Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/04B5kFR_t_P2nEjasNBAT7tnJqs.roa
File: 04B5kFR_t_P2nEjasNBAT7tnJqs.roa (raw, json)
Hash identifier: CDtvY+ltwTJd4nat+qn/VGqFVOYiDg8maqZV5Y1Ghm0=
Subject key identifier: D3:80:79:90:54:7F:B7:F3:F6:9C:48:DA:B0:D0:40:4F:BB:67:26:AB
Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial: 019425FC338CFC2BAB93A562E0F29CC36C2D
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/04B5kFR_t_P2nEjasNBAT7tnJqs.roa
Signing time: Thu 02 Jan 2025 07:47:52 +0000
ROA not before: Thu 02 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49121
IP address blocks: 193.200.243.0/24 maxlen: 24
2a06:18c0:1::/48 maxlen: 48
2a06:18c0:2::/48 maxlen: 48
2a06:18c0:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:33:8c:fc:2b:ab:93:a5:62:e0:f2:9c:c3:6c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Validity
Not Before: Jan 2 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3807990547fb7f3f69c48dab0d0404fbb6726ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:45:1b:a8:b3:63:40:87:09:55:0d:c6:ad:
91:ed:21:df:06:82:a5:3d:42:86:dd:93:bb:f6:30:
ea:cd:29:ef:df:52:f7:ba:a3:e8:b9:32:87:ac:db:
3d:c7:de:ce:09:c7:56:9f:25:1f:2f:a6:d7:97:c7:
73:e7:eb:eb:34:f6:12:04:bb:5d:44:50:36:76:da:
3f:82:6f:c8:70:bd:ed:0b:74:94:29:36:e7:68:fd:
7f:c8:11:e5:5b:ef:c9:7b:30:a9:b1:c7:1b:5c:e5:
cc:ac:0d:e1:bf:a4:c5:37:74:df:4b:36:0e:a6:a9:
42:c6:4f:61:d4:5a:fa:cb:03:00:3e:5b:c0:95:a0:
0a:8d:16:e9:6a:66:42:a3:e3:fd:a2:42:03:5d:11:
67:4f:3f:79:61:40:f8:80:07:0d:ff:a8:b2:1d:43:
97:05:b0:3f:da:99:01:2f:d9:f1:29:a4:4b:7f:48:
97:c2:8f:4f:b0:c4:0b:13:ce:af:78:c4:ae:46:51:
48:92:62:a5:71:da:40:13:86:b4:51:68:bc:6f:de:
7f:f0:85:33:7f:5e:2e:2d:16:fa:a6:fa:0a:4c:ee:
80:17:b7:ef:1e:62:8f:83:40:22:8d:b2:36:ca:87:
87:24:53:3d:2e:a1:c3:7a:cf:dd:19:ed:de:61:99:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:79:90:54:7F:B7:F3:F6:9C:48:DA:B0:D0:40:4F:BB:67:26:AB
X509v3 Authority Key Identifier:
keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/04B5kFR_t_P2nEjasNBAT7tnJqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.243.0/24
IPv6:
2a06:18c0:1::-2a06:18c0:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:ef:18:5c:04:c3:20:d9:cb:64:a2:9a:4a:06:82:65:15:1f:
9c:ce:cb:24:9c:0c:98:38:a6:25:aa:b4:5a:88:bd:48:87:00:
e1:6c:75:e6:59:a3:6b:63:c4:40:93:54:34:65:4e:d3:a5:08:
47:00:13:10:47:44:4c:31:4f:12:ac:bb:a8:df:a3:aa:15:b3:
bb:74:d1:5a:70:df:51:2b:75:a4:fe:71:b7:b0:e9:ae:58:54:
de:e0:12:06:57:cd:4b:f2:58:fe:fb:ff:fe:14:57:c9:72:4c:
79:a3:c6:6d:c9:52:82:6d:3f:e3:85:99:a3:6b:f8:db:8f:dc:
43:82:b7:44:2a:50:ef:9e:15:e6:46:7e:b8:cd:6b:59:c3:63:
95:87:ba:ca:55:34:24:c8:33:ce:6f:20:04:c4:5a:9a:06:f2:
d0:36:b0:3f:25:04:da:fe:cf:d9:53:17:b6:fd:97:81:3c:b2:
6d:00:55:7b:35:4c:42:fa:21:a8:46:4a:61:aa:6d:07:e8:77:
8f:4e:15:3e:15:9a:c6:fd:68:bd:12:a8:67:c2:eb:df:7f:36:
37:fa:c7:a0:a0:28:8b:e7:53:14:36:c8:d1:02:a1:a6:82:bf:
74:54:7c:4b:91:de:94:26:3c:1d:9c:50:68:ca:81:e6:6d:39:
26:ff:f3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:41:42 2025 by rpki-client