Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3y9oPhhQ76ajFYxPaGTfj0mGenY.roa
File: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (raw, json)
Hash identifier: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=
Subject key identifier: DF:2F:68:3E:18:50:EF:A6:A3:15:8C:4F:68:64:DF:8F:49:86:7A:76
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019422FB0457BFA6399F7CE1DF579CE846BC
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3y9oPhhQ76ajFYxPaGTfj0mGenY.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.28.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:04:57:bf:a6:39:9f:7c:e1:df:57:9c:e8:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df2f683e1850efa6a3158c4f6864df8f49867a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:c0:fc:2f:a4:30:3b:35:d0:0c:75:4d:fa:
4f:ee:26:41:b3:79:7b:99:29:ca:3e:8f:98:c9:4e:
98:6c:70:c8:0d:b9:87:f9:f7:c4:57:ac:62:bf:09:
ce:9c:57:af:60:d6:8a:3f:86:f3:fe:76:d8:1c:d7:
fd:79:12:73:34:2e:38:cb:ff:de:f9:6c:92:0c:8d:
15:9b:85:4b:13:41:25:67:f7:f5:69:ba:e1:7d:a2:
2c:ed:ed:ba:2f:ee:64:56:69:a2:39:3e:92:8a:ab:
73:5c:be:ee:28:5d:56:a9:bd:c8:1c:db:d7:f5:6e:
a8:27:2d:24:59:d7:52:b4:db:ae:ce:77:35:73:bf:
43:06:63:1a:a7:d9:cc:5d:91:42:ed:81:62:d6:65:
ed:06:9f:eb:61:7e:31:51:64:b2:13:4b:13:71:3f:
90:c4:b7:04:1c:2b:4a:cd:04:57:fc:dc:9e:df:ea:
b1:b6:e2:8f:37:2e:72:f2:b9:44:c3:48:33:25:e9:
2b:2f:ef:a4:3f:2a:44:e8:01:7f:6d:4c:3f:97:f0:
83:1d:9a:5a:89:4c:01:f3:31:79:b9:5e:5d:15:5f:
ae:6f:37:5f:e2:95:78:46:e0:b4:12:f5:86:1a:67:
02:a0:0d:0b:52:d9:ba:55:ab:5c:5e:7f:23:79:44:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2F:68:3E:18:50:EF:A6:A3:15:8C:4F:68:64:DF:8F:49:86:7A:76
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3y9oPhhQ76ajFYxPaGTfj0mGenY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.71.0/24
Signature Algorithm: sha256WithRSAEncryption
69:83:f3:8b:9a:7d:9a:77:ce:db:c6:0a:7e:8d:b1:1c:54:cc:
d5:17:3e:20:bf:70:1a:52:99:bf:93:12:6f:67:7f:0d:00:ba:
2a:19:4f:81:e2:ba:5b:e8:62:66:7c:81:f1:bd:dc:96:42:cf:
53:a0:34:31:f4:52:67:34:c7:41:34:89:d6:ea:32:02:5c:44:
87:70:6c:a7:8b:90:3a:10:46:1f:7e:29:47:c8:36:01:2c:fe:
bc:e6:46:84:5c:f6:f5:b6:1f:c7:38:86:d5:fc:7b:a1:d5:48:
ff:7d:5d:db:36:2a:0b:3e:e0:25:1a:c6:e3:5e:7f:38:4c:8c:
56:68:40:70:70:1c:a1:0d:d2:87:7a:b8:2b:7d:03:9e:fa:de:
d1:f6:03:5e:cb:0d:17:30:a0:55:28:36:21:de:77:fc:c5:a0:
89:e5:46:a9:c2:bc:b9:08:7e:82:36:ce:81:5b:50:08:68:e8:
78:24:a8:87:b2:12:f9:e9:a9:1f:b2:10:07:cb:3d:ef:05:6b:
8f:e3:46:05:99:b6:84:d0:88:99:4a:d7:15:c0:35:d0:bf:ed:
e7:be:f0:5d:7f:a8:6b:72:b8:fc:17:b7:9b:8a:1d:a5:85:4d:
93:72:2c:81:36:53:a4:1e:47:e2:9e:4d:15:33:20:1f:61:2e:
1f:a7:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:34:19 2025 by rpki-client