Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa
File: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (raw, json)
Hash identifier: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=
Subject key identifier: E1:CB:9E:55:81:A7:EC:51:B4:64:48:20:E9:36:E5:F1:55:2A:C1:0D
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 019423D74BFCD13DD8DB2133A4B00B18DB86
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa
Signing time: Wed 01 Jan 2025 21:48:19 +0000
ROA not before: Wed 01 Jan 2025 21:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49875
IP address blocks: 193.104.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:4b:fc:d1:3d:d8:db:21:33:a4:b0:0b:18:db:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Jan 1 21:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1cb9e5581a7ec51b4644820e936e5f1552ac10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:73:7e:ea:57:bb:09:9c:92:d1:ff:05:7e:
9e:3d:26:05:6b:f5:52:d5:d5:2e:6b:d2:2b:13:13:
9b:f5:61:dc:ff:65:f5:1e:40:ef:9d:83:5f:d2:0e:
ab:2d:ee:9d:9f:8c:ae:d5:2a:3b:6e:1f:a8:6a:45:
31:4f:c5:7b:35:7c:da:7b:3b:f2:1c:ac:09:98:83:
7a:de:f1:0c:34:df:e3:20:a6:b1:59:c2:5b:0b:f3:
91:c3:73:af:f0:da:52:ae:11:dc:6a:44:53:b5:c7:
a1:89:85:d8:11:23:a2:a2:1f:17:09:2f:94:29:56:
68:f3:71:71:02:f1:56:19:69:da:8a:f0:73:e6:94:
ea:c5:35:23:d7:5a:3d:91:27:0a:55:29:0c:70:09:
20:a2:2a:ad:f7:84:5b:11:23:95:8a:f5:af:0e:b0:
49:b6:43:6e:d0:7a:99:64:da:7c:49:d5:0c:9c:91:
4a:26:62:bb:40:c6:36:f1:b2:9f:0b:fa:02:b3:6e:
72:8a:27:56:8e:80:b7:17:f5:0b:87:54:12:b2:ab:
bd:4c:2a:f8:a6:6b:a4:8d:87:cb:59:3c:91:0c:6b:
6e:26:f1:c0:65:c3:e4:68:00:65:52:6f:fd:9e:1c:
ef:04:88:b9:5d:2d:73:46:3e:53:96:a0:ab:13:35:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CB:9E:55:81:A7:EC:51:B4:64:48:20:E9:36:E5:F1:55:2A:C1:0D
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.13.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e3:db:6f:57:eb:87:92:ce:47:eb:98:bf:2d:f9:3b:a9:9c:
51:d6:36:c8:b9:73:6a:0b:8a:4a:6d:de:2b:aa:11:5a:88:da:
00:30:34:27:17:ac:58:3f:17:28:6b:6b:f6:1d:c5:1c:76:d7:
8a:e9:7f:31:49:bd:c2:52:65:12:36:15:50:59:68:61:ef:ca:
50:0a:6a:08:ac:b3:e4:18:19:3f:77:b7:33:2e:7e:31:21:ed:
87:b6:50:c8:8d:5f:5f:21:ae:f3:81:2e:5f:03:b2:c5:f7:7f:
69:e8:63:4e:02:1f:08:12:e7:20:3b:2f:a8:2a:9f:a4:4a:fa:
7b:84:76:65:70:59:fc:ae:5c:f0:17:df:c8:48:e6:ec:96:58:
93:4b:ab:27:34:9a:70:7e:6d:02:aa:95:e3:42:e3:eb:b6:1c:
c9:6d:44:85:9b:9e:63:3c:f8:31:4e:5f:d1:0e:86:81:c0:02:
66:41:2f:7c:87:08:9e:16:13:dc:d1:86:ff:79:de:36:c9:c1:
61:58:c7:fa:3e:3b:ea:20:e5:48:13:52:f5:33:ff:e9:3d:bd:
af:03:03:16:69:31:34:6c:13:e7:78:3b:b1:f2:51:ec:81:35:
12:82:60:63:d3:4d:80:c4:aa:8c:3c:47:47:11:60:0a:e2:ee:
83:3a:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:52 2025 by rpki-client