Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/uZb6h7TLe1-lJihPhirYKpDZ4mY.roa
File: uZb6h7TLe1-lJihPhirYKpDZ4mY.roa (raw, json)
Hash identifier: aDykphD+aoMx3Jh78ZAzXroKL36r82PVvsKm3+s85wA=
Subject key identifier: B9:96:FA:87:B4:CB:7B:5F:A5:26:28:4F:86:2A:D8:2A:90:D9:E2:66
Certificate issuer: /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial: 019424458D27579B0EE7109429A610AB7CC7
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/uZb6h7TLe1-lJihPhirYKpDZ4mY.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209608
IP address blocks: 193.186.200.0/22 maxlen: 22
193.186.200.0/24 maxlen: 24
193.186.201.0/24 maxlen: 24
193.186.202.0/24 maxlen: 24
193.186.203.0/24 maxlen: 24
2a0d:76c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8d:27:57:9b:0e:e7:10:94:29:a6:10:ab:7c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b996fa87b4cb7b5fa526284f862ad82a90d9e266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:9c:f0:7f:69:68:a6:c7:06:d4:67:11:c3:
19:59:01:1d:ee:ba:a8:c7:e9:88:25:f2:c3:6c:a3:
27:f7:cd:f6:9c:ad:c5:21:1f:51:32:a5:80:24:5e:
3d:6c:cf:83:45:b5:9b:1f:5d:fe:4c:e4:52:14:b4:
5b:65:66:d5:60:4e:f7:46:8e:3f:dc:08:d9:d5:eb:
1a:dc:91:66:c1:12:fe:76:d0:be:de:82:1b:27:ec:
e1:04:2c:62:50:ac:09:4b:21:71:ef:1b:cc:b7:43:
a7:94:4a:a8:9e:5e:15:c6:56:87:15:c6:ec:34:12:
de:e5:13:16:58:17:9a:8b:b4:33:85:f4:a7:9b:17:
73:94:a3:54:97:22:7e:3f:e5:47:86:d8:b4:d4:0a:
4f:8d:cf:06:ea:4d:99:d3:0f:ab:87:5d:37:2d:32:
be:9b:7b:f2:d8:f7:cc:98:ba:73:a7:f4:19:bf:21:
31:a5:76:53:26:d0:3c:78:d6:24:34:12:a9:65:5d:
45:a6:8c:52:fd:c8:07:3d:19:52:dc:4e:4f:5a:c7:
35:d8:b5:da:ab:db:79:5a:2d:70:2d:9c:0c:cb:99:
2a:0b:56:67:a8:d9:12:cb:1c:c5:1d:06:36:60:6b:
52:7e:9f:ea:01:7c:fe:fc:d5:c2:21:d8:eb:f9:f1:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:FA:87:B4:CB:7B:5F:A5:26:28:4F:86:2A:D8:2A:90:D9:E2:66
X509v3 Authority Key Identifier:
keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/uZb6h7TLe1-lJihPhirYKpDZ4mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.200.0/22
IPv6:
2a0d:76c0::/48
Signature Algorithm: sha256WithRSAEncryption
96:fb:f6:59:ec:6b:32:99:18:08:16:c8:05:7e:31:2e:23:ef:
53:18:b9:5c:1b:d4:8d:d3:5c:e8:9d:52:28:b3:48:8c:3a:87:
4c:af:cd:98:90:91:15:33:dc:2a:fc:91:f1:e4:f5:a9:a1:3d:
a1:9a:69:6b:85:61:83:dc:4e:cd:6c:24:2e:9d:fb:65:48:2b:
04:6b:fe:ee:22:46:ed:04:64:6d:ba:1f:3c:96:de:3c:99:a1:
7e:a3:60:b2:90:e6:d0:7f:19:4f:e7:3e:8c:64:4d:4c:ee:ac:
dd:88:9c:f9:56:f4:a2:4d:34:a1:b5:b2:0d:94:1e:8b:12:0a:
c8:fa:72:52:5b:61:80:14:e3:7e:6c:13:b5:72:54:b7:0d:a3:
4a:ac:19:f4:3f:de:5e:e7:71:ab:44:b7:24:cf:ab:2c:ec:a5:
11:2e:a7:de:9a:e7:cb:4e:f5:93:c4:32:1e:a1:92:a9:65:71:
b8:d3:0b:7b:cf:6f:40:46:3b:50:d3:ea:fa:74:ee:86:9f:16:
7f:33:6d:18:83:6b:58:9f:6e:1d:ef:3b:60:7e:a1:8a:6a:9a:
9e:d9:c0:52:c7:1f:bb:59:90:8f:a7:32:ef:86:8e:6f:86:37:
4b:91:a0:15:2a:a0:d2:fa:91:23:79:c5:91:90:71:6c:fa:2f:
26:95:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:03 2025 by rpki-client