Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ajNrrV2f4xWsHZR_eu5qqwHhyh8.roa
File: ajNrrV2f4xWsHZR_eu5qqwHhyh8.roa (raw, json)
Hash identifier: GW5k6ob11+CasyjKSxqtB5AzpuzvcTDHZ+s9dT4UWWY=
Subject key identifier: 6A:33:6B:AD:5D:9F:E3:15:AC:1D:94:7F:7A:EE:6A:AB:01:E1:CA:1F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A7C1FD1253335499BAA2EC5F275A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ajNrrV2f4xWsHZR_eu5qqwHhyh8.roa
Signing time: Thu 02 Jan 2025 13:48:49 +0000
ROA not before: Thu 02 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201575
IP address blocks: 188.132.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a7:c1:fd:12:53:33:54:99:ba:a2:ec:5f:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a336bad5d9fe315ac1d947f7aee6aab01e1ca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:9f:e7:83:7e:b9:61:82:05:ce:0f:57:0c:
34:64:59:cb:86:6b:03:23:ca:3a:d8:ef:9f:a3:67:
01:9a:aa:26:a8:df:3e:55:60:80:2c:ac:a2:85:17:
fb:9b:ec:cf:16:4d:41:91:fa:cb:85:5c:a0:ad:5e:
61:2a:66:16:e9:49:22:63:c6:45:65:93:b6:37:16:
e4:c5:7a:3b:83:c0:34:98:b5:ac:6d:a3:a2:e5:a2:
35:45:22:e4:d3:8a:94:95:4e:89:0d:12:df:45:a4:
4f:ad:00:0b:49:ba:e4:d4:2c:bc:4c:a1:4b:8d:fc:
21:c3:54:36:2f:a7:36:88:8f:5e:bd:73:ff:fb:4f:
a0:7d:c0:f8:0b:a3:88:12:a1:35:b1:e1:43:aa:1c:
36:1f:73:ce:23:84:41:0a:a8:32:99:12:e0:dd:8e:
11:47:6e:8c:78:71:c8:e8:5b:49:79:3e:82:5b:e4:
98:6c:56:2d:2b:62:b3:f4:87:56:61:b8:7b:49:00:
f6:99:03:78:e3:dc:14:21:85:2f:f2:7f:53:58:23:
cd:ea:0a:2f:77:0b:99:ce:0d:56:47:be:bb:f5:f2:
24:27:32:b0:84:05:ad:18:66:e3:31:1c:25:f6:12:
42:21:ba:de:c4:74:75:ec:23:b4:a3:a1:d6:2d:c6:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:6B:AD:5D:9F:E3:15:AC:1D:94:7F:7A:EE:6A:AB:01:E1:CA:1F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ajNrrV2f4xWsHZR_eu5qqwHhyh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.192.0/24
Signature Algorithm: sha256WithRSAEncryption
63:65:3e:5d:e2:04:5c:6f:c2:5d:67:71:1d:9a:06:78:34:7a:
c9:ea:62:ed:5a:1a:67:95:c1:02:0f:66:db:18:15:12:d6:2a:
92:bd:f1:42:62:4a:83:63:95:79:82:1c:62:19:14:81:26:e6:
19:1c:b8:56:b7:c4:d2:cf:0e:6a:3a:b3:12:95:92:f5:fc:99:
de:90:e6:5d:b3:16:14:80:6a:c9:12:70:b5:44:76:54:6e:6e:
6f:f6:43:7c:55:b1:d5:e3:03:55:50:8e:72:82:b1:29:35:82:
9c:cd:14:0b:21:3a:04:bc:bd:97:05:a3:95:5e:41:5a:c9:02:
ee:f0:cc:ae:c4:69:63:5e:bc:04:47:11:be:7c:66:19:0e:04:
0a:bd:3a:91:f9:82:70:fc:5b:9a:f9:ee:22:9e:15:46:b7:05:
15:8f:54:cc:b2:d5:d0:16:2a:08:f1:7c:84:57:4d:11:c2:11:
c0:32:eb:80:61:12:aa:8f:28:3d:ac:cb:dc:ff:43:c2:e8:75:
98:43:27:4d:fa:13:c1:f5:fa:20:f8:77:80:1a:fb:0e:eb:c7:
d1:25:86:9b:f6:c6:ee:4e:95:88:65:e0:f6:ac:bd:3a:11:ae:
cd:83:32:74:b9:2e:f2:8e:e7:0d:4c:c1:22:ca:12:37:58:99:
84:40:18:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:04 2025 by rpki-client