Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa
File: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (raw, json)
Hash identifier: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=
Subject key identifier: ED:DB:17:D7:FB:A3:DC:22:36:38:BD:D9:47:E6:32:B0:7B:DB:C0:99
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019426D8A137B8CF11514857A65F16C66E24
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa
Signing time: Thu 02 Jan 2025 11:48:38 +0000
ROA not before: Thu 02 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62242
IP address blocks: 193.23.28.0/24 maxlen: 24
2a04:9ac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a1:37:b8:cf:11:51:48:57:a6:5f:16:c6:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eddb17d7fba3dc223638bdd947e632b07bdbc099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:aa:14:2b:4a:6a:44:b0:1e:3c:1c:6b:f4:
f8:00:7f:00:82:c0:da:93:5f:99:f2:b7:63:81:6e:
b8:33:fe:d9:3a:5c:f1:0e:b6:b0:11:cc:90:de:b1:
86:c2:cd:b2:c3:90:8a:f8:d8:fb:43:f6:00:28:9b:
80:74:b2:88:1f:7e:72:67:4b:63:2b:f5:6d:28:29:
8d:dc:7c:c3:7d:03:81:41:63:0f:f5:38:14:80:a8:
d7:ba:1f:64:ba:32:74:ee:4d:25:82:f4:ec:31:f0:
b9:0e:ff:1c:9a:e6:48:35:66:6b:da:06:13:27:2a:
89:73:9d:fe:5f:09:83:d3:52:8a:83:38:e9:8f:5d:
fe:05:4f:55:25:39:11:d7:41:4c:9e:ae:44:0c:b0:
ce:83:10:62:e6:56:17:cd:06:f1:a7:09:b6:49:8b:
49:9e:05:00:d2:2d:2b:9e:7b:1c:d5:99:d8:7a:58:
7f:0d:d8:54:be:46:e9:d1:4b:b5:c3:7a:54:73:45:
43:2c:ef:ae:79:33:f4:e3:37:20:57:6d:53:6d:8e:
e3:75:d5:2b:dc:f4:8f:6d:8e:36:d5:5b:60:a5:35:
eb:39:af:8d:df:64:06:1d:2c:b4:31:3c:ff:d7:6c:
87:57:56:9b:97:eb:bd:1e:5c:ec:7d:ec:32:1f:56:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:17:D7:FB:A3:DC:22:36:38:BD:D9:47:E6:32:B0:7B:DB:C0:99
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.28.0/24
IPv6:
2a04:9ac0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:92:54:72:f3:68:15:6e:f3:c6:3a:95:39:c0:54:84:0d:87:
3d:37:4b:0f:5c:22:69:43:f7:a0:aa:27:f6:72:51:9e:f4:6d:
e7:ca:83:f4:17:b3:01:86:4b:b9:74:d4:42:c7:f2:82:72:e2:
a0:ea:ce:e4:d0:2e:29:1e:58:6c:f0:02:e5:3c:df:cd:4d:7d:
de:8b:22:ca:2f:01:ac:6c:21:f4:c6:5f:6c:63:ca:d4:8f:72:
24:29:b8:ea:fa:de:c6:dc:bf:52:30:7f:c0:fa:ff:8d:68:e3:
6d:9e:bd:bb:c5:d2:0c:82:f1:c2:54:3d:47:c3:59:ac:9b:34:
dd:0e:15:33:4e:19:a7:b2:be:1e:6e:29:19:0d:dd:70:1a:bb:
f6:87:df:cd:45:af:2e:5c:a3:45:22:37:cf:09:fc:2d:40:1a:
8d:1c:6f:50:8a:d4:44:12:25:9e:7a:c4:0e:70:b4:f5:0e:ee:
6b:c6:b9:b3:eb:19:d6:a4:40:d4:ac:26:7d:b6:ee:5b:7e:e6:
46:94:3a:5f:41:58:9e:70:fc:5a:93:d1:d8:74:5d:bc:7c:b6:
48:80:1d:97:27:da:8f:d8:04:9b:76:18:38:a3:c8:1c:aa:87:
85:d1:cf:3e:24:dd:b5:c9:10:1a:9e:f8:de:5a:4d:b9:5a:ba:
91:8b:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 15:43:33 2025 by rpki-client