Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/RNkRhX3yK-TkHlh9YWWsykby_Dc.roa
File: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (raw, json)
Hash identifier: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=
Subject key identifier: 44:D9:11:85:7D:F2:2B:E4:E4:1E:58:7D:61:65:AC:CA:46:F2:FC:37
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 019420D61DBD55C4106F99021E3A42592745
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/RNkRhX3yK-TkHlh9YWWsykby_Dc.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31497
IP address blocks: 193.16.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1d:bd:55:c4:10:6f:99:02:1e:3a:42:59:27:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d911857df22be4e41e587d6165acca46f2fc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:e3:4c:77:88:a4:c3:b8:f4:ac:d6:bd:34:
5c:d7:41:a0:96:7d:94:e6:5c:57:94:be:47:30:39:
c8:26:65:af:38:1e:ef:49:22:b1:5e:4e:ad:9d:0e:
67:60:a6:41:10:61:df:07:08:c2:59:85:49:46:09:
1b:e6:55:87:72:69:a2:f2:a7:04:7c:e4:a5:c4:b5:
21:68:5f:7c:d5:e7:72:d8:fa:12:de:e3:79:24:bb:
6a:6f:07:f9:03:43:bc:8d:de:9a:fd:63:c4:73:63:
29:e7:cf:8c:45:92:07:4b:e2:95:9e:70:75:60:a5:
ee:0c:fd:2e:cb:10:fb:9a:b4:8c:88:17:87:6a:37:
26:26:77:33:ad:12:e4:07:46:89:eb:af:c6:0b:bf:
ab:92:b5:23:dc:19:62:cd:26:d9:1f:1b:7e:9b:c2:
ec:b8:3e:70:e1:2c:d0:b6:01:ec:9f:e2:48:d7:1f:
b6:a9:64:19:f7:5f:5e:b6:f2:90:2c:3a:ea:12:23:
c4:6e:01:d5:13:38:28:e2:6e:0c:9f:5e:49:72:a5:
e7:6b:48:24:30:29:29:c8:ff:7c:db:00:78:94:6e:
64:23:8f:4f:3f:bb:38:6b:7a:f6:80:9e:59:d8:10:
3d:94:ce:66:4d:f9:d1:0f:7a:36:ca:29:a5:b3:5c:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D9:11:85:7D:F2:2B:E4:E4:1E:58:7D:61:65:AC:CA:46:F2:FC:37
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/RNkRhX3yK-TkHlh9YWWsykby_Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.103.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7a:ab:37:93:a0:7e:72:17:fb:ef:23:de:66:65:d6:80:8d:
3e:e0:d7:68:24:4f:c4:17:d4:a0:71:21:cd:e0:9c:54:a1:95:
95:19:33:df:56:12:c8:6f:2b:80:c6:0b:c6:25:8e:a6:7e:2c:
98:0a:bf:80:d5:d0:27:4c:45:43:2b:80:c6:e1:d3:60:ef:06:
49:6b:91:41:8c:97:47:38:2f:ce:54:2c:d7:6e:a0:aa:4d:51:
4a:6e:95:6d:28:55:7f:a9:19:d6:cf:59:70:ae:6f:c7:06:d6:
ed:36:81:a1:04:6d:60:cf:8d:11:9e:69:05:de:50:9f:da:5d:
cf:ce:37:33:51:8c:80:37:c3:e0:b9:2a:c4:bc:d3:95:c9:fd:
ea:32:19:55:aa:07:a8:67:d5:12:93:a5:c3:91:a1:f9:77:af:
e0:51:52:38:40:42:9c:9a:ee:97:c4:db:aa:f3:de:05:f3:ac:
84:74:ec:40:2b:4b:8d:5e:81:a2:a8:b2:5e:de:02:cd:7e:21:
45:f5:a6:f3:d6:25:8e:25:d5:7e:7e:d0:32:31:95:c3:32:c5:
6d:87:88:5a:c1:72:c2:81:8e:42:8b:ac:4e:b8:01:7f:7b:f2:
17:0b:9e:5b:77:06:b8:5d:11:fd:fc:a6:25:5f:18:e3:70:3c:
59:33:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:24 2025 by rpki-client