Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa
File: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (raw, json)
Hash identifier: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=
Subject key identifier: B1:07:D8:51:52:18:1C:7B:54:1B:41:F9:5D:68:B5:84:31:2A:E5:9E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194F18A4EF56015DDB100400AE898CF41FA
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa
Signing time: Mon 10 Feb 2025 20:26:00 +0000
ROA not before: Mon 10 Feb 2025 20:26:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211237
IP address blocks: 193.160.141.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:8a:4e:f5:60:15:dd:b1:00:40:0a:e8:98:cf:41:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 10 20:26:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b107d85152181c7b541b41f95d68b584312ae59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:3b:d2:b3:40:7e:87:b8:b2:11:4b:c3:05:
88:ad:a2:e8:6a:ea:83:39:c8:57:57:45:9e:cb:e7:
1b:8d:89:5a:23:26:85:66:01:a0:31:14:c5:e9:67:
8d:b8:fd:27:48:d8:e0:45:37:7d:fd:9f:25:3d:69:
75:1e:d9:fd:2c:02:c4:f1:50:94:25:b6:db:d0:69:
7c:73:d4:a5:ed:c9:16:30:aa:be:74:c5:4b:c3:33:
66:7a:ba:46:57:c1:08:44:fc:d1:1d:52:a0:44:9e:
c7:15:af:2d:f1:d5:bb:ef:04:41:ae:d6:8c:df:08:
26:48:f2:2a:b2:87:c1:ad:eb:38:7a:e7:00:64:bd:
51:18:aa:4b:b2:a2:d2:9c:5d:d7:09:90:b3:77:88:
32:ed:34:89:4c:36:83:08:bc:80:56:db:5c:da:02:
23:03:8a:4b:31:80:3e:17:cb:07:d8:26:18:6b:5b:
e9:00:ab:f3:1f:08:16:87:8a:b2:d7:97:b1:ae:1d:
1a:0b:ae:de:b2:ae:df:86:62:8b:44:3a:47:c4:88:
7a:54:47:f0:24:c2:43:9c:2c:66:1b:5b:19:a3:90:
02:06:d0:37:67:29:d4:35:d8:f3:c4:e4:80:06:ad:
a9:a1:06:a9:7e:5b:da:4e:87:39:84:59:d0:3a:bf:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:D8:51:52:18:1C:7B:54:1B:41:F9:5D:68:B5:84:31:2A:E5:9E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.141.0/24
193.160.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:18:68:16:59:92:a8:c7:91:a6:dc:d1:fb:dc:22:c3:3a:46:
c2:83:0d:5c:95:be:e2:11:b7:dc:33:77:1d:34:b2:c6:c2:8c:
f5:1b:0e:8e:fc:41:42:1d:a5:d7:75:30:32:9b:2c:1a:db:70:
04:12:01:23:0f:db:42:48:70:89:e4:ca:eb:4e:17:3f:9c:77:
78:68:ff:7b:9d:31:cf:e8:08:28:d5:04:b8:53:05:c5:5c:d5:
9f:7a:d7:58:15:bb:43:d0:9e:68:f4:e1:4d:89:7e:40:3c:34:
1e:b5:19:87:1c:ba:aa:cb:be:ff:e9:87:08:62:89:ab:13:05:
65:ac:16:4c:73:75:d1:da:09:d2:c0:52:b1:3f:b7:18:9a:39:
dd:5e:6e:d6:8d:2e:83:a3:23:1d:37:f3:a5:df:a8:de:dd:52:
8e:17:20:aa:86:49:46:27:12:e2:b9:8a:b8:01:4e:e9:7e:bc:
ef:53:9d:99:fe:62:4b:b4:4a:92:d1:6b:a2:17:5c:b7:c7:e9:
40:8e:3b:ca:b9:7b:0d:f5:b1:1a:dd:9e:f0:41:78:18:bc:88:
c9:56:67:cf:32:e0:74:8a:84:11:e3:14:55:7b:3c:26:31:22:
f0:80:ee:9b:8f:1a:18:ac:5b:d8:ff:45:9c:0b:55:e8:5e:90:
68:cf:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:15 2025 by rpki-client