Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/H74wGZKnnU6XEP7nVKoqw4XaEjE.roa
File: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (raw, json)
Hash identifier: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=
Subject key identifier: 1F:BE:30:19:92:A7:9D:4E:97:10:FE:E7:54:AA:2A:C3:85:DA:12:31
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 019423D6F52E2F42E070CF957DE767290F06
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/H74wGZKnnU6XEP7nVKoqw4XaEjE.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 193.57.94.0/24 maxlen: 24
193.57.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f5:2e:2f:42:e0:70:cf:95:7d:e7:67:29:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fbe301992a79d4e9710fee754aa2ac385da1231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:9f:43:11:82:57:fa:ad:e3:f8:14:09:7e:
aa:e7:6a:08:b9:f0:d1:b8:d3:74:e4:5a:9b:13:f1:
39:5e:f1:25:27:36:1c:c9:50:c3:99:83:e7:92:0d:
af:01:70:65:14:9e:f9:5b:0d:7c:36:5c:ed:97:64:
f4:e1:6f:1b:8f:36:9d:46:48:a8:aa:cd:3b:42:03:
d9:3d:70:66:d3:4a:5b:4b:1b:88:7c:2b:29:6a:d1:
66:9f:07:1c:1c:d4:a4:5e:a3:d1:bc:28:f4:36:94:
08:4e:fe:d3:7b:fc:75:b1:0c:cf:cb:75:db:cf:06:
f0:12:83:9f:0b:76:51:9e:26:16:24:0f:f8:13:59:
d5:b8:2f:5e:96:c0:c1:67:72:40:1d:e7:8b:fe:0b:
cc:6f:36:ac:19:ee:d4:ad:b8:82:71:56:9e:27:9c:
38:31:15:18:aa:b9:94:b0:51:dc:fd:e6:a9:e4:13:
79:af:32:6d:dc:bc:d6:04:39:73:a0:bd:56:19:90:
22:f0:3b:79:6e:71:c2:35:76:60:bb:27:83:a7:7a:
9e:e7:05:ae:5d:81:46:ba:40:74:60:bf:aa:15:81:
a2:cc:fb:28:6d:24:4d:de:d0:7a:12:d8:c6:1e:26:
43:8e:68:92:a9:e6:e8:c3:cd:68:2e:50:0f:ce:2a:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BE:30:19:92:A7:9D:4E:97:10:FE:E7:54:AA:2A:C3:85:DA:12:31
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/H74wGZKnnU6XEP7nVKoqw4XaEjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.94.0/23
Signature Algorithm: sha256WithRSAEncryption
01:d2:e0:6f:2d:aa:41:e9:40:77:35:b8:02:db:84:7e:db:fb:
70:13:c4:d7:44:e8:5d:e1:c3:95:c6:9e:ee:9e:b6:0b:fb:ce:
81:67:78:d0:17:66:6b:28:b5:8e:1c:31:28:99:b6:1b:bb:34:
50:c2:6b:bd:24:d2:78:08:07:5a:9c:14:7f:27:4b:c8:be:ee:
7f:7e:78:ff:ca:4b:1a:00:ac:d4:7e:5b:56:64:81:d1:8b:88:
db:16:ae:a1:2b:0b:85:aa:44:01:73:83:38:6d:51:8a:9b:97:
ca:70:90:e6:90:e0:e1:b5:01:c9:32:81:2d:ba:4c:60:19:5f:
c8:73:11:cd:7e:5f:2d:7a:cc:16:22:fa:d9:e8:26:f7:c8:38:
e3:d0:33:7f:92:d1:34:dc:38:a0:b0:b7:c8:28:89:09:57:05:
be:e5:a0:e9:76:51:49:01:95:86:9f:8c:e6:27:c2:25:1c:7a:
53:24:f0:56:95:0c:1e:b5:be:ad:5c:ea:e6:12:4a:b8:77:2d:
52:2e:a5:fb:91:ca:3c:ca:0e:a9:f8:7d:59:68:63:0e:70:fa:
8e:f9:c8:69:ac:fb:37:02:8d:43:c5:a1:76:9d:3c:33:43:8d:
51:61:09:dc:7c:ad:38:65:b2:27:b2:a5:f7:95:28:3b:b5:86:
79:a6:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:03 2025 by rpki-client