Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/Rywj_aQoQHnt260cmm4BjBhDxUY.roa
File: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (raw, json)
Hash identifier: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=
Subject key identifier: 47:2C:23:FD:A4:28:40:79:ED:DB:AD:1C:9A:6E:01:8C:18:43:C5:46
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019421B18B5127721879EC98E618B29B8704
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/Rywj_aQoQHnt260cmm4BjBhDxUY.roa
Signing time: Wed 01 Jan 2025 11:47:51 +0000
ROA not before: Wed 01 Jan 2025 11:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207969
IP address blocks: 193.236.96.0/24 maxlen: 24
2001:694::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8b:51:27:72:18:79:ec:98:e6:18:b2:9b:87:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 11:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=472c23fda4284079eddbad1c9a6e018c1843c546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:c6:c2:05:43:04:ea:7e:47:7b:56:6a:1d:
89:43:3e:c4:57:c5:1f:9f:5a:e3:19:1a:df:74:69:
70:cb:5f:26:9e:78:54:e4:b9:1e:da:da:e2:6c:85:
e5:1e:7e:d8:05:c5:af:79:81:11:dc:9b:28:9e:d4:
c4:99:89:c0:e4:53:1d:b5:2f:2a:71:b7:2d:f1:ee:
23:1d:8e:47:45:6f:6f:4a:6a:ab:a1:3f:36:a3:4a:
83:4c:b2:45:70:91:71:55:5b:7d:52:9f:55:11:c2:
60:4f:a7:09:dc:ef:06:e8:e9:c4:f4:62:b8:7a:f8:
ad:34:4a:6a:80:80:5c:9e:bc:ca:3a:47:51:3d:11:
32:e4:f1:eb:93:7c:5e:89:60:b8:f2:14:48:1a:81:
8f:d8:42:90:ba:97:2f:7d:b4:57:6f:a1:39:48:1a:
e1:ce:93:af:37:a8:df:28:a4:60:92:3a:4d:01:11:
af:91:14:df:93:f4:68:e5:92:4a:2e:29:1a:4f:44:
42:ef:77:4b:8a:2b:cd:8e:b0:11:e8:e1:d3:c3:8c:
71:7c:e0:0c:e5:30:8d:d2:e6:19:32:98:aa:8e:11:
86:8e:76:1e:37:98:1b:fa:07:9d:9c:2a:27:33:11:
21:52:a6:f0:f3:83:f3:ab:65:93:5e:36:24:16:fc:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:23:FD:A4:28:40:79:ED:DB:AD:1C:9A:6E:01:8C:18:43:C5:46
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/Rywj_aQoQHnt260cmm4BjBhDxUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.96.0/24
IPv6:
2001:694::/48
Signature Algorithm: sha256WithRSAEncryption
2b:cb:b9:43:75:91:43:4c:2f:db:78:46:05:b1:19:06:59:f4:
9e:a0:b9:52:b5:d4:72:50:e6:14:5a:63:1b:5a:d4:ae:7c:d5:
35:5f:5d:43:e1:75:0e:88:48:bb:f5:94:df:33:98:2e:5d:2c:
fb:f7:72:32:87:5b:b3:e5:f2:4c:f4:86:19:ec:00:d2:f4:a4:
84:f3:92:89:38:a5:dd:cc:84:90:2c:a7:5f:cb:ee:4a:1c:01:
25:be:23:7b:9c:24:a3:8b:15:55:b0:69:a9:a9:ae:30:da:65:
9c:51:35:fa:e6:8c:3c:5f:34:d1:37:ff:6c:0e:f1:1c:77:f7:
3a:1d:ef:9f:ac:33:c0:b2:19:50:18:8f:b4:4f:bb:36:21:40:
dc:57:fc:be:c7:4d:8a:f3:f9:51:c7:b2:8f:10:93:c0:f0:1b:
ea:be:45:bb:21:64:d8:9a:f9:77:eb:5a:d7:6b:4e:13:2a:e8:
0a:dc:77:35:12:96:1f:55:2b:5f:18:77:cf:55:2c:d4:fc:77:
98:f3:ef:4a:f3:b5:7d:db:37:91:0a:90:60:27:38:76:db:fd:
6c:4a:db:43:68:6a:b6:0c:90:b9:2a:ca:36:81:68:02:3c:2b:
9a:34:db:15:ea:16:30:b5:60:c3:f6:50:ca:a4:5a:0c:13:c8:
5d:4e:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:25:26 2025 by rpki-client