Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/88Zyli6xDf_KfyFeSWz7RmhFxhg.roa
File: 88Zyli6xDf_KfyFeSWz7RmhFxhg.roa (raw, json)
Hash identifier: QCm5f6Ce92fQI7+906gEvnZHt9oJFWQ47Sbm+r7Hfaw=
Subject key identifier: F3:C6:72:96:2E:B1:0D:FF:CA:7F:21:5E:49:6C:FB:46:68:45:C6:18
Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Certificate serial: 0194236910391284E5CE06F2E0A4A63F1368
Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/88Zyli6xDf_KfyFeSWz7RmhFxhg.roa
Signing time: Wed 01 Jan 2025 19:47:55 +0000
ROA not before: Wed 01 Jan 2025 19:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9201
IP address blocks: 193.241.0.0/19 maxlen: 19
193.241.32.0/19 maxlen: 19
193.241.64.0/18 maxlen: 18
193.241.128.0/18 maxlen: 18
193.241.192.0/18 maxlen: 18
2001:67c:2c70::/48 maxlen: 48
2001:67c:2c74::/48 maxlen: 48
2001:67c:2c78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:10:39:12:84:e5:ce:06:f2:e0:a4:a6:3f:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Validity
Not Before: Jan 1 19:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3c672962eb10dffca7f215e496cfb466845c618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:a1:6a:ec:61:73:a7:42:79:bd:bf:e8:99:
49:9e:53:2c:23:7f:64:0e:7b:9b:ae:9d:6f:e1:7a:
c9:a4:e9:0a:28:65:74:44:1f:7a:ad:60:ab:86:8b:
4e:1b:d0:30:3c:44:bd:d0:a9:0f:76:a8:e8:06:34:
0a:e6:8a:b5:af:63:22:17:f7:bd:00:d0:37:b9:7a:
57:c3:c4:b7:7a:72:9f:c6:33:50:f5:2f:4c:7b:7e:
22:7e:60:86:df:4e:a2:18:2a:23:23:10:ca:ba:0f:
1a:84:31:10:78:14:74:2d:5d:0d:2d:73:38:76:69:
7f:1c:d9:a1:1e:4f:63:10:ed:96:a2:63:b3:ff:75:
28:b2:a5:2d:61:f2:13:2f:24:0b:52:9f:2d:c0:08:
b3:cf:6b:2a:3a:9d:cb:85:15:ec:8e:7e:3f:c6:e7:
a8:cd:1b:2e:95:c4:7b:4f:99:ed:89:aa:ed:0c:17:
ff:6e:00:67:a5:42:1e:44:a2:c2:02:a9:b2:e3:9a:
8f:d0:2c:f7:6d:6e:cf:f6:b9:43:cb:d7:0e:1a:45:
44:57:11:55:78:e4:f1:9f:eb:38:b7:3f:25:1b:e1:
8a:34:d4:9e:29:7b:a9:ef:10:95:9a:08:d8:4c:6f:
c8:f6:e9:89:b9:3c:07:43:c1:05:ea:f4:2d:31:c7:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:72:96:2E:B1:0D:FF:CA:7F:21:5E:49:6C:FB:46:68:45:C6:18
X509v3 Authority Key Identifier:
keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/88Zyli6xDf_KfyFeSWz7RmhFxhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.241.0.0/16
IPv6:
2001:67c:2c70::/48
2001:67c:2c74::/48
2001:67c:2c78::/48
Signature Algorithm: sha256WithRSAEncryption
16:73:a0:bf:29:18:9d:f4:4d:ac:1f:92:24:5d:7b:9d:9f:29:
6b:29:07:42:69:e2:33:79:77:25:31:9a:39:34:e7:10:04:8a:
9b:ea:e0:68:92:5a:c3:02:17:d1:da:36:86:e9:e7:8e:b2:67:
ef:ea:48:a4:d3:c7:cf:23:a3:2e:83:c8:f8:4a:3b:a1:b0:0c:
89:f4:d5:d5:44:f9:66:63:ff:7f:63:74:34:e0:c9:9a:d4:e0:
aa:57:19:a5:1f:74:69:eb:ca:ab:ae:13:11:5e:74:46:9c:13:
4c:ff:bd:60:9a:25:ae:1a:12:7f:07:4b:c3:92:f7:4a:db:4b:
ac:37:4f:a0:a6:02:0f:8a:25:5e:ea:82:85:a8:7d:16:f1:14:
b7:73:bd:7d:c2:58:38:bc:b4:fd:f5:b6:14:0d:d7:c0:d1:eb:
eb:c8:48:e1:fd:b3:85:c0:e8:be:3e:cc:6c:a6:cb:3e:12:9f:
1d:15:e5:38:e0:c3:79:e6:fa:45:b3:eb:dd:b8:c3:d0:09:3c:
42:87:0b:30:85:3b:03:33:18:62:81:66:d7:37:4e:cd:13:bc:
89:0a:ce:ff:12:3a:e7:5b:bd:e4:5d:ef:d0:93:2e:07:52:17:
e1:4b:83:83:15:d9:46:00:62:a5:71:e7:e5:2c:e5:a3:d8:ec:
7c:af:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:36 2025 by rpki-client