Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/bHvrcJVM0y_8UrKAkmAx19ngbcE.roa
File: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (raw, json)
Hash identifier: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=
Subject key identifier: 6C:7B:EB:70:95:4C:D3:2F:FC:52:B2:80:92:60:31:D7:D9:E0:6D:C1
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 01942368CDDCE09C371CA36E4AB40590C3A0
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/bHvrcJVM0y_8UrKAkmAx19ngbcE.roa
Signing time: Wed 01 Jan 2025 19:47:38 +0000
ROA not before: Wed 01 Jan 2025 19:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197595
IP address blocks: 193.178.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:cd:dc:e0:9c:37:1c:a3:6e:4a:b4:05:90:c3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jan 1 19:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c7beb70954cd32ffc52b280926031d7d9e06dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:0e:97:04:ea:3e:71:cf:06:25:72:06:48:
fb:68:c7:0c:40:78:61:d5:6b:62:5c:06:ba:2b:e9:
0b:f6:88:70:41:7f:35:01:4e:1c:e2:d6:62:3b:a7:
2d:d1:17:6b:9c:9e:59:a4:c1:cf:05:61:bd:76:56:
95:1b:98:4f:4f:fe:29:da:d5:f9:6d:3a:c2:b5:19:
53:48:7a:d2:f6:ce:e4:49:91:8c:85:d3:25:77:43:
3c:a1:11:6e:90:d1:5e:85:b5:34:25:89:58:5e:f4:
06:0c:d7:61:e5:59:d3:f1:a5:2e:a3:74:27:82:9d:
c5:ef:e6:e3:62:a6:ca:6c:64:bf:35:19:c1:86:fe:
a9:d6:dc:3b:01:cb:ee:b4:3f:2f:78:6f:40:15:7f:
ac:c4:1a:08:f6:e1:79:aa:9d:b7:0a:8c:27:50:f3:
0a:ef:4b:0e:1e:f8:c6:b3:26:47:12:d5:74:4a:f1:
5c:1c:ef:06:45:91:2a:2b:49:f1:70:46:92:cf:df:
f6:9c:b4:04:d4:4f:c0:70:c6:b0:45:ef:fa:b1:94:
27:69:d1:af:7b:e1:62:d1:3e:4e:50:47:0b:48:cc:
85:73:a9:dc:c3:5b:b3:bc:80:da:e3:0e:db:b5:48:
45:c5:7b:23:ea:93:3b:a5:29:97:c8:9b:c6:aa:7d:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7B:EB:70:95:4C:D3:2F:FC:52:B2:80:92:60:31:D7:D9:E0:6D:C1
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/bHvrcJVM0y_8UrKAkmAx19ngbcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:af:02:54:1d:b0:12:df:87:54:45:99:16:1f:03:93:6a:24:
1d:c2:9e:b7:98:3c:d5:dd:67:2d:e1:45:29:77:70:0c:1c:ac:
66:d0:12:e5:1c:12:34:e4:b7:a3:c5:09:73:cc:2c:5a:5c:e0:
04:4f:ba:f0:ae:33:16:4c:fb:49:1a:37:b8:5a:f2:0f:88:ec:
e7:1f:d4:19:d5:11:a1:f4:5d:1f:c9:28:84:da:fe:df:b1:cf:
52:f8:26:b8:33:a2:f9:01:82:aa:ba:74:50:9a:28:af:f8:0b:
66:1c:6a:40:f1:b7:90:04:6f:e9:ae:60:1a:7f:d4:9a:88:b8:
17:41:40:b6:13:ea:61:e3:8e:c5:7c:25:5d:7e:25:9c:89:04:
83:43:c5:f4:e6:1c:eb:c5:a3:e3:75:6f:12:85:2b:39:aa:6f:
0a:a2:34:d2:71:a3:71:f3:3e:d7:48:c8:a3:8a:52:de:14:66:
0f:d9:3c:12:b6:94:b6:2a:e2:7b:3b:fb:44:cd:86:51:15:91:
44:28:22:cc:5d:98:62:d4:21:36:f2:4c:23:28:64:fe:f4:e9:
e0:4f:ad:16:02:76:1f:30:4a:6e:54:59:b5:29:b1:2d:31:a0:
51:09:07:7e:b7:01:0c:2d:81:26:33:07:ab:cf:9a:25:28:3a:
24:d5:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:06 2025 by rpki-client