Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Pj_t5CT2l74I7u9IIPT57QIpwtI.roa
File: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (raw, json)
Hash identifier: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=
Subject key identifier: 3E:3F:ED:E4:24:F6:97:BE:08:EE:EF:48:20:F4:F9:ED:02:29:C2:D2
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019425204794E0D68426B216D7F2F9B26A07
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Pj_t5CT2l74I7u9IIPT57QIpwtI.roa
Signing time: Thu 02 Jan 2025 03:47:39 +0000
ROA not before: Thu 02 Jan 2025 03:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31446
IP address blocks: 193.16.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:47:94:e0:d6:84:26:b2:16:d7:f2:f9:b2:6a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Jan 2 03:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e3fede424f697be08eeef4820f4f9ed0229c2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:60:29:39:f8:f5:d4:86:45:cb:7f:87:c2:
f2:30:4c:dd:3a:61:5c:d7:5b:19:22:5b:bf:74:ed:
73:52:72:a4:e1:e9:6d:d2:df:ff:b6:99:61:7c:ea:
49:df:55:bf:f7:30:54:cf:94:da:aa:d9:b9:d7:91:
06:cc:36:68:62:51:ef:62:e9:81:05:2e:2f:1d:fc:
52:1f:13:16:a3:06:6a:36:8a:1b:08:b2:8d:a9:41:
71:1e:bb:95:2f:bb:49:0d:56:fe:c2:36:4e:55:4a:
24:fd:eb:e0:10:44:7d:a9:f2:fc:9b:27:11:c2:8a:
02:66:6b:1b:e3:91:e3:1a:3b:a2:29:ca:6b:0f:1c:
38:bc:62:76:05:b5:f4:64:7e:1a:c2:98:1e:b6:59:
39:9b:f6:32:7f:c1:b7:71:ef:fd:6d:e6:70:89:5d:
f5:03:a6:94:bf:42:af:2e:96:8f:b9:79:d6:38:65:
9e:46:ca:dd:c3:ac:24:8a:82:35:3f:f3:1b:ca:23:
2e:0f:b4:f4:10:a0:f3:51:a3:c3:69:83:b6:fe:5a:
67:53:62:38:af:f0:d8:df:66:4e:6e:5a:78:59:04:
3f:e3:d8:6b:8a:1f:f0:93:65:9a:43:5c:f3:0f:c9:
5d:84:be:a2:5b:bb:54:48:43:29:7e:4b:d6:28:04:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3F:ED:E4:24:F6:97:BE:08:EE:EF:48:20:F4:F9:ED:02:29:C2:D2
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Pj_t5CT2l74I7u9IIPT57QIpwtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.237.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ab:ea:8b:3f:e7:1b:94:f7:41:aa:2d:e9:aa:ae:86:76:b7:
7d:50:36:3a:d4:4c:05:99:e0:9f:17:d5:0d:20:d7:25:4b:4f:
c8:b1:81:f5:bb:f8:a2:d0:ec:c7:72:9a:81:72:65:c0:05:55:
ad:7d:ee:b6:69:60:3a:53:ee:a7:80:80:25:94:d0:a0:cf:bd:
3d:d1:7b:48:40:59:d4:10:4a:23:21:ae:e1:ce:4f:68:95:14:
0b:f7:f7:36:14:4b:18:d4:3b:29:5d:c0:a7:b1:b6:f3:f4:22:
c1:60:77:7d:34:5e:2d:59:ef:22:e0:b7:84:35:cc:1c:38:de:
44:50:8f:dc:10:e4:a4:26:b3:87:89:45:9c:7a:64:75:64:6b:
5f:cd:20:5d:6f:3e:d9:ce:a7:9f:54:c2:b0:cb:52:0e:16:90:
7f:eb:83:71:40:4f:55:37:c6:01:f4:05:78:ae:b0:ff:9a:ea:
a1:ef:e3:33:1c:19:40:4e:8d:2f:aa:f8:11:3c:af:0e:a9:58:
89:69:9d:17:e4:1e:9f:c2:62:7b:e6:1d:28:d7:2b:b2:6c:11:
df:5e:15:67:6d:65:76:e4:e0:92:8f:97:ac:76:f3:22:c7:d5:
b2:cb:f7:d3:69:99:46:23:6d:cc:ac:be:7a:df:55:c9:b4:b2:
a4:f4:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:45 2025 by rpki-client