Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/M82sfYNUsyqK13nZZfstvwDd7Fs.roa
File: M82sfYNUsyqK13nZZfstvwDd7Fs.roa (raw, json)
Hash identifier: Pwd9phO+f2VaYBcGPbgT8icjGcqdGdD4Q6fe+fixav0=
Subject key identifier: 33:CD:AC:7D:83:54:B3:2A:8A:D7:79:D9:65:FB:2D:BF:00:DD:EC:5B
Certificate issuer: /CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Certificate serial: 019426D9D418B26392E459A0F9B6DBA60FB1
Authority key identifier: 3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/M82sfYNUsyqK13nZZfstvwDd7Fs.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34125
IP address blocks: 193.29.2.0/24 maxlen: 24
212.2.64.0/19 maxlen: 24
2a0a:ba80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d4:18:b2:63:92:e4:59:a0:f9:b6:db:a6:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33cdac7d8354b32a8ad779d965fb2dbf00ddec5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:fc:d3:f6:bd:a9:4f:67:60:0a:bb:45:9e:
37:b7:47:85:46:14:88:96:36:09:4a:3e:54:81:76:
04:1a:3e:c7:90:92:5e:02:2c:8c:56:ab:4a:d7:96:
a9:55:92:93:55:d6:33:35:87:fa:92:d6:3b:88:e6:
b9:23:09:1d:5a:c3:cf:4f:34:a4:e9:2f:f9:ca:ff:
e5:76:67:32:6e:93:3b:7e:7b:25:70:03:11:73:a6:
0d:96:f7:27:c4:57:4c:95:79:a7:ee:31:c7:fe:27:
d5:c5:81:cd:73:ce:a1:8e:3a:98:ce:86:14:01:f7:
64:43:0b:68:4f:d4:45:0f:ae:37:4e:7a:44:6b:57:
26:7e:cf:45:f9:8f:2d:1f:26:ef:77:11:5f:dc:4e:
d7:b1:e1:ca:e5:ea:02:5f:69:b2:a0:94:e2:9a:da:
90:0f:79:a8:1a:77:ae:4a:d1:42:3a:1f:fe:45:aa:
be:ec:61:04:bf:0d:26:90:15:b8:2e:15:8c:a8:63:
1f:f3:25:98:ec:4b:a5:a0:c3:c5:90:4f:c9:29:05:
0b:d0:84:99:00:d5:1c:18:be:2e:32:82:84:34:9e:
2f:b9:0b:77:f9:59:b6:09:7e:0e:6a:b0:d6:11:9b:
49:8b:b1:f7:0d:80:3e:1e:67:a3:00:59:1d:00:0c:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CD:AC:7D:83:54:B3:2A:8A:D7:79:D9:65:FB:2D:BF:00:DD:EC:5B
X509v3 Authority Key Identifier:
keyid:3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/M82sfYNUsyqK13nZZfstvwDd7Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.2.0/24
212.2.64.0/19
IPv6:
2a0a:ba80::/29
Signature Algorithm: sha256WithRSAEncryption
20:0b:8b:29:d5:74:76:b4:23:dc:03:7a:53:67:b4:78:41:50:
53:db:f0:ad:68:26:d3:59:5f:cd:79:3c:45:f4:55:72:cd:49:
17:11:f1:27:43:42:ae:a0:0e:9f:65:1e:04:ba:90:71:fc:2c:
14:45:04:8d:97:00:f4:c5:92:c8:47:85:e1:ec:49:d6:e7:80:
11:80:cc:ca:ba:58:8b:55:3e:4e:10:04:89:53:3e:a8:69:43:
af:48:80:d8:a8:f0:4e:97:6b:cf:30:59:41:f4:a2:75:39:d3:
80:56:91:d8:f5:ab:08:da:75:96:48:4b:f0:ab:3a:8d:09:d8:
c8:5c:76:4c:91:7d:e7:04:b8:c6:2c:13:70:04:62:b2:ca:06:
22:28:64:b0:bd:44:fc:7f:51:75:98:82:0f:41:21:3f:b1:38:
5f:0b:a1:4c:fd:7f:3a:21:16:27:ff:4c:68:86:db:d0:63:96:
fd:35:a1:4b:c4:e9:80:be:af:b4:28:b9:f6:ac:51:3e:84:1d:
84:8f:8f:a8:b7:d9:8d:98:88:00:4a:84:4c:8d:28:bc:a5:d6:
d5:40:a6:f6:5e:f3:d8:61:84:f1:a5:26:a5:ea:b1:c0:41:96:
d8:c3:37:53:72:d1:99:cb:b2:e9:7f:4d:95:e5:5e:e4:33:1d:
07:d6:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:22:18 2025 by rpki-client