Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa
File: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (raw, json)
Hash identifier: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=
Subject key identifier: 06:4F:33:62:54:8A:A8:B6:15:B0:63:07:DD:81:2F:1E:72:D2:B0:45
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019427B3BA72A3033865D8BD1A8FB871244B
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa
Signing time: Thu 02 Jan 2025 15:47:57 +0000
ROA not before: Thu 02 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42346
IP address blocks: 193.108.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ba:72:a3:03:38:65:d8:bd:1a:8f:b8:71:24:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jan 2 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=064f3362548aa8b615b06307dd812f1e72d2b045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:86:01:cc:49:85:a7:b9:05:5e:d9:6e:c6:
87:73:92:c2:c9:43:3e:96:bb:ef:3f:4d:1a:24:4f:
9c:26:8e:8a:72:b7:e6:d9:76:89:0a:06:05:3c:7a:
8f:22:93:17:7b:8f:b6:85:34:db:51:8d:3e:4b:74:
81:37:8b:0e:b6:b9:b3:b6:0b:b4:7b:89:98:4e:09:
6f:81:d5:4f:e4:2b:34:2b:ca:f1:c2:28:cb:af:97:
3a:47:f4:95:be:0c:2f:bc:28:b2:ed:8b:21:fb:4e:
a8:13:ed:77:71:30:75:1e:fe:9d:15:6c:3e:c6:ae:
ef:8e:45:43:2d:66:b5:df:9d:06:80:0a:53:82:68:
7c:38:0a:cd:9b:23:74:fa:bc:a4:d2:84:9b:25:32:
d1:07:62:89:b0:78:90:60:e7:06:3b:8e:3b:b1:93:
e2:5a:2a:3d:98:e8:21:1a:fe:7a:12:11:dc:00:d4:
23:e3:af:3a:e0:7d:a4:84:85:3f:e6:d6:42:04:08:
8c:42:06:91:aa:2e:90:b5:aa:47:cb:a7:b7:37:e5:
3d:20:77:91:f1:a6:ab:05:29:20:25:0e:89:3d:15:
cf:b8:28:ad:f9:4b:5e:d5:81:93:34:df:a0:fe:96:
9a:6b:02:1a:fe:2d:20:1c:2a:10:6b:0b:d3:8c:76:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:33:62:54:8A:A8:B6:15:B0:63:07:DD:81:2F:1E:72:D2:B0:45
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.136.0/23
Signature Algorithm: sha256WithRSAEncryption
55:bf:c4:b4:5f:95:98:32:c6:1e:48:fa:68:19:6a:72:a4:2c:
09:84:e7:dd:b2:1b:4f:a1:58:8c:af:a7:60:25:d5:a0:c5:d6:
68:0f:70:21:69:52:36:56:9a:2d:81:01:61:da:bb:b6:1e:54:
40:ec:d7:9e:89:8c:44:cf:f5:03:11:5b:07:ce:79:fc:44:f6:
4b:68:fe:32:1a:56:ae:4f:9e:c6:32:29:bf:3b:18:f0:19:12:
b3:43:ab:ea:57:2d:f6:6d:03:de:ec:85:a5:06:f4:e5:74:09:
0b:30:8c:03:b4:a6:b0:ee:cf:98:19:c9:86:fa:6e:14:24:15:
0f:97:55:66:c1:7e:2a:f4:c4:c9:4e:7f:70:a9:b3:2b:3a:dd:
bd:fe:48:7e:a9:61:e4:13:1e:96:bf:f1:8d:d2:74:f6:62:bc:
50:4d:87:d5:97:8e:1a:97:9a:6f:a9:48:c3:86:1e:4a:1a:bb:
a1:c9:03:0f:77:f7:85:54:ff:36:5f:56:52:9c:6a:c0:00:aa:
41:9b:71:02:56:ee:b0:3d:cd:c3:10:0e:e6:60:1b:ca:e5:f6:
86:d0:69:e9:14:b2:64:d1:fa:61:8e:ff:44:06:0e:85:3c:4f:
6c:27:71:6a:e7:ba:1b:59:63:03:b4:6b:d8:5b:11:38:14:04:
9f:b9:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:17 2025 by rpki-client