Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa
File: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (raw, json)
Hash identifier: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=
Subject key identifier: 07:6B:AF:E6:DF:C6:88:C5:2B:F2:B3:3E:AF:9B:8A:6D:47:67:12:84
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 0194258EF72F93CDD6009F6C8D2CDF548E2A
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41485
IP address blocks: 193.227.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f7:2f:93:cd:d6:00:9f:6c:8d:2c:df:54:8e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=076bafe6dfc688c52bf2b33eaf9b8a6d47671284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:ad:1a:46:a9:a9:26:1c:47:18:af:80:0e:
43:6b:aa:b2:4c:5b:49:86:50:10:77:e6:b4:90:19:
d4:da:d8:ad:81:9c:49:af:02:60:e8:c5:7b:08:89:
67:73:32:2f:dd:4c:13:c7:d1:6b:8b:38:e5:9c:d9:
ce:76:f6:87:07:08:82:a3:98:87:c7:cf:da:3f:b0:
ea:16:02:0f:43:ad:97:cc:29:1e:86:76:41:0d:58:
37:d0:2b:d6:19:d3:c5:fd:cc:ff:68:f1:ab:7c:12:
4b:81:e6:de:1b:fc:8f:be:43:58:cd:5b:cb:a7:5b:
4b:94:1f:83:17:8d:33:6b:52:fb:f2:0d:03:37:2c:
fb:46:1b:16:8b:4f:e6:66:b4:28:00:27:1f:69:0d:
72:4b:54:27:b1:86:87:c5:ad:a4:fe:95:ed:17:6d:
1a:24:ea:ec:49:9d:6b:55:ab:af:2e:23:c8:87:53:
a3:2e:ce:fa:53:34:ed:c8:81:50:2b:8e:4c:7f:96:
42:d2:96:be:35:74:50:3b:17:6f:4d:4c:24:f9:4c:
4a:af:03:98:b2:b9:42:89:bc:79:02:5a:c9:d2:9d:
6f:11:58:f0:15:29:a9:a1:6c:fb:86:52:e7:65:f0:
b6:29:c1:8b:51:28:ac:3e:f8:20:be:63:43:ad:13:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6B:AF:E6:DF:C6:88:C5:2B:F2:B3:3E:AF:9B:8A:6D:47:67:12:84
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.96.0/24
Signature Algorithm: sha256WithRSAEncryption
80:51:3c:12:39:3a:a0:9a:ba:fc:c1:3a:10:b8:fe:b5:9a:26:
10:a0:9c:8e:93:cf:15:50:02:ef:56:95:b3:d1:a4:89:52:3a:
37:12:94:3d:97:63:58:0e:1a:cf:c9:0e:7b:cc:57:28:95:2a:
f3:0d:82:04:86:84:ec:5d:13:49:44:01:7f:24:6f:0d:42:ea:
a1:ac:05:11:66:9e:0e:b2:03:90:5d:39:d4:73:cd:7e:fb:c0:
81:ae:8e:d8:22:70:83:e8:c8:ad:e8:d4:16:5a:1c:7b:43:36:
b9:3d:bc:e9:0d:11:3c:b1:15:9b:6f:5d:9a:51:d8:3c:bc:f0:
2e:6a:a7:93:4f:ce:20:7e:38:d2:a8:fd:13:36:c2:17:94:62:
1b:28:e7:64:51:22:fb:b9:fc:5c:b6:d8:3b:cc:c1:09:86:6b:
9d:76:83:83:93:22:aa:5c:80:eb:d0:92:24:cd:ab:d4:06:70:
cb:15:d2:fd:7e:01:92:31:25:8e:a6:91:a7:58:a4:ad:21:6c:
3e:48:3c:9b:30:3c:59:1a:b7:c1:05:2d:d6:b6:98:b4:d2:47:
12:c5:ff:27:b1:f9:b4:ea:51:8e:f7:d6:7e:61:5c:40:2a:08:
85:d1:47:87:16:c3:64:01:c0:19:7b:08:e5:20:66:1d:2e:08:
34:5d:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:06 2025 by rpki-client