Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/SKbZ5Vim6MsMqsKaiSNMYR6E0LQ.roa
File: SKbZ5Vim6MsMqsKaiSNMYR6E0LQ.roa (raw, json)
Hash identifier: F+KeNjJBAs0LZhVNW1JDNj+LKUfiLuZAPwNvrkbPdms=
Subject key identifier: 48:A6:D9:E5:58:A6:E8:CB:0C:AA:C2:9A:89:23:4C:61:1E:84:D0:B4
Certificate issuer: /CN=a63f6e1452b6b25bb40a27d6899420fa45cf443e
Certificate serial: 0188E7569BC1C233D60DBE4ED9A74C31F27E
Authority key identifier: A6:3F:6E:14:52:B6:B2:5B:B4:0A:27:D6:89:94:20:FA:45:CF:44:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj9uFFK2slu0CifWiZQg-kXPRD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/SKbZ5Vim6MsMqsKaiSNMYR6E0LQ.roa
Signing time: Fri 23 Jun 2023 08:19:52 +0000
ROA not before: Fri 23 Jun 2023 08:19:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13154
IP address blocks: 193.105.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:56:9b:c1:c2:33:d6:0d:be:4e:d9:a7:4c:31:f2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63f6e1452b6b25bb40a27d6899420fa45cf443e
Validity
Not Before: Jun 23 08:19:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48a6d9e558a6e8cb0caac29a89234c611e84d0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:5e:a7:03:ed:55:64:a0:5b:c3:44:0b:8c:
71:36:b2:eb:1e:de:32:60:d7:f2:b0:4e:b8:41:f5:
d6:c2:cf:17:67:0c:9d:fc:82:c0:d3:c9:ff:b7:70:
97:78:ff:5d:6f:e4:b7:fc:08:3d:25:0c:18:79:89:
84:8b:d2:e0:47:3a:37:fd:2e:94:41:37:f5:0c:b7:
6a:e3:dd:82:ff:8f:c3:15:7f:06:c6:3f:96:16:5d:
42:df:b2:f9:39:66:01:c7:08:5d:0e:17:c7:c6:c2:
0d:cd:fa:b3:e7:b0:91:bd:86:c1:0d:04:e6:d4:f9:
cf:47:c0:94:fa:c2:c6:f7:7c:92:9f:15:57:65:e0:
22:bc:95:74:52:95:58:9b:79:60:c6:72:ef:fa:d2:
0b:38:a6:ba:41:31:3f:32:59:9a:74:06:37:75:ca:
da:8c:43:81:92:25:e0:85:31:66:3e:cf:78:b3:d0:
3b:c3:c4:f4:30:18:4b:58:f5:fd:2b:89:47:dd:4b:
88:9d:ec:c4:cd:5e:6a:e6:a1:67:f7:9a:2e:f7:3d:
1c:fb:28:fa:52:79:f1:1f:97:64:61:e2:82:e7:81:
66:c3:a7:c4:a1:90:6f:13:ab:90:d7:54:1e:99:ec:
80:7b:78:95:00:2f:dd:fa:93:81:19:8b:76:a6:62:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:D9:E5:58:A6:E8:CB:0C:AA:C2:9A:89:23:4C:61:1E:84:D0:B4
X509v3 Authority Key Identifier:
keyid:A6:3F:6E:14:52:B6:B2:5B:B4:0A:27:D6:89:94:20:FA:45:CF:44:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj9uFFK2slu0CifWiZQg-kXPRD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/SKbZ5Vim6MsMqsKaiSNMYR6E0LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/pj9uFFK2slu0CifWiZQg-kXPRD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:7e:d0:e7:3f:8d:9d:eb:96:3b:b7:55:bb:9d:be:d8:60:71:
e0:74:40:4c:99:4c:85:85:95:8b:54:2a:be:6b:75:c1:55:9b:
ba:05:67:e0:f3:ae:9e:ae:f4:b3:3c:ae:dc:12:1e:3b:a4:5a:
0a:4a:18:80:04:21:d4:3b:9d:80:67:dc:ed:b5:4e:f7:f1:c1:
cb:ad:b1:17:b9:de:34:ab:b6:9a:a6:c4:1b:95:7c:e9:81:7f:
17:52:be:47:09:e5:3e:5e:22:da:74:a6:c4:95:e2:b1:ab:f5:
8d:55:0f:a3:97:40:7d:6c:2c:a5:e5:3e:86:a3:40:34:4b:6a:
16:ee:61:dd:41:ff:26:71:e7:7b:a4:7c:39:63:6f:46:66:d6:
e7:36:d0:7c:66:c2:ff:3f:51:2b:69:a2:19:56:af:88:ae:df:
5c:e2:4f:b7:c8:83:2e:1a:6b:16:cb:2a:d5:a4:ae:38:86:ff:
94:1a:3c:c2:10:d2:27:8b:3c:02:8c:9c:0d:87:95:3d:6f:84:
87:cb:a4:b3:b4:ef:a5:af:ee:0e:e4:c1:e6:77:3f:c2:81:a1:
19:05:81:0b:7d:73:de:bd:7b:ea:1b:59:2c:b0:de:cb:e6:d9:
39:84:db:46:93:fb:92:97:e8:2f:8d:cc:b8:1a:0a:74:bb:05:
4c:f1:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:23 2025 by rpki-client