Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa
File: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (raw, json)
Hash identifier: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=
Subject key identifier: 6C:80:66:85:40:B6:58:B5:81:5F:28:B9:55:A0:87:2C:5B:87:90:3B
Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial: 019423699B901693C07C08210D580DAEEC63
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42856
IP address blocks: 193.200.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9b:90:16:93:c0:7c:08:21:0d:58:0d:ae:ec:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c80668540b658b5815f28b955a0872c5b87903b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:2b:34:fe:7b:37:38:3b:ab:6d:dd:b4:69:
fa:0a:34:86:ab:0d:a2:f3:f9:34:b9:e5:84:60:3d:
ed:c1:20:05:47:e9:55:01:c3:17:7f:a9:16:eb:43:
dc:3d:83:c7:b8:3c:bc:95:02:94:83:5e:a0:6f:18:
14:0e:47:56:0d:ce:a7:d6:4a:d0:2c:93:6c:37:65:
1c:cf:81:2e:96:6a:e2:cf:83:44:b1:16:1a:ec:cd:
fc:3e:93:6d:53:88:15:ea:9d:79:dd:84:7d:ae:d5:
80:32:46:df:3e:91:3f:fe:2e:b0:e9:8d:d1:73:0f:
a9:7d:2d:24:b6:3e:fb:45:92:38:e0:f7:9c:1f:67:
ef:e0:69:5f:01:4c:2f:fa:53:22:23:74:04:ea:f7:
12:71:49:b7:f6:66:de:ef:ca:a6:17:94:31:74:16:
4c:d5:47:d2:21:2e:15:0e:b6:06:0c:00:5b:cf:a2:
a9:2f:3f:e1:d3:77:fa:e7:fe:29:71:83:a5:b2:58:
69:88:41:6b:a3:20:ea:9e:c0:42:f6:11:50:70:dd:
3f:07:11:44:36:d5:81:ef:42:71:82:63:d3:f2:fc:
02:82:80:a9:09:4e:d0:9a:34:a9:1a:73:e0:15:ca:
25:ce:cf:67:5b:f2:57:e6:77:db:7c:62:f4:97:d4:
ed:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:66:85:40:B6:58:B5:81:5F:28:B9:55:A0:87:2C:5B:87:90:3B
X509v3 Authority Key Identifier:
keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.137.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:69:61:43:9c:16:86:d6:74:fb:8e:48:3a:d5:a2:aa:44:a4:
01:1b:f2:13:04:fc:ee:af:6a:39:1e:8e:51:64:b1:f2:09:dd:
b9:51:23:0f:98:56:c1:68:96:09:48:1d:d0:20:29:b6:09:1c:
d9:06:5d:e6:ec:05:2f:a2:00:56:3c:c3:ba:ca:cf:3b:c0:36:
5a:f8:47:f3:48:a9:95:86:1f:48:ab:c2:64:0f:d7:93:e3:33:
7e:bc:93:05:1e:47:30:a2:6e:4f:9d:8a:35:a4:60:63:3b:ef:
e8:55:92:1b:80:e6:e4:c6:7c:f9:79:96:fc:e9:76:2a:7e:25:
6c:2f:4e:9b:9b:15:ba:1a:82:b9:28:7d:22:77:b8:04:b8:b0:
21:a3:23:3c:c6:33:f1:bb:e2:22:a3:88:ec:9d:5a:c4:fc:8e:
4a:1d:98:c4:7d:1e:89:64:6a:16:24:6b:80:7f:66:77:7b:af:
9a:d6:fb:c0:59:f4:f2:e0:cb:60:51:9f:74:f8:c3:86:7f:9d:
c5:f0:9a:12:c1:e3:af:8b:59:47:ae:b0:3c:94:3e:d5:56:23:
d1:9d:3e:5a:14:cb:ad:2c:68:b3:53:63:cf:6a:a5:1d:82:18:
dd:1e:ac:65:9d:a8:23:96:c7:44:61:3f:be:d1:14:89:0d:04:
a1:e3:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:55 2025 by rpki-client