnY.roa
File: BqUsGxJbAHaodSor8dzxhiBDYnY.roa (raw, json)
Hash identifier: UcdL5oWXT3jVU2069PpqlnxiDKWvKcXri93cb+kI6qY=
Subject key identifier: 06:A5:2C:1B:12:5B:00:76:A8:75:2A:2B:F1:DC:F1:86:20:43:62:76
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3EEA483E53447EDD295FC5E498DAB
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/BqUsGxJbAHaodSor8dzxhiBDYnY.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212326
IP address blocks: 193.38.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ee:a4:83:e5:34:47:ed:d2:95:fc:5e:49:8d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06a52c1b125b0076a8752a2bf1dcf18620436276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:6e:17:53:8e:d0:f4:99:28:d5:55:88:a1:
b1:4a:51:91:3b:bd:c5:35:4b:ba:07:7a:9e:d0:e9:
d8:ca:07:59:6d:50:9c:7c:05:a1:b0:b6:b0:db:46:
55:72:f8:56:f1:f6:5d:ed:cf:5e:24:7e:7c:2f:08:
1b:52:4a:a1:5a:b3:8a:f4:dc:76:dd:a7:a0:d5:b7:
7f:68:78:e5:e3:0a:4c:05:d6:79:f7:2e:cb:d8:59:
a8:54:07:a2:54:22:e3:f4:7c:21:84:c4:12:7e:71:
56:22:68:d3:b1:96:02:17:60:11:20:18:4d:fa:6b:
4e:81:92:4d:cc:75:b9:84:ad:e7:9a:55:a1:8b:e0:
75:0c:e6:17:b5:47:ed:ee:9f:ce:f1:98:d2:8b:12:
62:fe:e4:73:1e:cc:05:ee:ee:80:c0:51:3f:02:25:
a9:61:d3:c4:7e:fa:92:a4:c4:a7:85:e6:b6:18:7f:
38:95:7a:da:66:94:03:9b:99:77:da:02:c8:cb:cb:
89:20:e7:0b:fb:4c:d7:b4:9f:e3:82:4b:36:50:86:
b6:69:d9:dd:dd:e7:63:45:40:91:04:3d:24:63:ba:
68:01:8f:dd:c0:04:c6:5f:3b:5c:e5:90:c0:49:02:
cb:11:d3:13:08:a8:85:ed:5b:96:28:bf:1b:db:39:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:2C:1B:12:5B:00:76:A8:75:2A:2B:F1:DC:F1:86:20:43:62:76
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/BqUsGxJbAHaodSor8dzxhiBDYnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.253.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f8:d8:2b:b5:fc:01:1a:c2:c2:e7:3a:b8:c0:67:cc:40:4c:
cb:08:fa:db:03:ff:62:31:6a:df:8e:41:60:ca:6f:05:2f:1d:
6d:2b:4b:73:d2:12:ea:0b:84:04:c8:02:4c:f3:13:10:46:a8:
01:c9:75:7f:28:3f:cf:26:6a:6f:69:6e:02:bb:4a:7a:6b:62:
93:20:a5:62:d7:12:f5:98:18:32:53:1a:ad:14:e6:3c:03:14:
c7:96:a2:d7:cc:35:25:be:ac:73:70:0c:0e:ed:be:2f:d4:0d:
d6:fe:7b:df:94:c0:b5:68:ec:1b:42:00:3f:67:ad:b8:fc:88:
32:07:3e:79:d2:cf:2f:2c:61:bc:6d:4e:7e:4f:f8:8d:ec:73:
28:42:f6:74:19:76:bc:2f:29:dc:30:d9:ff:b1:57:c9:94:21:
98:77:4b:d6:12:74:4f:26:e1:e8:a8:8f:00:2d:8a:bb:39:a9:
01:36:d6:25:04:62:6e:b3:7e:37:18:84:7d:b8:30:c5:9d:e8:
d6:1d:9d:c2:3b:59:7b:75:47:1f:7e:d4:fb:54:3e:fe:7c:a4:
97:94:43:1b:43:6a:06:cd:c7:6f:aa:8e:90:1e:3b:dd:c4:37:
8a:45:c0:af:cf:d9:35:73:0c:0d:03:ce:3f:11:f2:ec:f1:53:
cb:61:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:18 2025 by rpki-client