Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/GIbN6bPur810JuGuHTYh5u7F5NM.roa
File: GIbN6bPur810JuGuHTYh5u7F5NM.roa (raw, json)
Hash identifier: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=
Subject key identifier: 18:86:CD:E9:B3:EE:AF:CD:74:26:E1:AE:1D:36:21:E6:EE:C5:E4:D3
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 0194228D777E9B26795B3668971C6A9742DB
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/GIbN6bPur810JuGuHTYh5u7F5NM.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43665
IP address blocks: 193.10.29.0/24 maxlen: 24
193.10.30.0/23 maxlen: 23
193.10.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:77:7e:9b:26:79:5b:36:68:97:1c:6a:97:42:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1886cde9b3eeafcd7426e1ae1d3621e6eec5e4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:8f:e6:e0:e0:a9:e1:fa:7f:4d:3f:17:d9:
93:7b:fe:2f:6b:ac:0e:3b:93:f9:9f:94:c5:a9:2b:
1f:d7:6d:37:e8:59:5a:73:c6:8b:7b:5c:65:68:b0:
69:0d:62:a0:4c:8a:e1:f4:56:32:59:26:f0:50:48:
61:95:8d:32:cd:d7:4f:9d:8d:e3:f8:20:6a:50:42:
10:fa:c7:e2:eb:b9:91:b8:1f:71:d9:8a:e2:05:b3:
7f:1e:29:c0:17:ed:c8:03:4b:89:96:ea:4f:5b:52:
da:00:f0:f8:62:a4:a4:15:ce:fd:79:c3:f4:c7:25:
d0:93:90:fd:c2:3d:82:dc:84:93:84:ec:c3:24:bb:
35:90:73:03:ee:aa:e5:a5:7a:f3:92:11:5d:c5:72:
30:e7:bf:08:ba:62:00:a9:30:61:a8:4f:07:ec:c4:
a6:55:90:53:b6:24:fc:af:db:7c:1d:63:ee:31:3b:
12:73:69:b5:39:95:22:a4:4a:d8:5b:b2:cd:8c:55:
c3:be:77:19:9f:5e:e8:47:3b:f6:25:38:51:9f:23:
1a:64:06:e7:4e:79:05:9a:03:e0:b7:45:dc:34:15:
81:80:54:6d:c9:e3:56:1b:bc:a9:8a:0c:6a:18:8d:
1f:b4:51:14:68:1a:67:cf:05:b4:ba:0f:24:b5:f5:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:CD:E9:B3:EE:AF:CD:74:26:E1:AE:1D:36:21:E6:EE:C5:E4:D3
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/GIbN6bPur810JuGuHTYh5u7F5NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.29.0-193.10.31.255
193.10.160.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:eb:e7:08:c8:c7:a6:a3:34:c7:d2:86:b9:1e:2b:be:4a:08:
c5:8e:43:86:a5:d0:e3:29:6a:2d:ee:33:88:b3:b7:8a:7a:25:
c4:3c:41:10:44:78:48:a6:66:db:5f:54:7b:03:76:36:45:13:
e3:48:05:70:2a:e6:b2:69:74:47:5a:0e:d8:24:4e:57:a0:b9:
19:97:3c:4b:38:46:36:b8:20:d6:dc:a9:90:11:ba:12:2b:d9:
fe:a1:0e:0f:bc:20:f3:3e:4d:19:99:30:cc:4e:e9:38:9c:21:
99:f3:d6:70:7b:c3:9e:e6:56:c1:15:5c:b4:df:55:bf:7c:41:
ad:64:f8:2d:cf:5a:fb:96:d9:4a:d7:1b:5f:53:64:30:e8:58:
26:76:04:05:27:7c:99:8b:44:0f:e1:d1:0c:c5:e9:4c:cd:3f:
70:cb:a1:20:64:b2:f4:84:8f:26:8c:79:fa:78:da:02:c5:5c:
9b:b1:3f:5f:cf:23:44:5b:3d:8c:1b:ab:30:8e:bc:eb:b7:2d:
eb:5e:69:ec:67:90:64:16:8f:75:4c:ff:13:49:e2:cb:5e:48:
34:58:1b:9d:ec:b5:c5:7e:7a:d5:62:0d:e6:8f:79:81:40:6e:
90:6d:bf:c8:f7:bd:9d:08:76:af:3a:db:2e:95:16:eb:1e:ea:
d8:73:63:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:58 2025 by rpki-client