Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/KYCYq5X0iEhUtzGSaC9H1ax0Htw.roa
File: KYCYq5X0iEhUtzGSaC9H1ax0Htw.roa (raw, json)
Hash identifier: QBbqltNdSI/EobpMguzUIBI+VsqB5DXvVTKIAFiDAMQ=
Subject key identifier: 29:80:98:AB:95:F4:88:48:54:B7:31:92:68:2F:47:D5:AC:74:1E:DC
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 34C29B86
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/KYCYq5X0iEhUtzGSaC9H1ax0Htw.roa
Signing time: Mon 25 Apr 2022 10:41:04 +0000
ROA not before: Mon 25 Apr 2022 10:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 193.106.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885169030 (0x34c29b86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Apr 25 10:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=298098ab95f4884854b73192682f47d5ac741edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:1b:67:5a:53:21:c6:fe:bd:35:d9:82:41:
d6:b3:03:e0:30:99:b6:86:64:2c:dc:8f:e7:20:93:
07:e0:4c:a4:f5:ab:9f:62:43:04:41:7f:f0:97:23:
4c:df:87:ed:b8:70:2a:a8:b8:2a:a2:3c:e6:8c:df:
6d:a8:22:9b:ad:8f:73:7c:bf:10:81:a2:c8:fe:21:
07:a2:4c:87:e9:a1:69:74:d2:d4:63:a0:d1:e6:d6:
7b:e1:88:d5:e7:87:ef:ce:27:3c:8b:ea:2d:4d:e1:
f0:b7:a3:3a:e6:39:be:4d:c2:d2:5b:7f:d9:a2:05:
00:3b:ba:1d:46:38:95:84:63:1e:11:83:56:c5:61:
79:b3:79:99:a3:48:5b:16:e6:b7:cf:a5:37:f2:47:
fa:f5:4c:7c:7f:a3:37:d1:4a:37:e1:dc:1b:51:cd:
f8:e9:7d:c4:45:82:34:23:aa:13:6b:c6:26:f4:98:
f4:b7:a3:4e:ba:5a:0e:92:16:32:1a:3b:31:9a:2c:
af:15:95:73:a5:86:2a:b8:9d:36:00:39:b1:1b:45:
81:99:46:3c:f0:b9:7d:94:47:e7:2b:0e:83:91:1e:
98:6c:1b:f6:d7:75:27:3f:ee:08:57:cf:35:02:09:
70:f6:20:7d:21:15:53:57:1f:c7:50:65:04:ee:17:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:98:AB:95:F4:88:48:54:B7:31:92:68:2F:47:D5:AC:74:1E:DC
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/KYCYq5X0iEhUtzGSaC9H1ax0Htw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:3f:d4:34:5b:e8:b7:9b:47:27:b9:4f:99:f5:46:36:b7:c9:
33:e2:62:e2:9b:a0:f8:ac:f4:60:95:5e:19:25:0a:c8:2b:dd:
36:b0:fc:6a:ab:43:ee:9a:50:b8:c8:68:c9:3a:2b:38:77:d8:
7e:f4:e4:79:98:f4:a9:b7:f7:1b:85:8a:f6:e5:6f:1a:91:66:
ef:c5:ae:72:b8:b6:a0:4a:81:ff:2a:49:d2:27:c4:30:1d:1e:
16:ba:de:68:f6:69:63:d0:1a:11:2d:d2:1a:bf:9a:a3:64:c3:
6e:bc:fa:40:0f:37:29:b9:06:f6:b8:64:1b:bc:e0:09:ba:f8:
f2:1e:c7:42:68:b1:41:da:45:1c:67:59:0d:b3:92:a3:4b:c7:
cc:92:56:09:19:48:c5:0a:30:73:cd:49:21:8b:cf:2b:e0:39:
6c:0c:9e:72:31:25:65:78:5c:ed:71:5b:96:45:58:95:8c:bc:
81:44:43:83:d5:87:49:5f:e5:9f:9c:a9:c1:24:3b:06:05:d1:
99:2c:e0:3c:8f:00:91:a0:cb:f2:fe:d6:59:35:ef:d9:a6:80:
a7:37:67:19:0a:2b:e6:69:c7:20:b6:25:56:2d:be:c8:30:aa:
71:36:c2:ef:ab:d7:01:e3:03:19:ae:bd:83:44:06:cc:2b:c1:
fd:fc:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:18 2025 by rpki-client