Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/GeEhJpkO5WEp0V80xW7FkFa1oZU.roa
File: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (raw, json)
Hash identifier: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=
Subject key identifier: 19:E1:21:26:99:0E:E5:61:29:D1:5F:34:C5:6E:C5:90:56:B5:A1:95
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 019420D5B21E7B76CC0D2E3DDBA785A63C2C
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/GeEhJpkO5WEp0V80xW7FkFa1oZU.roa
Signing time: Wed 01 Jan 2025 07:47:43 +0000
ROA not before: Wed 01 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47995
IP address blocks: 193.164.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b2:1e:7b:76:cc:0d:2e:3d:db:a7:85:a6:3c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Jan 1 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19e12126990ee56129d15f34c56ec59056b5a195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:61:63:49:16:e1:ac:52:7c:3f:38:37:f0:
10:c0:94:91:1b:3e:c1:8a:7f:82:ad:6f:cd:fe:7c:
6a:76:05:af:45:39:6c:f7:85:60:e3:df:60:90:d9:
2f:39:e1:c0:04:7b:cf:8c:9e:67:23:f6:16:9d:2f:
23:a6:a9:d9:4e:7d:54:9e:8a:28:19:90:34:a0:cb:
2f:cd:f2:b1:84:1d:1e:d9:6f:d5:63:d8:d4:97:df:
6c:f6:e9:25:4c:bd:64:16:82:54:f6:4b:69:43:84:
65:32:35:5a:e5:a8:f5:4a:6a:c3:d0:44:4a:34:f2:
5a:1e:b3:29:df:b5:56:f2:18:c0:a1:1c:a3:d5:f1:
c8:a9:e2:7d:6c:53:7a:c4:10:58:86:f2:e3:49:5d:
64:c5:57:0e:e8:a5:74:e0:8d:fb:2e:d2:d2:68:17:
f6:fe:40:78:15:13:0e:fc:d6:73:b5:2a:80:79:b6:
83:69:17:66:cd:e4:e0:2b:f8:f2:0f:03:9e:7d:ed:
49:61:39:e7:88:8d:fc:4c:b6:11:12:da:59:27:83:
8a:31:79:6c:5c:34:b4:33:d5:bb:d3:df:9b:1c:a5:
b0:41:5e:2d:8a:c7:11:e4:85:ef:fa:4f:11:4a:94:
6b:c5:95:03:c5:2f:2d:99:bb:9c:17:2d:df:ac:75:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:21:26:99:0E:E5:61:29:D1:5F:34:C5:6E:C5:90:56:B5:A1:95
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/GeEhJpkO5WEp0V80xW7FkFa1oZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.16.0/22
Signature Algorithm: sha256WithRSAEncryption
05:1b:37:62:14:84:02:05:22:a8:2f:b0:88:26:e3:f7:bc:92:
3d:21:47:b4:d8:da:54:b5:6c:1f:ec:46:55:26:e7:25:a6:23:
71:92:ad:5c:c1:6b:20:89:5e:ed:d9:4c:b0:a1:46:e6:d8:21:
63:ba:90:76:e0:a4:bb:5b:9e:d9:5a:17:3c:0b:39:81:83:18:
56:02:e3:ff:98:80:ac:cf:a1:2f:27:51:16:b9:cd:8a:60:4a:
20:1e:bc:95:a0:c8:03:4c:46:59:e5:1c:d7:de:0a:1e:2a:d7:
39:b0:a8:ea:7c:fa:0e:c0:c4:0c:5b:16:d6:17:fc:2c:3e:8b:
7c:0a:1a:ae:1e:59:14:b4:61:bc:91:e6:72:5b:67:e2:82:56:
47:62:1a:61:b5:cf:5b:ad:cc:cf:4e:59:a6:b5:0f:3e:79:08:
8a:26:f2:b7:eb:2a:7d:5b:16:76:b9:90:6b:5c:a6:a4:9e:ec:
c2:18:f4:4f:18:0c:bc:06:26:f0:9b:27:05:6e:93:ca:42:37:
d0:c7:f0:cf:61:68:37:22:80:29:bd:57:d2:0e:cb:2e:8f:69:
a1:53:c3:2a:59:0a:c8:7a:26:15:df:c2:91:28:64:72:1e:cd:
1b:55:bb:21:d2:41:cd:f5:53:77:54:94:05:eb:22:69:50:3f:
2f:c9:dc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:44 2025 by rpki-client