Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa
File: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (raw, json)
Hash identifier: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=
Subject key identifier: 02:B4:7F:A9:DA:AA:C3:2F:09:27:87:7D:71:32:5A:77:31:E4:EE:CD
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 01942444EA7AE945B08F39988227728B2E27
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa
Signing time: Wed 01 Jan 2025 23:48:03 +0000
ROA not before: Wed 01 Jan 2025 23:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202328
IP address blocks: 193.56.220.0/22 maxlen: 22
193.56.220.0/24 maxlen: 24
193.56.221.0/24 maxlen: 24
193.56.222.0/24 maxlen: 24
193.56.223.0/24 maxlen: 24
2a0c:9040::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ea:7a:e9:45:b0:8f:39:98:82:27:72:8b:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Jan 1 23:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b47fa9daaac32f0927877d71325a7731e4eecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:ad:28:26:06:cd:21:fa:33:de:e0:0c:6f:
20:58:ff:96:20:49:ec:83:6d:e3:6b:13:35:a6:04:
04:75:11:73:9e:fe:98:37:06:99:1a:cf:ba:ee:5b:
7c:62:fd:3c:77:0e:77:15:00:d6:dc:7d:81:21:11:
57:3b:a0:dd:35:ac:6c:3d:4e:6d:f2:d0:cb:88:31:
57:ff:7e:46:e6:84:8e:a3:3b:e3:f0:bc:fd:d2:c8:
6e:51:cb:db:37:47:42:1a:6d:6b:a9:53:f5:8b:d7:
1c:57:a0:69:29:c5:34:5e:e0:ea:59:d8:e3:d2:47:
b9:4a:b2:40:6e:41:99:6a:53:41:59:4a:4b:3c:16:
95:09:5d:2d:32:57:00:ce:e5:c8:16:11:f5:ba:7f:
bb:0f:6e:cf:a8:4b:30:79:83:3c:6c:50:24:b6:02:
78:3d:94:6b:0f:52:34:87:73:87:b7:59:a7:e8:81:
8f:46:06:20:e6:ff:ed:e9:67:d1:83:46:1e:58:02:
5c:73:eb:d2:1d:fd:00:0c:98:e0:b7:e3:9d:56:09:
7a:34:5d:81:a7:08:97:26:63:06:15:84:f1:1d:aa:
ac:91:f8:83:5f:a2:04:f8:fa:eb:ff:f9:01:0b:42:
72:30:b0:57:b8:91:b7:3a:0c:39:99:d5:de:bb:63:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:7F:A9:DA:AA:C3:2F:09:27:87:7D:71:32:5A:77:31:E4:EE:CD
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.220.0/22
IPv6:
2a0c:9040::/30
Signature Algorithm: sha256WithRSAEncryption
43:13:65:56:14:31:60:f7:29:09:bf:2b:19:ac:78:79:d8:c6:
02:83:2f:ae:c6:ab:76:eb:93:63:3c:9d:bd:d4:37:28:aa:6c:
1f:68:61:95:df:62:dd:74:a0:be:42:f2:50:a1:af:4d:2b:ae:
ad:76:c1:b5:20:23:2e:9a:5f:af:b0:2a:97:e0:a6:b2:60:39:
be:df:20:ff:b5:4b:b5:e7:fd:80:83:c5:87:a6:9f:0f:10:a7:
2b:88:c3:63:be:2d:08:28:41:a7:68:7a:87:21:b5:22:ba:a6:
96:ab:b2:da:d2:9b:50:97:db:be:c7:5e:e7:14:8f:82:58:65:
4b:3d:0c:ea:b5:4c:42:99:03:39:fd:21:09:76:bd:d8:96:96:
75:10:f0:6c:82:c6:81:e4:e9:c3:38:b7:8c:62:67:b4:24:02:
26:5c:28:69:94:64:64:4b:b9:d7:d6:95:2b:ad:11:9f:62:61:
50:c2:e7:69:f6:87:c1:83:18:77:c7:9c:b8:f4:7a:df:03:79:
89:04:ff:fe:92:2c:45:ea:a4:50:6e:4f:30:2f:97:29:fa:46:
12:39:34:22:ae:ea:14:0d:7d:e3:a1:cb:36:0b:cf:96:c9:b5:
b7:9b:0f:a9:3f:d4:bb:dc:60:ee:8e:8c:53:6a:03:11:25:2b:
20:35:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:45 2025 by rpki-client