Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1jYHyxkO5k7AXwo_OLz9epyNRwM.roa
File: 1jYHyxkO5k7AXwo_OLz9epyNRwM.roa (raw, json)
Hash identifier: 6RanUwJMPMWH/nmaT78UH0hhqnCby3SGah+yIOLp678=
Subject key identifier: D6:36:07:CB:19:0E:E6:4E:C0:5F:0A:3F:38:BC:FD:7A:9C:8D:47:03
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747C82404287B8F168AC9A55F0E86A2
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1jYHyxkO5k7AXwo_OLz9epyNRwM.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7106
IP address blocks: 193.221.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c8:24:04:28:7b:8f:16:8a:c9:a5:5f:0e:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d63607cb190ee64ec05f0a3f38bcfd7a9c8d4703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:fe:fc:86:b0:2a:07:df:ea:cf:e8:25:c4:
ee:1c:57:ab:44:be:cb:5f:63:5a:fe:3b:ad:88:0a:
33:fb:d9:a7:50:c0:f6:a2:d4:b2:1b:a3:b1:d1:59:
4d:6c:ce:a1:ec:76:6e:e4:a9:68:d5:bc:3c:bd:b8:
3a:11:9e:9b:be:dd:8f:c7:9a:6e:a6:ad:1d:8b:5e:
4a:7c:f1:92:80:c3:c6:5a:7a:90:83:58:44:c6:0d:
5d:6c:2f:27:b3:7c:ee:7a:1c:97:68:bd:9f:b0:44:
6c:0a:50:f6:51:ea:fb:7d:38:1c:06:07:d0:a9:47:
b2:da:06:ca:a1:62:5a:29:b5:f5:b6:f2:0f:d4:aa:
fc:10:af:e1:66:02:77:1f:15:dd:95:16:a2:ed:de:
da:3e:22:e4:03:8f:d1:e2:17:27:e0:57:51:9b:86:
80:d4:50:b6:d8:f8:29:94:6c:e7:42:cf:68:13:a2:
00:61:73:6d:59:34:88:51:92:5a:1b:28:d9:d4:6a:
06:18:e0:ec:bf:4d:01:78:b5:71:b9:53:22:2b:0e:
af:0c:e8:e7:3c:d5:f0:82:9f:98:c7:72:7e:30:08:
47:d5:17:eb:5d:42:19:77:b2:06:76:ac:90:ac:69:
a0:9c:97:ca:52:61:bc:e3:ef:b5:b6:74:56:11:c3:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:36:07:CB:19:0E:E6:4E:C0:5F:0A:3F:38:BC:FD:7A:9C:8D:47:03
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1jYHyxkO5k7AXwo_OLz9epyNRwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4e:87:4d:b0:fe:c0:cb:fb:b9:3c:60:35:69:e5:d3:96:5a:
85:f4:fb:f1:a9:c8:91:e1:84:1e:1a:fe:e9:31:83:44:29:82:
b1:83:98:95:e4:3a:7e:8c:9c:4f:af:c2:20:2b:ef:ec:ad:8c:
48:ab:fa:d6:dd:e9:38:c9:2c:b6:c5:cf:b3:7e:57:54:cd:44:
60:a2:5b:52:9d:58:f2:7c:56:76:da:d5:84:4c:a2:0f:bb:e1:
63:15:cc:25:bd:4a:79:02:35:72:d3:94:2b:e7:ad:44:39:d0:
6e:4b:19:4b:66:b2:b6:88:b7:17:96:f2:99:c0:8d:cb:93:df:
75:3a:e2:4f:be:0f:d0:b0:4b:fa:d7:c3:0e:18:c7:48:8a:b6:
a9:8c:16:38:29:41:51:e0:ff:a0:a6:29:dd:e6:68:fc:7a:5f:
12:cb:a2:ae:e7:10:94:29:d8:f1:da:c2:ea:49:2e:69:ea:de:
32:f2:f1:44:bd:62:34:b9:73:15:98:21:ae:e8:7c:65:af:f9:
ff:b4:c8:d0:ea:52:ae:fd:f7:42:1b:e4:bc:85:03:ce:94:46:
b7:44:a6:53:2b:fb:6f:d5:98:3e:9d:d2:8a:04:da:2e:c7:79:
84:69:3d:1e:98:d0:be:f4:2a:18:7c:bf:22:71:0c:7e:c3:ea:
d6:00:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:01:42 2025 by rpki-client