Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/pa5HePIwYLGZT4FlyIIuIImBBQ4.roa
File: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (raw, json)
Hash identifier: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=
Subject key identifier: A5:AE:47:78:F2:30:60:B1:99:4F:81:65:C8:82:2E:20:89:81:05:0E
Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial: 019426D981D6ACD8E822A063A9E0B84E5C41
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/pa5HePIwYLGZT4FlyIIuIImBBQ4.roa
Signing time: Thu 02 Jan 2025 11:49:36 +0000
ROA not before: Thu 02 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213842
IP address blocks: 193.101.12.0/24 maxlen: 24
2a01:e540::/40 maxlen: 40
2a01:e541::/36 maxlen: 36
2a01:e542::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:81:d6:ac:d8:e8:22:a0:63:a9:e0:b8:4e:5c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Validity
Not Before: Jan 2 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5ae4778f23060b1994f8165c8822e208981050e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:c4:e7:e6:bb:71:c2:da:96:35:a6:1a:58:
a8:96:f2:8a:72:44:ca:2a:a9:04:11:e7:7d:5e:4c:
7a:f0:34:c9:93:2a:a6:74:f7:c0:09:71:3a:1f:38:
f5:24:86:db:ee:c5:e7:08:51:12:8c:69:b0:ae:9f:
7e:71:dc:7a:a2:0a:1c:37:60:21:79:17:47:03:50:
04:17:5e:4b:76:46:b3:6f:ec:df:44:e2:29:73:08:
4c:08:62:88:a2:66:ae:60:27:05:ec:50:5f:f0:b2:
1a:ab:82:89:d8:5c:6e:c7:41:e5:3d:f3:32:2a:d9:
06:66:d6:54:02:0d:da:92:fc:b4:3a:0d:3e:89:1b:
bb:04:22:48:fe:43:e1:c2:2b:5b:67:3c:bf:8b:24:
2e:6e:f6:84:58:d8:4d:3b:60:34:fb:94:e1:98:ee:
31:c5:37:d3:87:89:fb:21:83:b9:c1:5b:71:62:44:
a6:f4:9c:61:85:84:54:a6:bf:88:49:4f:bc:6d:06:
50:8d:6d:91:59:ea:9b:26:c0:90:92:f1:cb:c5:f1:
e2:1f:fc:7c:1a:bc:fd:d5:cd:14:46:8d:3c:5c:2d:
56:79:d4:6b:9b:83:e1:de:a7:a7:cc:61:2d:e4:66:
32:2c:b8:df:8c:01:41:41:4a:d8:93:ac:18:0c:6b:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:47:78:F2:30:60:B1:99:4F:81:65:C8:82:2E:20:89:81:05:0E
X509v3 Authority Key Identifier:
keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/pa5HePIwYLGZT4FlyIIuIImBBQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.12.0/24
IPv6:
2a01:e540::/40
2a01:e541::/36
2a01:e542::/36
Signature Algorithm: sha256WithRSAEncryption
6a:6c:f2:ad:bb:18:68:87:27:43:d9:ad:5e:7e:e2:68:f2:63:
e6:37:cd:32:d5:00:a3:e3:ea:53:e0:b5:c0:15:60:cf:68:57:
d1:d0:a0:2e:19:35:6e:a5:cb:d0:05:da:e4:dd:1a:e3:21:39:
4e:b1:26:d3:57:61:1b:ce:ef:f9:a8:50:dd:ce:b7:3f:0a:43:
e3:42:3d:a7:92:75:db:c2:3a:77:1a:5c:f2:01:2a:2d:4c:68:
d3:d8:03:39:91:9f:3e:7f:f8:9f:f2:c6:23:a5:17:7f:dc:27:
53:d6:1a:72:1e:a2:9a:93:a2:33:6c:1f:da:ec:8a:48:70:1d:
c5:c5:e1:7d:32:be:18:14:aa:72:3d:f8:99:52:80:8e:e4:58:
52:fd:ab:b1:b5:76:40:73:72:bb:f1:b3:d2:a6:5a:6b:61:71:
5b:99:55:0a:a0:5d:bf:9e:fc:3f:03:7e:67:aa:45:9b:71:88:
01:9f:0f:0f:31:d9:a4:2e:91:5b:66:2c:e8:0a:8d:13:c5:fd:
9b:cb:75:41:0d:e4:57:cc:09:f0:51:46:bd:c3:e5:d5:c1:63:
81:03:00:39:79:83:73:3d:56:ac:f9:b1:99:12:20:47:f2:9a:
d8:f0:8c:26:e9:4e:26:57:8d:87:a8:3e:88:d6:af:31:b4:77:
45:cd:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:39 2025 by rpki-client