Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/o4choIvZH3ImCmDJMKl01tyoeow.roa
File: o4choIvZH3ImCmDJMKl01tyoeow.roa (raw, json)
Hash identifier: L10WHK9uw8v6PcsB244sPAg4GtnVYCcyrgAo0vSkQRo=
Subject key identifier: A3:87:21:A0:8B:D9:1F:72:26:0A:60:C9:30:A9:74:D6:DC:A8:7A:8C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2109F2F6595E6805769DA81FFD85
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/o4choIvZH3ImCmDJMKl01tyoeow.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42089
IP address blocks: 193.230.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:21:09:f2:f6:59:5e:68:05:76:9d:a8:1f:fd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a38721a08bd91f72260a60c930a974d6dca87a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:53:ef:72:50:52:c2:f4:ea:4a:a4:f9:dc:
81:5d:f6:9c:ed:b7:26:e1:33:12:a3:d6:71:f5:6f:
de:fb:67:71:6f:89:3e:7a:49:5b:2d:b5:31:63:20:
7e:86:d5:98:2b:95:1c:b5:14:4b:54:43:f5:f9:cc:
8e:63:c6:d5:54:4b:7d:de:16:7b:09:a2:e4:69:4b:
3f:61:65:5c:0b:fd:df:10:78:d9:ae:0c:6a:93:9d:
2b:9f:ee:db:21:1c:22:f0:9a:cd:d6:bb:54:7b:9a:
be:ef:12:dd:5f:d8:86:ea:20:9e:e6:7a:45:3b:ff:
fc:32:8a:60:fa:34:10:74:39:81:b8:c8:52:f4:cb:
99:f9:f5:4f:de:4a:2d:0a:b0:05:b4:3c:9b:f3:01:
24:fc:ed:af:42:b4:b1:fe:cc:f9:93:e7:f2:2d:8b:
52:b0:38:51:59:16:d9:df:ec:97:bd:11:04:82:44:
ae:16:9a:fe:c2:df:fc:5b:16:b1:bf:46:ae:b0:dd:
c4:18:44:81:59:18:ed:d6:3d:6b:9a:9c:51:b2:1a:
a9:f2:ad:8c:59:01:f2:ba:39:3a:d1:81:83:6d:2f:
3c:a5:de:84:ac:fd:07:c6:d9:27:32:98:ae:00:56:
8e:80:a3:56:eb:d9:6d:65:14:5f:8c:79:01:ab:1f:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:87:21:A0:8B:D9:1F:72:26:0A:60:C9:30:A9:74:D6:DC:A8:7A:8C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/o4choIvZH3ImCmDJMKl01tyoeow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a7:f5:a9:9d:1f:e1:88:63:2a:84:7f:70:5d:f1:38:99:02:
35:00:df:fc:8f:04:98:8e:68:28:80:01:8f:fe:50:ba:e9:ab:
b1:45:66:fa:19:31:12:1c:f5:ae:a8:44:ca:1f:3c:5a:ed:19:
b5:55:28:a2:65:ea:19:d9:db:d9:26:dd:68:42:ca:94:09:2b:
10:f4:41:fb:a5:56:69:06:ca:38:8f:b2:0c:6f:b0:f5:16:16:
2b:5a:8e:3b:3f:8e:b2:bf:5a:e0:d6:ec:f2:5c:fb:66:81:38:
8f:02:85:e2:f8:d8:94:71:36:eb:5c:dd:60:3f:87:c7:1c:40:
04:cb:1b:7a:20:30:6f:28:1a:dc:23:c0:68:2e:18:6d:eb:2c:
6c:0a:47:f4:84:8c:db:21:72:07:6f:d9:89:1e:7d:f6:7a:ec:
4b:86:b9:fd:5f:1e:22:e5:a0:25:ab:2b:75:f4:f4:c0:d3:6f:
1b:d6:17:0b:ea:bc:b1:18:61:db:db:e6:ef:d7:a2:17:58:85:
f9:13:59:aa:2d:a1:53:c0:65:20:7d:19:8b:91:e0:2c:c3:36:
a4:4b:99:aa:ea:14:8b:03:4a:c9:5b:82:2e:e0:42:63:12:df:
35:9c:5c:fb:eb:ae:e1:b7:89:4e:f1:c5:58:c5:b5:2b:0d:1c:
53:62:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:32 2025 by rpki-client