Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/1hbevT8gwbMVGXnU3oslqDok4xQ.roa
File: 1hbevT8gwbMVGXnU3oslqDok4xQ.roa (raw, json)
Hash identifier: PvOSpkQG3GMAcOSv9DP0juXGFg1PxvMowO3npVuSH5E=
Subject key identifier: D6:16:DE:BD:3F:20:C1:B3:15:19:79:D4:DE:8B:25:A8:3A:24:E3:14
Certificate issuer: /CN=867dd05ad72dc22fbea3029fcee90e6fb0638904
Certificate serial: 01941F8C08FB032D56C6D2EA6FB687C97255
Authority key identifier: 86:7D:D0:5A:D7:2D:C2:2F:BE:A3:02:9F:CE:E9:0E:6F:B0:63:89:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hn3QWtctwi--owKfzukOb7BjiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/1hbevT8gwbMVGXnU3oslqDok4xQ.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51368
IP address blocks: 193.104.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:08:fb:03:2d:56:c6:d2:ea:6f:b6:87:c9:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867dd05ad72dc22fbea3029fcee90e6fb0638904
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d616debd3f20c1b3151979d4de8b25a83a24e314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:32:a8:0a:ee:d8:99:db:05:d8:e9:6a:31:
63:fc:58:44:ac:30:f2:3a:55:d7:e7:8f:23:c0:e1:
ad:f1:bc:3b:93:f1:4e:83:aa:66:2d:fc:2e:b7:1d:
59:3b:c9:2f:59:e4:15:ce:b9:31:c7:38:72:d3:ea:
2a:88:8b:f9:31:8d:a1:d3:79:07:a5:28:75:77:61:
96:98:57:9e:ae:e8:06:0c:ce:c0:f6:5b:47:16:bb:
ae:ba:f8:f8:c5:2a:f6:13:53:f0:90:cc:99:40:8e:
00:39:47:fd:04:77:b3:fd:ee:99:e1:24:a0:53:e5:
b8:88:31:7d:1d:5b:4d:37:64:ff:c0:4f:40:6e:bb:
2a:8c:f9:cc:05:f7:16:6a:16:76:ba:e3:4a:5b:ac:
99:77:07:df:ca:06:4c:a9:e7:07:50:6c:f4:e5:7e:
ac:3f:45:d0:df:09:7e:81:21:34:0c:17:23:bf:f1:
90:95:9c:df:6f:fb:fb:df:c2:f1:73:4c:9c:50:41:
3b:9c:4f:64:91:bb:78:02:d0:d5:61:0b:14:38:a6:
d7:8e:e6:25:0c:8a:fe:15:0d:62:a0:3f:57:f8:71:
36:fa:f1:be:da:c5:24:d5:da:df:c7:e9:48:ee:e1:
98:c5:00:80:b6:e4:3e:86:2a:0b:6a:e5:6e:1b:62:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:DE:BD:3F:20:C1:B3:15:19:79:D4:DE:8B:25:A8:3A:24:E3:14
X509v3 Authority Key Identifier:
keyid:86:7D:D0:5A:D7:2D:C2:2F:BE:A3:02:9F:CE:E9:0E:6F:B0:63:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hn3QWtctwi--owKfzukOb7BjiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/1hbevT8gwbMVGXnU3oslqDok4xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/hn3QWtctwi--owKfzukOb7BjiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.112.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b1:65:ff:35:f0:79:19:74:d2:da:6c:b7:81:08:9f:47:47:
ed:39:09:4b:fd:99:ae:e9:7f:d9:fc:0b:10:58:4f:24:51:28:
37:79:6b:6d:cb:00:27:5d:77:bd:e9:5c:56:85:af:42:a3:f3:
ec:cd:08:4c:5c:c9:7a:88:74:c9:c0:12:b3:54:09:b7:95:ba:
f9:a3:94:de:a3:c5:db:9b:ea:f2:d3:98:b9:65:09:1f:eb:bb:
f8:69:c6:82:02:90:26:81:e0:10:69:96:6a:bd:2d:88:98:86:
50:dd:35:ac:f6:ff:7e:81:3d:83:cb:f5:c8:f7:3d:3a:ac:16:
a5:57:d9:33:1b:55:65:42:a3:69:7e:38:cd:73:e5:52:60:38:
31:71:ec:37:23:8e:8f:ed:79:ef:46:df:98:be:5c:f5:49:e7:
57:98:40:e8:f1:81:2b:b2:be:3f:e3:68:8c:1b:75:b8:f6:cc:
c0:26:f9:ec:24:c3:05:16:18:d2:0c:1b:10:e5:7a:29:7e:2f:
d8:b9:4a:b2:d0:d3:ab:3a:5e:39:83:4f:43:af:ee:aa:ca:96:
be:76:f2:d9:69:a3:d0:7a:31:5b:2b:46:2c:27:82:60:ca:ed:
79:30:50:2c:fe:5f:2f:a4:dc:e0:e2:ff:70:52:87:46:fa:96:
fc:d8:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:06 2025 by rpki-client