Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/fkySyXgYloFA_rSIKapDu83z4nA.roa
File: fkySyXgYloFA_rSIKapDu83z4nA.roa (raw, json)
Hash identifier: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=
Subject key identifier: 7E:4C:92:C9:78:18:96:81:40:FE:B4:88:29:AA:43:BB:CD:F3:E2:70
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 01942444A6AA12C4F89366CFCB9DAA559794
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/fkySyXgYloFA_rSIKapDu83z4nA.roa
Signing time: Wed 01 Jan 2025 23:47:46 +0000
ROA not before: Wed 01 Jan 2025 23:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133861
IP address blocks: 193.134.208.0/24 maxlen: 24
193.134.209.0/24 maxlen: 24
193.134.210.0/24 maxlen: 24
193.134.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a6:aa:12:c4:f8:93:66:cf:cb:9d:aa:55:97:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Jan 1 23:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e4c92c97818968140feb48829aa43bbcdf3e270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:6c:70:ea:c6:47:04:48:9f:f6:82:d2:4a:
70:8b:4a:fe:51:c8:5d:7c:f1:93:d4:a8:56:52:d2:
7f:91:6e:6d:69:d2:6e:3b:9e:2b:cd:f3:9b:46:ce:
85:e1:9a:84:88:88:09:a6:45:77:43:88:16:fb:5d:
92:d9:9f:89:de:6a:d0:96:54:4d:87:ff:db:87:b5:
69:46:66:c5:4d:43:cb:37:d3:3e:03:95:8c:92:72:
9a:38:3c:34:09:42:6e:a4:7a:5d:b0:73:11:5d:10:
eb:e9:fb:c1:6f:94:ec:49:75:4f:3e:21:f5:a6:cb:
f2:79:85:c7:27:e7:c0:16:69:3e:22:4d:3a:09:11:
49:11:a7:a1:f4:b7:8b:cd:0e:9f:be:f8:a0:d3:58:
52:65:97:76:bf:33:ac:56:cb:4e:ba:55:59:a6:b7:
66:f6:0b:75:26:de:fb:3f:03:db:5a:40:10:c9:a1:
fc:3f:1e:ac:48:e0:64:91:b9:66:df:46:e4:97:4f:
29:01:44:c5:0a:6e:9f:f0:f1:dd:81:e2:88:34:51:
5b:a5:cc:90:6d:50:17:83:f4:58:23:3c:be:12:b5:
6a:a0:42:30:db:93:5e:a1:e1:c6:46:17:7c:a5:52:
b3:8e:27:dd:29:1a:ba:0f:ff:4c:1a:11:63:9c:09:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:92:C9:78:18:96:81:40:FE:B4:88:29:AA:43:BB:CD:F3:E2:70
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/fkySyXgYloFA_rSIKapDu83z4nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.208.0/22
Signature Algorithm: sha256WithRSAEncryption
44:38:2d:7d:4b:e3:31:fd:66:18:e8:fa:48:c5:d3:38:4d:8f:
6e:e5:a1:bc:6f:6d:6b:24:88:1a:73:85:22:7e:04:46:cb:32:
22:45:1c:09:c0:88:95:fd:f4:c0:3b:8a:3d:2a:96:ae:81:21:
9b:c2:04:56:ab:97:26:8d:63:58:04:7e:67:f7:e5:b7:43:a5:
7c:a4:b6:b3:6b:7d:e2:b4:18:c4:0e:d4:9c:b5:2f:c7:c6:b1:
19:45:c8:c3:bb:bf:e7:b3:98:6c:6b:92:9f:ac:f9:c1:84:1b:
01:5b:19:05:3c:f6:5c:f5:fb:fc:7d:b5:ff:6c:9f:5e:8b:d7:
74:9c:c6:81:29:76:03:12:17:7f:cd:83:8c:21:96:b9:6e:2a:
67:47:0d:95:4f:ec:6f:9f:8d:03:58:90:34:7b:a1:c4:b0:dd:
75:30:3f:e3:bc:bc:cf:8a:74:38:f5:e0:c9:d5:3f:2b:36:ae:
2e:9c:54:45:92:87:ef:a5:85:c6:f8:1f:c7:de:ee:4d:94:32:
3b:5b:f4:e9:2c:09:09:98:f1:80:1e:25:e0:69:7b:6c:e2:2a:
1d:44:af:3b:f2:1d:d4:07:4f:1d:d0:87:5c:d2:40:ed:c8:11:
83:51:f8:29:7b:43:99:3f:58:13:92:8f:f8:db:50:16:e4:8a:
43:2d:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:31 2025 by rpki-client