Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/BeyMb2qH8UcdJlJvMzIMBQ4mDjs.roa
File: BeyMb2qH8UcdJlJvMzIMBQ4mDjs.roa (raw, json)
Hash identifier: hQve+rtDZ0jg1uu0Y35IBtJorVyNaKyG6WOdEkpYqKs=
Subject key identifier: 05:EC:8C:6F:6A:87:F1:47:1D:26:52:6F:33:32:0C:05:0E:26:0E:3B
Certificate issuer: /CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Certificate serial: 019427B5A9C2BA2E76DC7B587C8A4D953F3A
Authority key identifier: D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/BeyMb2qH8UcdJlJvMzIMBQ4mDjs.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208164
IP address blocks: 193.27.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a9:c2:ba:2e:76:dc:7b:58:7c:8a:4d:95:3f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05ec8c6f6a87f1471d26526f33320c050e260e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:80:ef:e3:f0:62:b2:60:69:ac:fe:e9:94:
1d:21:8b:4c:21:71:33:94:21:c2:b8:43:a1:9a:4e:
bb:94:94:8a:a0:58:25:6a:b5:50:0a:b6:d6:be:45:
b3:aa:0c:42:44:6c:76:50:ed:a8:b5:c6:1a:93:72:
b6:26:de:49:73:ec:4d:fd:33:7c:7a:6d:4c:1f:0a:
b1:35:ad:b1:a1:c9:12:d7:2f:ba:0d:56:be:b0:63:
b4:56:60:53:69:2d:cd:93:62:58:3b:bf:44:ca:c5:
7a:cc:d4:43:80:3f:df:91:93:fd:9e:2e:a2:f1:17:
44:ae:51:85:81:0e:97:39:bc:28:db:b5:2d:a9:da:
2c:c8:c8:5f:1b:13:46:2c:7a:44:47:e9:be:cb:53:
2d:4f:8f:1e:6f:2d:b9:7e:3d:ca:f4:36:7c:c2:86:
d8:a9:bd:fb:45:3c:3e:a8:52:91:d7:83:a3:d4:b4:
3e:d9:23:3e:fb:c2:62:d8:03:77:f4:a0:2f:83:bd:
b7:cd:55:0a:1f:65:e5:9f:ae:d7:ce:4e:eb:54:d1:
e6:fd:7c:25:35:a0:98:b6:20:95:1f:a0:cb:35:8d:
c4:a2:3e:50:1c:7d:81:78:86:be:20:9b:7f:82:7a:
f7:dc:7b:13:40:84:5a:cf:c4:7b:6e:90:db:5c:0e:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EC:8C:6F:6A:87:F1:47:1D:26:52:6F:33:32:0C:05:0E:26:0E:3B
X509v3 Authority Key Identifier:
keyid:D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/BeyMb2qH8UcdJlJvMzIMBQ4mDjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1c:a5:fb:9c:5b:ab:f4:b1:e2:1e:d5:30:b8:23:cf:44:9f:
b1:21:70:b0:9e:1f:95:33:4e:2a:10:15:84:1d:7f:0e:9e:e6:
f2:3c:76:df:cc:81:6a:ac:aa:5d:6e:70:af:6d:95:a9:c7:4f:
7d:70:ff:b4:2e:81:cc:4a:4e:7b:c6:f6:f4:21:db:f1:85:b4:
8d:bb:7f:83:4e:e4:18:9e:af:9f:5b:e4:f2:0b:0e:5b:ca:12:
df:cc:84:59:55:87:2d:15:70:17:79:0f:19:47:61:78:ca:c6:
99:88:03:56:04:80:04:20:d7:19:21:28:39:56:60:ea:24:51:
dd:13:08:16:dc:7f:39:bc:7f:0d:ef:cf:0e:64:b8:42:6c:2e:
d7:24:f6:ec:b0:f5:33:12:a4:49:c7:6c:c6:89:98:95:29:e6:
ee:7e:0f:a7:fe:5a:61:72:3e:4e:1b:a0:d0:2d:2a:ba:3a:50:
5f:1d:a1:52:56:88:5e:ff:be:99:ea:c8:22:93:af:66:d4:10:
61:21:5e:36:e1:68:01:09:4e:75:62:6b:58:4a:c1:6c:52:05:
f5:cc:a4:4c:17:0e:7b:10:a2:4e:11:55:33:89:c1:ac:43:3b:
de:93:cf:3d:a3:4d:6c:17:d2:59:ac:70:c3:19:ca:91:0f:c4:
74:20:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:28:32 2025 by rpki-client