Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa
File: uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa (raw, json)
Hash identifier: EwwfvCJkfqVqVmU0gYHOqumHmaTFzwTDUQGR86XAOZk=
Subject key identifier: B8:A9:6A:8B:0B:68:5E:4A:7D:C6:32:DF:B6:54:3D:BD:33:2A:AA:BB
Certificate issuer: /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial: 019426D8EEFFAE225EF2DC877401622AB2EF
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa
Signing time: Thu 02 Jan 2025 11:48:58 +0000
ROA not before: Thu 02 Jan 2025 11:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9158
IP address blocks: 193.3.233.0/24 maxlen: 24
2a10:e200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:ee:ff:ae:22:5e:f2:dc:87:74:01:62:2a:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Validity
Not Before: Jan 2 11:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8a96a8b0b685e4a7dc632dfb6543dbd332aaabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:31:1a:b2:84:79:65:9b:0e:bf:de:38:39:56:
6f:f3:fb:2d:12:2e:34:7d:d7:f9:f2:b8:45:6a:1c:
b6:88:10:da:7c:ce:b3:df:ad:ac:58:f2:88:3f:b7:
5b:bf:7d:bd:dd:2a:d1:17:9d:5a:b8:c3:77:95:54:
a7:a5:1a:eb:3a:3d:e3:24:42:8d:10:4a:4d:25:ec:
99:af:44:17:b2:83:f0:06:9c:6a:26:a7:9b:c6:88:
4e:4b:27:8c:61:80:ab:aa:dd:ea:fc:5d:09:07:0a:
03:15:c9:21:55:2f:74:75:3d:aa:36:61:3c:85:80:
0a:8a:6a:b1:42:3b:2c:dc:51:56:36:e8:50:71:9a:
e7:10:13:d0:51:1d:cb:97:bd:6b:0c:70:76:b9:88:
ea:11:9f:b9:58:00:b8:99:79:d8:a8:f5:0d:2c:9b:
b7:a8:92:82:94:57:75:94:35:3f:30:de:43:f9:5d:
ae:be:ed:35:ca:ce:74:3c:5e:84:34:6c:3b:c8:83:
d5:6f:d1:bc:5b:97:73:de:f4:74:30:0e:4a:62:0d:
95:f3:ec:a2:8d:fc:78:7e:8b:69:54:87:76:ef:4e:
2e:0f:bb:f7:68:55:90:92:53:d5:da:b1:e4:1c:50:
58:b7:68:4e:6d:74:88:f6:08:ac:b5:4a:0a:07:ff:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A9:6A:8B:0B:68:5E:4A:7D:C6:32:DF:B6:54:3D:BD:33:2A:AA:BB
X509v3 Authority Key Identifier:
keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.233.0/24
IPv6:
2a10:e200::/32
Signature Algorithm: sha256WithRSAEncryption
6c:35:8f:37:75:3d:cc:0b:c3:88:4a:32:dc:f5:63:29:09:ea:
e3:47:6e:78:b6:29:73:b9:81:86:49:3b:60:29:96:f3:e1:3f:
3f:3c:4a:45:72:f7:4b:ea:04:8f:12:be:c8:c1:21:34:b1:1f:
1d:55:86:64:f4:44:2d:e2:47:c2:39:2e:51:50:57:2b:66:e0:
c0:2a:14:a9:92:06:de:84:9b:30:8b:25:2a:e5:45:3e:5f:a8:
62:88:e6:ab:d3:49:0f:16:04:8a:c1:f8:6a:d4:b1:ab:66:a0:
1c:d5:c2:22:62:ee:e0:2b:96:0e:8f:46:b9:9f:ea:8f:3d:ab:
ab:f1:fb:51:ed:14:67:46:5a:77:b0:dc:20:ac:14:75:99:68:
c4:34:31:39:69:77:a5:50:1d:48:22:23:40:42:ad:e0:4f:cf:
16:c8:98:5b:b7:6f:a7:c1:6c:c6:de:d4:6f:da:22:46:13:73:
e5:06:ea:8e:a0:46:5e:87:5b:62:fa:2a:87:01:82:30:ec:cc:
82:f7:c9:fd:73:00:2c:9b:e8:44:a1:6a:1a:5f:16:2f:8c:85:
14:2f:31:86:3d:50:79:d8:51:c5:bf:18:bc:bb:da:ed:8c:77:
b9:c8:14:94:6c:ae:de:32:56:e4:67:30:17:b7:3e:f7:9b:68:
1c:2c:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:54:29 2025 by rpki-client