Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/RkVV0EjcjxNBWcvA8hIWquuWiTE.roa
File: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (raw, json)
Hash identifier: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=
Subject key identifier: 46:45:55:D0:48:DC:8F:13:41:59:CB:C0:F2:12:16:AA:EB:96:89:31
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5B251EAA0FE030D0BD60B25522F80
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/RkVV0EjcjxNBWcvA8hIWquuWiTE.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 193.108.102.0/24 maxlen: 24
193.242.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b2:51:ea:a0:fe:03:0d:0b:d6:0b:25:52:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=464555d048dc8f134159cbc0f21216aaeb968931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:9a:83:c3:ea:72:01:bb:6d:6d:f1:52:57:
32:6e:24:ee:43:10:8e:0c:5c:3d:b4:19:58:57:4e:
49:db:35:db:6a:3e:ea:31:5a:9f:53:6a:a8:88:c4:
41:9d:3f:a7:cf:9b:47:5a:51:5b:a0:47:bc:4a:a1:
38:64:6a:c4:01:8b:de:ae:7b:62:1f:6f:af:c5:14:
12:e3:da:8d:84:16:ab:0f:9a:ce:1d:ad:42:c3:8f:
cd:7d:54:c8:c1:59:d8:b4:7d:1e:92:48:a9:5a:ed:
73:71:ab:c3:92:71:6f:8e:a1:d1:14:cd:4b:9f:3c:
1b:26:30:36:d1:4e:5f:f7:41:dd:38:11:1e:e9:8d:
03:0b:ea:ab:d9:2b:45:35:1d:f6:f4:eb:bc:98:9a:
91:84:5c:51:2c:e9:0e:98:b6:a4:ff:93:03:93:f0:
d2:ae:02:cc:dc:ab:dc:45:0b:eb:b0:77:9e:e0:7e:
24:52:93:a1:8a:ee:b0:3c:db:c2:7d:7c:ac:f7:1e:
f4:c7:d5:84:cb:e3:db:d4:62:95:65:db:d9:2f:d3:
f4:6d:ff:5d:bd:da:3e:b5:75:e8:8b:6c:e1:de:ed:
51:39:4c:83:a0:b0:13:37:77:bc:e7:99:3b:ed:4a:
4e:c9:bd:1f:16:65:ed:61:d3:98:67:cf:cc:95:bb:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:55:D0:48:DC:8F:13:41:59:CB:C0:F2:12:16:AA:EB:96:89:31
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/RkVV0EjcjxNBWcvA8hIWquuWiTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.102.0/24
193.242.117.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a5:3f:f9:bb:84:04:b5:25:f6:d9:07:80:31:41:e2:bd:b5:
c6:dc:df:3d:46:2b:68:e9:b0:76:6e:a7:31:2f:f8:22:5b:c0:
1f:c5:8f:41:db:1b:79:79:dd:af:aa:41:06:70:25:15:66:3f:
bb:1e:36:18:24:85:80:c3:e7:7a:13:35:27:11:58:17:03:9a:
76:bb:f7:a3:85:8e:c9:07:8f:62:43:b9:d5:35:ee:0d:99:0e:
10:70:49:6a:e0:41:9f:93:b4:4c:4e:8f:71:d9:08:d1:e2:ec:
2b:4d:9e:a5:9e:b5:f2:0d:7b:63:01:fe:14:c3:7d:94:b6:47:
4d:22:73:4a:3d:9a:6e:3f:4e:c4:e3:4c:0a:e1:0c:fd:92:12:
3e:89:7f:b3:fa:3c:a1:92:1c:06:6c:5b:00:e7:88:f2:92:3a:
91:8f:ac:03:f7:87:e2:c9:59:ad:9b:e7:db:96:0e:19:63:c0:
4e:11:aa:ce:cf:2d:c7:d5:ec:3f:eb:dc:45:8d:d1:51:9e:19:
81:b4:70:be:4d:aa:9e:89:1e:ad:ca:cc:0c:cd:54:90:f4:fb:
76:0d:a9:d4:c4:56:56:cb:4d:41:a8:60:8b:6b:90:e6:63:a1:
50:59:c3:e7:7b:ec:9a:5e:6c:db:2e:83:3d:c4:9c:cc:74:b3:
ab:f0:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:42 2025 by rpki-client