Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/10P0bMy88DkqDnF3PvY9nmC2O1M.roa
File: 10P0bMy88DkqDnF3PvY9nmC2O1M.roa (raw, json)
Hash identifier: z1uASFf3RP6HkHfunh4ieLOto4QGWqIZauClWljNwT8=
Subject key identifier: D7:43:F4:6C:CC:BC:F0:39:2A:0E:71:77:3E:F6:3D:9E:60:B6:3B:53
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019426D980E1650090F82FC1CDEB9DD579EF
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/10P0bMy88DkqDnF3PvY9nmC2O1M.roa
Signing time: Thu 02 Jan 2025 11:49:36 +0000
ROA not before: Thu 02 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 193.56.174.0/23 maxlen: 24
193.56.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:80:e1:65:00:90:f8:2f:c1:cd:eb:9d:d5:79:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Jan 2 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d743f46cccbcf0392a0e71773ef63d9e60b63b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:02:e5:cf:21:72:53:3b:58:6b:c7:89:a1:
ff:6a:61:b6:35:93:d7:8c:73:1c:02:ee:75:13:9d:
27:1d:3b:1f:e5:02:72:6b:4b:51:e3:fe:ff:5a:e9:
86:9b:17:bb:e8:f0:96:eb:cf:b8:01:1a:48:fd:ee:
56:2e:82:e1:ee:66:a3:52:c8:b0:2a:58:6a:4f:70:
e8:09:10:27:62:64:a9:47:22:a4:a6:a3:e4:2e:a7:
f8:b6:ed:93:6c:e9:ec:f7:7c:43:1c:b0:69:2d:aa:
56:eb:74:d8:33:ff:5a:17:6a:48:92:6b:24:88:7e:
5e:33:46:6a:db:76:09:c8:55:95:bb:c2:76:30:d4:
ed:7d:46:35:39:2d:8b:58:3d:f8:32:da:e3:60:d8:
b5:0f:4e:f9:a6:d6:39:03:ce:7b:a4:2b:41:b4:0f:
2d:ca:7a:75:22:17:af:a5:70:72:ad:b3:42:d9:16:
37:ce:3f:96:e5:18:d2:19:93:b6:59:c9:ef:67:1f:
a8:5f:c7:b8:f6:10:bf:14:45:40:8c:12:c8:9b:2d:
b8:f3:41:66:3d:d6:c1:66:52:73:2b:06:fd:92:8d:
30:98:df:f8:4c:26:10:cb:ee:4e:46:c4:fe:24:2f:
fe:81:3b:36:cd:ab:fb:d5:7d:83:55:5e:22:80:a3:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:43:F4:6C:CC:BC:F0:39:2A:0E:71:77:3E:F6:3D:9E:60:B6:3B:53
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/10P0bMy88DkqDnF3PvY9nmC2O1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.174.0/23
193.56.194.0/23
Signature Algorithm: sha256WithRSAEncryption
02:d8:57:8a:b6:fd:95:8f:e5:8d:ef:f7:3c:0e:e3:f7:77:95:
8a:97:0e:ab:df:c0:52:7d:7a:5d:c4:a7:60:f6:1d:63:c7:c3:
78:d8:6d:04:b0:2e:29:74:5a:ce:42:2c:09:cd:35:20:d6:ca:
3e:e0:65:ae:c8:42:70:3b:03:6f:9c:a9:3f:02:d9:f4:ee:b7:
dd:0e:07:a4:70:28:4c:36:72:ce:df:db:f4:54:74:57:c2:29:
c7:56:73:ae:6b:45:59:ea:b1:ef:78:bc:07:ee:f6:48:c2:2c:
6b:68:ae:f2:48:6f:62:d5:f2:df:e9:f5:4b:45:31:1e:5e:f9:
53:3a:ee:62:2c:d9:4f:b6:27:84:f0:0d:9f:2b:8b:fc:f3:db:
90:65:19:22:b6:9d:6e:b7:19:4e:9a:95:c3:6f:48:82:ca:2b:
6b:54:f7:f7:1c:1c:dc:c4:a1:25:e0:2e:60:82:8e:1b:fc:3c:
b4:b7:70:e9:d9:18:8d:bf:b5:7c:7e:f0:c4:f2:40:3c:57:63:
7d:11:78:54:e1:7a:39:d4:6a:1c:e8:43:90:48:e9:ce:2e:54:
16:44:84:57:40:39:39:02:e8:ab:59:cf:1d:84:d0:c5:d4:ef:
cf:d9:15:7d:3e:d3:29:ee:0e:71:34:de:a3:87:48:aa:a3:c3:
2f:08:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:59 2025 by rpki-client