Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/DBFDlK5pJ_In8yUaHfIwunse1tE.roa
File: DBFDlK5pJ_In8yUaHfIwunse1tE.roa (raw, json)
Hash identifier: hBkF1wd780ez4BIZdoVbu1TdvJ7vKBgxWpbafISeX7E=
Subject key identifier: 0C:11:43:94:AE:69:27:F2:27:F3:25:1A:1D:F2:30:BA:7B:1E:D6:D1
Certificate issuer: /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Certificate serial: 019421B22B3DF3BE084F32CDBF7D8C1155C8
Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/DBFDlK5pJ_In8yUaHfIwunse1tE.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15923
IP address blocks: 193.41.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2b:3d:f3:be:08:4f:32:cd:bf:7d:8c:11:55:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c114394ae6927f227f3251a1df230ba7b1ed6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:0d:89:44:e9:c0:1a:8e:b7:23:fe:69:df:
e2:d0:87:ea:ef:14:ed:c1:d0:cf:93:9c:81:c0:65:
7a:f7:60:a3:d3:d7:b3:b8:91:0b:32:64:2c:b3:39:
23:ff:f9:74:26:fa:da:30:16:9b:8d:51:56:21:b5:
4f:d7:36:cf:ec:f8:3b:44:d3:5b:49:0a:b1:f4:5f:
20:99:6c:39:4e:e6:79:e3:8c:5a:1d:9e:1f:1c:6b:
41:c0:c7:58:ee:e2:2d:af:b7:0a:ed:8d:6e:aa:15:
db:88:b7:ce:70:df:4c:55:07:62:0d:6e:2b:16:11:
1e:0a:15:61:77:58:e1:7b:07:43:79:ed:df:79:df:
95:71:e2:36:84:a9:b6:1f:74:48:31:98:26:7a:c5:
22:03:40:36:a5:5a:0a:f2:36:92:18:fb:2b:ae:68:
da:05:2f:a4:75:22:92:27:40:61:a2:fd:52:3d:7b:
c0:d1:08:40:7a:95:17:db:cd:84:7b:24:b9:ed:1c:
ab:0d:6d:c1:f5:c2:c6:cf:ea:be:8b:56:cf:d7:99:
db:29:ba:e5:73:13:ae:77:84:7c:ef:05:2b:db:b4:
67:2f:c2:0b:e3:44:e9:e3:96:77:9a:20:ef:78:ff:
50:ed:37:0c:6b:5f:c0:b5:8c:2c:07:0b:d3:54:9f:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:11:43:94:AE:69:27:F2:27:F3:25:1A:1D:F2:30:BA:7B:1E:D6:D1
X509v3 Authority Key Identifier:
keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/DBFDlK5pJ_In8yUaHfIwunse1tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.6.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:d2:31:ce:52:3e:0b:46:0a:50:4e:31:4d:1b:63:98:9b:23:
d6:4a:4e:06:fb:60:3e:cf:63:f7:cc:e1:79:98:48:d0:88:87:
94:39:49:03:f3:ab:9a:ab:ba:ca:8c:ca:1f:63:62:7a:8c:5a:
15:30:76:55:55:9b:52:cd:ed:bb:b6:36:ee:f5:cb:bf:83:ad:
0c:a7:7f:cd:82:b2:bf:78:4d:99:24:c6:cd:dd:9c:df:03:11:
01:5c:71:f1:14:21:12:30:9b:07:dc:dc:70:89:ce:a0:d5:91:
a5:14:43:57:2b:3c:d1:c6:90:7c:2b:af:3b:de:5b:9c:3c:d3:
37:14:f6:d5:db:14:f8:b0:71:57:76:d9:79:30:eb:bd:e1:b0:
69:2f:e7:ff:96:c0:e2:0c:17:e5:88:79:64:f2:8f:1c:07:56:
a3:87:1a:bb:41:87:86:dd:e9:fd:43:a4:2f:f8:9d:28:dc:a6:
1f:83:71:57:87:e1:f8:b8:3a:3e:ce:1c:43:0d:b3:38:4b:4a:
08:c5:d6:b3:dc:77:23:18:98:07:62:cc:37:f8:8a:61:c9:f9:
96:eb:45:9f:8f:c5:fa:9d:0a:76:7d:ae:eb:3c:ff:d6:cf:cb:
59:c8:2e:aa:fc:c6:af:7f:6b:73:01:0c:d4:e3:f5:d2:06:fb:
f4:57:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:19 2025 by rpki-client