Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/1-rRkYRd227_5bnec3bYwnL5SxpY.roa
File: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (raw, json)
Hash identifier: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=
Subject key identifier: FA:B4:64:61:17:76:DB:BF:F9:6E:77:9C:DD:B6:30:9C:BE:52:C6:96
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 019427480C73AABF1B3DE0619CBB47F3355C
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/1-rRkYRd227_5bnec3bYwnL5SxpY.roa
Signing time: Thu 02 Jan 2025 13:50:20 +0000
ROA not before: Thu 02 Jan 2025 13:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5479
IP address blocks: 193.219.40.0/21 maxlen: 21
193.219.48.0/21 maxlen: 21
193.219.56.0/22 maxlen: 22
193.219.80.0/20 maxlen: 20
193.219.128.0/20 maxlen: 20
193.219.144.0/21 maxlen: 21
2001:77c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0c:73:aa:bf:1b:3d:e0:61:9c:bb:47:f3:35:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Jan 2 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab464611776dbbff96e779cddb6309cbe52c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:73:4b:68:4d:3c:e1:2d:21:79:6c:b1:81:
ec:9a:75:88:4f:62:fd:1e:e2:ba:11:df:76:3b:f2:
d2:84:6f:8e:c2:7e:bc:b7:c0:de:0e:f8:77:36:31:
d6:59:6e:dc:4b:61:f7:e6:be:64:d3:d6:13:a3:61:
f5:b5:03:21:64:8e:78:77:ae:50:54:cd:77:24:ec:
64:a7:6e:53:91:36:65:f0:6c:79:c4:be:b5:a3:25:
86:ec:cf:5f:bb:3d:d8:25:d4:92:23:57:9e:d7:5f:
26:29:de:3e:fe:8b:08:03:de:db:6d:18:d4:6a:bb:
74:73:ef:f3:bb:95:c9:58:47:39:0d:be:98:05:74:
8b:f7:d3:14:8e:fd:be:db:ab:8e:0f:02:02:0f:92:
e2:93:74:7e:6c:03:62:82:87:cf:28:1a:82:32:45:
17:1e:d4:74:3e:48:f6:42:7a:09:88:b5:5e:f7:cc:
c6:b9:3c:51:b9:ea:28:44:5e:bd:67:88:d7:ad:ec:
a0:d5:cd:cb:94:c3:6f:27:4c:ea:5b:c5:5d:52:6c:
c0:ad:e7:b0:66:9e:3e:2c:a1:8e:c7:10:99:db:e5:
88:39:43:3e:f9:57:87:8a:3a:89:08:bc:13:df:09:
de:46:6c:73:eb:44:d9:87:e9:03:a8:74:61:14:c5:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:64:61:17:76:DB:BF:F9:6E:77:9C:DD:B6:30:9C:BE:52:C6:96
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/1-rRkYRd227_5bnec3bYwnL5SxpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.40.0-193.219.59.255
193.219.80.0/20
193.219.128.0-193.219.151.255
IPv6:
2001:77c::/32
Signature Algorithm: sha256WithRSAEncryption
a2:2c:36:69:c3:cc:1d:8b:fa:5d:f5:a4:07:e3:b1:cb:18:ad:
0c:b6:53:53:0d:98:f1:b7:75:ea:54:19:69:70:85:3d:6b:d4:
bb:ae:90:7b:8c:1e:eb:3c:30:86:ad:3c:6b:76:a0:fe:e0:8a:
a6:ac:d0:e5:30:1c:e7:d3:bf:22:5d:2a:31:0c:5b:e8:4a:cc:
15:8d:42:8f:c5:61:74:c4:fc:16:a6:21:15:ff:c5:ef:35:25:
4a:f6:b2:7b:8a:77:e6:28:fd:16:1f:43:74:58:6d:97:f9:09:
90:c1:5c:8f:2f:15:9b:ed:c5:ea:2c:ee:33:06:f3:e6:29:cd:
1b:5c:9e:01:1f:34:4c:26:70:5b:92:ef:94:f0:3e:f0:76:42:
76:e5:10:15:b0:1d:4d:b3:0f:18:ae:66:79:5f:1e:1b:67:42:
f7:26:7f:64:56:99:e6:42:41:0c:bf:9a:ea:21:8d:f3:95:11:
e6:da:ef:8c:17:5c:a0:4f:e5:a4:9a:39:6f:01:22:d5:36:64:
65:1e:63:a9:88:ba:62:56:bc:2d:82:34:b5:07:00:8f:cd:bb:
42:04:2b:36:2f:f2:22:4e:79:2c:4f:4d:68:aa:bd:58:78:78:
d3:3d:6a:e3:db:cf:1f:68:1a:7b:84:7a:de:0f:0c:4b:09:3e:
71:56:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:56 2025 by rpki-client