Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/CRew1yNG5xJSLzpzwmoLp-zhTwY.roa
File: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (raw, json)
Hash identifier: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=
Subject key identifier: 09:17:B0:D7:23:46:E7:12:52:2F:3A:73:C2:6A:0B:A7:EC:E1:4F:06
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 0194221FE95ABF1FFC0410E16B53C8E01152
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/CRew1yNG5xJSLzpzwmoLp-zhTwY.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206983
IP address blocks: 193.228.185.0/24 maxlen: 24
193.228.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e9:5a:bf:1f:fc:04:10:e1:6b:53:c8:e0:11:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0917b0d72346e712522f3a73c26a0ba7ece14f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:3d:40:40:cb:70:83:ea:ec:f1:b9:cd:cc:
5e:1e:47:66:7e:bb:89:b6:ae:d1:f0:6b:c3:dc:87:
fc:73:96:2d:30:6e:90:99:ec:8a:6e:00:70:b8:96:
68:d8:00:4d:a4:88:97:58:c8:7c:61:68:59:4c:eb:
7d:f2:8c:a9:3f:9d:27:1a:2f:d7:8d:fe:b3:1f:90:
7c:6f:f9:15:8f:53:01:02:e4:9a:69:fe:a8:a7:3e:
d3:3d:12:0d:4d:f5:5a:ae:1b:f7:ca:8f:2e:ca:66:
bf:74:a4:b2:8c:1c:57:99:8b:86:3a:5b:dc:1e:4e:
57:ae:83:61:29:43:ad:14:f2:e2:d2:0c:6d:ab:61:
26:b8:bd:1a:c5:96:39:82:96:dd:65:dc:9a:e6:86:
8d:ce:7c:21:8e:93:4c:57:3f:06:e0:36:be:40:41:
62:d2:72:53:da:d9:35:e1:ce:6d:af:a0:72:6a:66:
eb:20:86:70:c5:79:fe:78:89:65:85:54:bb:f3:8f:
ec:ff:3d:09:cd:b5:f7:34:64:66:0c:d6:fa:9c:99:
09:f8:8c:f8:e1:32:bb:a1:bc:92:b8:f9:ee:c8:25:
fd:f7:48:bc:94:be:24:44:d9:e8:51:8d:1e:f7:d7:
03:f4:36:4f:08:39:05:80:a2:68:ef:2d:6b:a4:6a:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:B0:D7:23:46:E7:12:52:2F:3A:73:C2:6A:0B:A7:EC:E1:4F:06
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/CRew1yNG5xJSLzpzwmoLp-zhTwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.185.0-193.228.186.255
Signature Algorithm: sha256WithRSAEncryption
10:1b:69:38:35:94:62:84:72:3c:89:3b:d0:c4:bd:89:32:4c:
ff:5c:44:9c:d7:6a:c2:cd:4c:d5:b3:4b:c8:99:5c:3f:53:84:
89:29:04:b2:ac:4d:30:d4:0d:11:b2:f9:f8:c9:3f:c0:42:54:
df:e0:3d:28:2d:5a:23:a5:58:79:8d:1b:c7:c1:ed:23:b9:66:
e0:75:a6:04:92:80:ec:5b:38:ff:50:f3:ac:13:47:08:63:de:
b7:7e:00:14:63:82:a6:a6:04:cd:82:a6:5c:e6:b9:57:ec:ec:
08:3e:b1:f5:1d:23:4c:87:4e:f8:b4:84:2b:ed:28:51:43:6d:
89:65:49:8a:f0:4e:04:0e:99:cc:23:39:74:5f:35:e5:ef:49:
13:c6:71:12:c2:35:d1:5c:53:a4:c3:40:00:b6:ba:d7:26:26:
b8:98:d7:e7:ab:09:97:d4:46:36:6a:9a:e8:6d:62:1c:ee:2a:
c2:01:6b:b9:eb:78:a4:4c:01:15:57:21:45:8c:fc:c6:0d:57:
4a:4e:30:6d:12:aa:7e:60:d9:19:c0:44:e1:ce:e3:40:f6:f9:
ec:db:f3:8b:a5:7d:e0:4e:8c:5b:e2:45:54:7b:21:9e:05:f9:
e6:0c:18:31:d2:6f:cd:40:50:e6:9e:29:46:87:dd:3c:9f:b9:
36:50:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:22 2025 by rpki-client