Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/BurDBcgFQVkMwRiYLWeJY79sNrs.roa
File: BurDBcgFQVkMwRiYLWeJY79sNrs.roa (raw, json)
Hash identifier: PIm0WqixU85Fkdfl5W6pQZT5vwItX53uE2I4kEYvdSI=
Subject key identifier: 06:EA:C3:05:C8:05:41:59:0C:C1:18:98:2D:67:89:63:BF:6C:36:BB
Certificate issuer: /CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
Certificate serial: 0182020D1910C8B69D4E23B27F8AA4CB9AEF
Authority key identifier: D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/BurDBcgFQVkMwRiYLWeJY79sNrs.roa
Signing time: Fri 15 Jul 2022 13:29:48 +0000
ROA not before: Fri 15 Jul 2022 13:29:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203709
IP address blocks: 193.34.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:0d:19:10:c8:b6:9d:4e:23:b2:7f:8a:a4:cb:9a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
Validity
Not Before: Jul 15 13:29:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06eac305c80541590cc118982d678963bf6c36bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:4d:42:17:82:07:1c:a9:d4:9d:56:52:a5:
8b:2e:e0:17:6b:bd:79:c4:57:b8:27:5a:22:04:03:
34:a7:15:4a:f0:b9:d3:a8:21:67:7c:22:1d:bd:a3:
d4:46:66:8e:95:0c:e1:71:72:94:46:af:77:85:5b:
4d:19:55:5e:5f:fe:1d:29:30:76:cf:7f:de:f0:5c:
d9:67:87:d9:ca:44:77:8f:a6:00:17:ee:35:4e:e1:
d1:5e:59:5d:70:b3:79:82:ee:f0:e5:e4:fe:02:b1:
e6:36:c8:5c:20:6b:12:5e:1d:d5:14:d6:9a:33:b8:
80:24:4b:d8:3d:0c:37:33:60:b8:c8:47:1f:11:1f:
68:e3:34:d9:58:0b:8d:8d:3f:e1:60:e7:6c:ab:21:
bb:dc:d4:04:ee:3e:99:36:b0:a2:98:04:d7:e8:2f:
40:e2:63:77:ba:47:4f:f8:43:6b:15:69:49:f6:9f:
62:74:8d:03:4b:dd:eb:59:15:c1:e4:16:57:36:b0:
70:31:e8:3a:57:1e:6c:cd:25:17:64:6c:0b:9f:54:
c1:a8:73:61:3d:40:59:59:f7:af:2f:e0:4f:ab:95:
6d:2d:1f:6d:f5:e7:d6:42:0b:a3:f7:8b:7e:f9:0d:
68:10:8c:99:03:f9:6c:dc:58:e7:08:12:18:84:d6:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EA:C3:05:C8:05:41:59:0C:C1:18:98:2D:67:89:63:BF:6C:36:BB
X509v3 Authority Key Identifier:
keyid:D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/BurDBcgFQVkMwRiYLWeJY79sNrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/2ewIW6qMqntbk07KKcF5YfyI2xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.243.0/24
Signature Algorithm: sha256WithRSAEncryption
39:20:7c:fd:6f:a0:46:d1:55:c3:f0:a8:78:95:85:12:4b:59:
8c:65:e2:a1:96:22:f2:18:a5:d2:d0:9f:96:6d:51:3b:9d:0b:
58:89:31:a3:b2:e5:cb:5b:fd:b3:9a:ba:a7:0a:97:7c:30:c9:
13:34:2e:51:f2:72:1a:7a:c5:7e:d2:53:97:df:8c:e1:aa:89:
8a:95:aa:67:64:d6:fb:f3:85:3c:54:f0:18:05:af:b6:e2:58:
7b:15:8b:0b:fe:77:a6:51:58:10:a1:d5:e8:e0:0e:95:96:e5:
53:60:2d:8d:7a:57:e7:20:59:15:1d:23:7f:a8:fb:d2:0c:80:
2a:6f:0d:99:bf:1f:19:e1:72:4a:0e:b6:2f:fb:70:f6:35:a0:
d2:f7:ff:12:c2:f4:fb:73:c8:39:9a:68:9f:69:c7:5c:90:b5:
ef:08:d7:d3:1d:3a:de:a9:10:54:8a:d5:0d:6f:cc:41:95:bd:
be:32:06:77:ec:bc:a2:86:a1:4f:a6:48:ff:1c:20:32:a4:15:
39:c4:66:d5:c4:67:77:b3:e8:63:65:23:3c:79:09:1f:50:7c:
eb:5b:a0:c8:e3:b9:cb:5b:e7:76:60:87:aa:b5:27:df:bf:7b:
54:95:41:01:18:4a:02:7d:d8:68:d5:ef:ce:5c:66:f6:2b:fc:
de:01:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:19:53 2025 by rpki-client