Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/BDcWEX2jsziWI3BwAdwXDgVlUUs.roa
File: BDcWEX2jsziWI3BwAdwXDgVlUUs.roa (raw, json)
Hash identifier: ohMsIfsvhMfjPWnDhvdOtdCZBCwqZ7Awj2tCgJhUEaE=
Subject key identifier: 04:37:16:11:7D:A3:B3:38:96:23:70:70:01:DC:17:0E:05:65:51:4B
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 0194258EE5D1C624659104331A9F756AD90E
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/BDcWEX2jsziWI3BwAdwXDgVlUUs.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60295
IP address blocks: 193.25.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e5:d1:c6:24:65:91:04:33:1a:9f:75:6a:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=043716117da3b3389623707001dc170e0565514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:e8:f0:94:c7:db:42:79:06:c5:72:9e:3f:
2d:05:c9:60:3d:53:aa:a4:b7:c3:05:68:7e:a0:4d:
06:2e:66:2c:ba:28:70:1b:8a:1d:01:9c:8b:c5:5c:
ff:22:fa:1b:9a:1c:13:d9:f2:b2:5b:9d:49:ae:c9:
7e:22:21:14:2d:da:44:55:98:40:4d:b6:10:84:c1:
4a:f5:b4:2f:f5:63:b1:22:9a:7b:c6:9e:dc:2a:b6:
bf:a1:0b:38:8d:99:37:59:97:4a:aa:be:2e:99:84:
2a:28:80:09:82:a8:72:d1:26:4e:2f:a2:ad:b9:da:
4b:37:f2:e7:65:b9:e5:4e:d7:32:46:c9:c8:29:d2:
71:77:16:c5:75:a5:55:4a:ca:09:82:7d:0d:e9:ae:
32:ee:54:5e:7c:5e:cf:b7:89:d5:b9:0d:a1:b7:4b:
05:98:b4:40:46:5a:55:df:e2:a3:1b:fa:72:67:5b:
d4:b0:29:d2:f6:e5:86:47:8f:8c:8e:6a:e4:3e:ec:
c1:8b:07:5e:ca:a8:49:b0:84:43:dd:3b:f0:76:0c:
ec:6f:a5:69:ab:55:18:87:30:99:1b:59:4f:42:85:
4d:d3:71:5e:b6:6a:2c:b3:1b:07:68:0f:2f:f2:12:
2d:87:c6:7b:f6:40:38:a1:31:21:c0:cf:09:da:b1:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:16:11:7D:A3:B3:38:96:23:70:70:01:DC:17:0E:05:65:51:4B
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/BDcWEX2jsziWI3BwAdwXDgVlUUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7c:dd:a0:6a:c8:88:42:c9:8b:71:02:5b:94:d7:9a:0a:dc:
d4:20:eb:a3:bc:c6:af:22:cb:63:fd:3c:26:db:33:0d:5c:1d:
25:33:ac:46:d5:80:83:10:8a:e3:3a:38:1e:13:a1:9c:94:8b:
c9:06:eb:27:9b:71:f9:1e:a9:c8:47:cc:3b:46:eb:90:e5:25:
ec:5b:a4:76:f3:5c:c6:51:b3:5b:11:9e:47:03:f2:c1:8f:c9:
27:4f:9e:65:1c:55:ca:74:40:e8:24:6a:5f:bd:0f:12:a5:91:
e3:f9:be:ac:cc:c5:37:ac:ed:be:d5:7e:1a:e7:af:0c:77:42:
06:03:49:fd:a3:2d:2f:4d:38:17:80:f9:85:b4:f3:26:20:35:
6e:4d:2e:20:57:66:0e:d5:09:8e:5b:3e:0d:c8:51:6b:44:cf:
e1:ac:67:1f:be:14:6e:e8:0c:98:22:51:de:1e:b0:8c:c5:9c:
97:de:89:6f:7c:ae:6c:ea:3c:a5:bd:1b:50:24:4e:c5:61:11:
15:65:0f:c6:be:fd:5d:b1:de:0e:72:82:73:10:26:f7:64:76:
46:a0:60:6e:2e:0c:48:18:a8:34:60:86:c2:b6:b9:4e:f6:d8:
5c:da:4b:ea:f8:f9:ba:a6:bb:4f:84:52:44:61:d8:39:b5:7e:
c2:b9:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:37 2025 by rpki-client