Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/_iz7CWZT6i9LIG2W9FLhqq0ba9o.roa
File: _iz7CWZT6i9LIG2W9FLhqq0ba9o.roa (raw, json)
Hash identifier: MMBRUzWt6C7I0b9hafFCY7OVGWCwaURXl3f40MdTyMw=
Subject key identifier: FE:2C:FB:09:66:53:EA:2F:4B:20:6D:96:F4:52:E1:AA:AD:1B:6B:DA
Certificate issuer: /CN=1a3bfeb521f66e57248326cfff55becefddd0fcd
Certificate serial: 01880A2927F25DA61D407CA9173382C6E4A4
Authority key identifier: 1A:3B:FE:B5:21:F6:6E:57:24:83:26:CF:FF:55:BE:CE:FD:DD:0F:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjv-tSH2blckgybP_1W-zv3dD80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/_iz7CWZT6i9LIG2W9FLhqq0ba9o.roa
Signing time: Thu 11 May 2023 09:34:09 +0000
ROA not before: Thu 11 May 2023 09:34:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24843
IP address blocks: 193.8.206.0/24 maxlen: 24
193.8.206.0/23 maxlen: 23
193.8.207.0/24 maxlen: 24
193.8.220.0/23 maxlen: 23
193.8.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:29:27:f2:5d:a6:1d:40:7c:a9:17:33:82:c6:e4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3bfeb521f66e57248326cfff55becefddd0fcd
Validity
Not Before: May 11 09:34:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe2cfb096653ea2f4b206d96f452e1aaad1b6bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:b9:a8:03:52:fb:1b:b8:fc:62:47:43:e4:
fd:da:2f:bb:32:23:88:47:ff:83:18:bb:1c:7e:da:
42:a7:e8:d3:e1:11:8c:b4:9d:c1:fe:00:48:7e:96:
9f:60:1d:d8:5d:c6:de:ea:43:7f:c7:7e:b2:a3:50:
0f:da:bb:e4:bb:61:29:b9:75:97:94:73:d9:2f:84:
db:d5:13:b9:2b:30:e3:f3:96:98:75:84:6a:bb:c0:
ab:99:68:08:75:d1:2a:ae:08:12:55:ba:6d:8b:a2:
51:fd:0e:52:de:3b:25:c8:8b:05:cf:ac:3e:8b:43:
47:d8:c7:69:6f:13:ee:08:fa:2e:e0:26:f0:7a:b7:
91:26:fb:6f:b5:8b:b1:18:0f:cd:ca:fb:27:18:a0:
3a:ef:aa:a9:6e:15:e7:8b:4f:e3:e8:4a:fc:39:a2:
47:26:e4:bd:f5:d4:df:25:c5:56:9f:0d:a9:89:e2:
2c:90:95:ac:f4:06:68:b2:7f:24:e0:31:eb:a1:d0:
a2:67:a3:be:27:ad:34:9a:32:0b:93:06:ff:53:60:
d1:56:f4:7b:49:70:31:8e:c0:15:91:4f:0f:81:11:
14:5d:45:64:8b:dd:86:6b:af:59:2a:f9:3f:b0:5a:
be:20:20:22:58:4e:83:9e:fd:23:50:20:bc:47:bd:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:FB:09:66:53:EA:2F:4B:20:6D:96:F4:52:E1:AA:AD:1B:6B:DA
X509v3 Authority Key Identifier:
keyid:1A:3B:FE:B5:21:F6:6E:57:24:83:26:CF:FF:55:BE:CE:FD:DD:0F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjv-tSH2blckgybP_1W-zv3dD80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/_iz7CWZT6i9LIG2W9FLhqq0ba9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/Gjv-tSH2blckgybP_1W-zv3dD80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.206.0/23
193.8.220.0/23
Signature Algorithm: sha256WithRSAEncryption
18:94:9c:bc:cf:e0:e7:c5:3c:ec:2f:6e:0a:8d:e9:ae:d2:39:
2c:0c:e8:03:d7:10:b7:55:3e:41:fc:3c:bd:3e:15:99:8f:c5:
f0:9d:45:42:fc:03:f2:27:84:fa:4b:36:93:e3:0f:cd:61:12:
f1:59:08:aa:55:d5:21:f3:10:e3:69:59:8a:82:cd:60:2e:6d:
f3:36:7e:c9:e7:94:73:96:4b:0a:b8:76:1b:ad:d3:f2:f2:b8:
e1:59:db:8d:f1:ec:0c:4a:9f:ac:fd:12:5a:18:b0:b2:e1:b3:
da:6f:a9:1b:02:ee:07:f7:e5:d1:d6:04:ec:6d:fa:63:50:4c:
98:51:33:a2:cb:c9:d7:fc:f2:a9:09:32:64:01:e2:fd:85:de:
15:3a:4a:67:49:c0:2e:19:0b:1a:3a:63:1c:1e:fb:ce:18:41:
4b:94:39:59:7b:38:6d:22:1c:70:8f:d5:a1:12:d8:5b:55:05:
50:5c:5e:ef:01:d8:86:66:1e:01:6e:98:a9:d5:d9:99:c1:53:
0c:fd:52:d8:11:4b:07:11:47:88:91:4a:cf:64:78:d6:20:69:
f8:6f:69:4d:37:ae:7f:0c:f6:9b:b9:5f:69:bb:4c:e9:eb:6b:
79:2a:cb:db:5f:13:fa:d4:8b:4a:fc:a9:8c:a6:f3:58:d8:b7:
de:4e:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:38:33 2025 by rpki-client