Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/d5SJu47KBcMbWyp6vIAg_ljCtsw.roa
File: d5SJu47KBcMbWyp6vIAg_ljCtsw.roa (raw, json)
Hash identifier: Ry8tl1ga5XaDEZZAYMUN7p15NXCzKoc9EfXTLjyefL4=
Subject key identifier: 77:94:89:BB:8E:CA:05:C3:1B:5B:2A:7A:BC:80:20:FE:58:C2:B6:CC
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 0194236A3CA74A826F01EFA13CC93F00410A
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/d5SJu47KBcMbWyp6vIAg_ljCtsw.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1961
IP address blocks: 193.38.176.0/23 maxlen: 23
193.38.176.0/24 maxlen: 24
193.38.177.0/24 maxlen: 24
193.38.180.0/23 maxlen: 23
193.38.180.0/24 maxlen: 24
193.38.181.0/24 maxlen: 24
193.38.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3c:a7:4a:82:6f:01:ef:a1:3c:c9:3f:00:41:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=779489bb8eca05c31b5b2a7abc8020fe58c2b6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:a8:ce:9c:03:cb:99:03:1f:08:7d:e3:70:
fb:c7:2b:e8:70:21:ac:c1:9b:ce:2c:30:5b:c4:dc:
69:66:08:a9:07:2b:bd:bc:8f:51:ac:73:23:3e:81:
c7:a4:92:82:0e:77:cc:e7:e9:bd:bd:3b:76:d2:66:
50:f3:90:2c:a2:45:3f:2c:f4:3f:b6:90:9f:52:ab:
f5:7d:79:ab:26:eb:b2:c5:99:98:9b:56:ae:8e:7f:
a9:db:81:08:46:bd:48:51:42:23:13:9e:ff:7f:4e:
fd:0b:0a:23:bf:8b:f6:6b:00:58:fb:bb:6c:f8:cb:
74:66:94:2f:b2:7c:3b:a1:ba:bf:da:4a:64:ec:4c:
3e:6a:cb:6d:af:f6:8f:57:36:3b:b2:55:a6:5a:29:
e8:c1:a3:2a:74:e0:14:a6:f5:50:5d:de:d1:d5:17:
99:14:76:9f:af:e6:01:62:b8:3e:3b:bc:82:d4:2e:
5d:31:68:46:89:17:4a:53:22:5b:6a:e8:d9:39:2c:
bf:54:24:1c:8d:c5:71:67:d6:b0:67:d4:aa:b6:39:
df:52:f2:22:99:6e:f3:bb:ac:8c:9d:3e:68:86:87:
0c:b5:04:b5:bf:7b:12:bb:dc:83:a8:05:2d:ba:fd:
16:44:24:34:59:7b:4c:96:86:ae:b6:e9:66:80:74:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:94:89:BB:8E:CA:05:C3:1B:5B:2A:7A:BC:80:20:FE:58:C2:B6:CC
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/d5SJu47KBcMbWyp6vIAg_ljCtsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.176.0/23
193.38.180.0/23
193.38.190.0/23
Signature Algorithm: sha256WithRSAEncryption
82:44:81:25:35:e6:57:b6:fc:75:7f:c4:5f:95:00:f3:d9:64:
53:51:a7:23:fb:11:26:bc:d7:5e:9f:8b:34:4a:c9:99:79:3f:
62:5e:1e:a7:07:a1:d3:0a:92:27:bc:55:01:bf:49:84:aa:19:
72:be:d9:3a:f3:58:48:3a:90:5a:77:81:27:18:fa:27:7f:0c:
5c:f1:0a:32:d3:18:ec:d3:6b:f1:bf:f7:2c:83:0d:d8:d0:b5:
03:c2:73:1c:fa:d9:70:38:dd:e1:39:36:4f:ef:e4:f7:d2:04:
b1:18:21:9b:a8:f2:90:fa:c9:cb:03:49:4b:61:01:8f:b7:e9:
f3:bf:fb:90:7a:f5:59:02:7f:3b:2d:61:13:37:c9:af:f2:8d:
ce:04:d3:56:40:b2:41:58:05:95:30:5e:f5:d6:ea:78:79:ec:
47:b0:df:ff:24:88:7c:7f:30:89:29:2c:7f:53:ed:af:72:d9:
d2:62:00:da:22:0d:32:5e:d4:eb:a2:dc:55:b4:59:0b:90:a5:
f1:59:51:73:d6:1c:24:af:66:1e:dc:98:a9:e9:05:3f:e9:b0:
be:73:4a:87:d4:98:20:b1:26:f2:8e:56:44:ea:43:8c:46:97:
31:6a:da:bf:fd:52:2b:14:69:c6:e7:dd:dc:e9:8a:64:80:1d:
3f:14:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:43 2025 by rpki-client