Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/_h-pD85oM-4QL5S4Ka5s8okAtQk.roa
File: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (raw, json)
Hash identifier: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=
Subject key identifier: FE:1F:A9:0F:CE:68:33:EE:10:2F:94:B8:29:AE:6C:F2:89:00:B5:09
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 019423D6A7512CE477D0FAAFC4E6640CE506
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/_h-pD85oM-4QL5S4Ka5s8okAtQk.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 193.202.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a7:51:2c:e4:77:d0:fa:af:c4:e6:64:0c:e5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe1fa90fce6833ee102f94b829ae6cf28900b509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:42:6e:bb:27:a0:d0:95:c5:2a:26:77:23:
1c:57:bb:5c:37:3f:17:4b:c9:7e:1a:ba:24:21:cd:
eb:35:2b:62:92:27:a6:24:31:fa:57:33:3b:f9:3e:
4a:3b:61:f1:0a:1a:e6:3c:5f:34:ee:f2:36:99:27:
e6:ab:09:51:de:a9:0e:3a:78:74:62:3d:fc:d1:ad:
43:3f:26:b7:67:e9:02:1a:bc:4d:ce:2b:50:71:30:
98:04:a8:5f:9b:e5:de:09:a8:5f:be:c3:e5:c9:4f:
c4:3d:12:f7:71:37:0d:d7:c6:72:89:23:5d:5d:e4:
82:24:08:f1:de:2c:55:1a:10:92:06:f9:84:6e:72:
c4:a5:26:3a:4f:d8:b6:b4:c6:fe:fa:0f:14:40:b1:
25:4f:b9:ab:25:f2:89:21:fe:7e:0e:7a:5e:c4:28:
6e:01:c4:27:89:a9:d2:f8:b4:ed:5a:28:c0:eb:5b:
95:5a:7c:4e:89:59:62:40:93:77:ee:0b:48:84:72:
e0:47:60:6d:d3:11:23:44:d9:bc:16:15:aa:5a:7a:
0c:df:71:12:4a:f5:0e:d9:ca:9a:34:63:18:96:76:
0c:49:83:28:ff:59:f6:6b:74:04:cb:89:48:c6:63:
22:02:73:33:eb:20:5a:44:a9:c3:52:ba:8d:1e:39:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:A9:0F:CE:68:33:EE:10:2F:94:B8:29:AE:6C:F2:89:00:B5:09
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/_h-pD85oM-4QL5S4Ka5s8okAtQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.96.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:61:69:cc:e7:cc:a9:09:3d:a6:2e:90:85:7d:d6:b7:d5:d6:
34:5f:d2:a7:eb:b3:25:9c:6c:2b:a5:4e:44:68:97:37:8c:34:
f6:f0:7a:ec:1d:50:77:f7:98:6b:cc:8c:81:88:57:e2:76:1e:
9f:ae:d8:3a:f0:06:7a:83:00:ab:e8:37:16:b5:0b:89:88:cd:
69:21:90:23:53:87:d5:29:52:4c:6b:6f:72:e7:42:4c:c2:90:
92:86:91:71:6f:ac:3e:c4:9d:12:d8:ce:1f:ab:41:9d:47:78:
cb:db:bd:b5:0e:be:19:cf:49:11:8d:a1:7f:4b:8b:56:a8:68:
12:b7:76:a2:70:5c:82:1a:d9:40:8d:4f:c7:59:98:b8:c3:c4:
dc:ec:d5:33:bf:c1:8a:0a:cf:93:4a:34:9c:9c:ac:25:fe:db:
6f:94:bd:d7:5c:69:6f:8f:c7:77:c0:8e:cd:fb:ae:07:45:8f:
22:17:bf:4a:d9:e2:99:b1:81:50:5b:bb:aa:b9:91:31:2d:98:
85:a4:92:ef:4a:48:84:37:62:f9:eb:95:a2:5a:10:cd:1c:45:
be:62:7b:dc:67:b0:b4:2d:12:29:ec:66:1b:05:2f:78:d3:71:
d5:ff:5c:74:33:59:f0:b4:ce:f1:61:e9:f5:3e:f9:91:89:38:
6a:b2:ba:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:12 2025 by rpki-client