Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/i3_lvFt5B8eAQ5h_wLReZoAtuK4.roa
File: i3_lvFt5B8eAQ5h_wLReZoAtuK4.roa (raw, json)
Hash identifier: AMEl4ue3vGBeOrF2erVPMx2vGDPmFu/fJj/6pniqRBY=
Subject key identifier: 8B:7F:E5:BC:5B:79:07:C7:80:43:98:7F:C0:B4:5E:66:80:2D:B8:AE
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420685D364ED864A8C4AFAA04224621CD
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/i3_lvFt5B8eAQ5h_wLReZoAtuK4.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216024
IP address blocks: 193.233.22.0/24 maxlen: 24
193.233.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5d:36:4e:d8:64:a8:c4:af:aa:04:22:46:21:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7fe5bc5b7907c78043987fc0b45e66802db8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:db:69:86:01:ab:4f:9e:c2:82:f6:70:00:
04:17:01:6d:1d:88:78:24:17:f1:77:d9:94:3a:52:
c2:3c:1d:f0:c0:83:b4:d0:1f:0a:dc:d0:b4:59:4d:
3f:f8:6b:46:83:87:b0:98:67:b6:59:2f:01:5e:c8:
a9:a5:a8:cd:70:b2:2b:a1:de:9b:18:fd:23:6e:ef:
f7:cb:ad:95:73:f2:a2:12:58:61:e6:14:db:47:57:
85:cb:74:f2:f5:97:1e:f6:08:27:d3:32:d2:9d:71:
28:55:72:bd:09:5d:78:b1:f9:54:36:9b:80:75:fa:
47:34:11:ae:0e:81:0a:58:97:bb:87:d5:bf:e1:ab:
5f:dd:89:41:cb:11:60:15:7b:42:2b:5e:7d:92:7b:
21:e6:8f:3f:3f:90:49:c1:0a:0e:2f:5b:a8:b0:1d:
79:13:d1:42:98:4e:b3:8a:88:32:ed:7b:19:4f:05:
b6:1f:e7:88:dc:52:51:20:02:7b:74:21:91:c6:42:
0d:f0:10:6c:27:3d:b1:3a:b8:5e:d7:3d:18:21:69:
46:22:0d:8e:38:d1:c5:45:0a:3f:39:42:5d:17:0c:
4f:91:1a:44:92:a6:62:39:72:69:b7:9d:71:e0:5d:
84:ce:2b:15:0d:14:26:37:a9:98:73:51:a1:90:c1:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:E5:BC:5B:79:07:C7:80:43:98:7F:C0:B4:5E:66:80:2D:B8:AE
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/i3_lvFt5B8eAQ5h_wLReZoAtuK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.22.0/23
Signature Algorithm: sha256WithRSAEncryption
22:d7:2b:82:5d:5c:24:9e:f9:85:ee:ac:63:a3:3e:04:d9:cf:
af:75:48:07:7e:3e:9d:e2:80:c3:19:19:ef:5b:bf:d4:68:02:
1b:c1:f9:c8:d0:53:9d:77:55:88:36:c7:76:e8:50:70:98:53:
c5:d6:18:e8:b4:c1:d4:7a:f6:a3:d8:31:58:18:16:1f:55:5e:
0f:d3:15:6e:96:51:fe:0a:7a:c2:43:3f:95:95:6b:a6:fa:52:
c0:1c:1a:dc:4a:19:61:8f:e4:ed:a1:65:f8:f4:0b:91:ee:9b:
cd:e7:00:ed:0f:4b:23:e5:61:73:26:2e:28:11:cc:07:4b:30:
04:93:6b:40:7a:87:e2:95:62:eb:c3:db:bc:98:ca:f9:00:e5:
c8:9f:c5:0c:90:36:8c:0e:48:1f:eb:48:3f:d1:b4:9c:7a:93:
d4:e5:01:5e:23:03:78:e1:92:a0:09:f6:ab:f0:2a:05:f4:65:
a0:f3:7e:2b:43:ad:84:89:99:2d:0e:26:29:17:74:6e:49:18:
ac:a8:38:74:32:c8:ee:83:39:0b:7d:a9:c3:02:28:5a:ae:f9:
eb:74:fa:4e:fe:06:64:e5:f3:dd:75:f6:7b:6d:8f:da:c0:31:
64:1b:7b:ab:a5:f4:b6:77:67:ec:8b:76:43:9f:24:23:4d:22:
d5:0e:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:45 2025 by rpki-client