Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Y11W_9jkFboJFp3wiMTrZtrVt4A.roa
File: Y11W_9jkFboJFp3wiMTrZtrVt4A.roa (raw, json)
Hash identifier: rR+q4rFTiYgWzeWsyxuDqF4k2RY0uWDf9UAegGWGdt4=
Subject key identifier: 63:5D:56:FF:D8:E4:15:BA:09:16:9D:F0:88:C4:EB:66:DA:D5:B7:80
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0195197CC7C43E2D05660670B6B5182A944F
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Y11W_9jkFboJFp3wiMTrZtrVt4A.roa
Signing time: Tue 18 Feb 2025 14:36:02 +0000
ROA not before: Tue 18 Feb 2025 14:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5429
IP address blocks: 193.232.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:7c:c7:c4:3e:2d:05:66:06:70:b6:b5:18:2a:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Feb 18 14:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=635d56ffd8e415ba09169df088c4eb66dad5b780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:ef:ec:1b:1e:32:f4:26:54:6e:09:eb:32:
75:3d:9b:7d:21:b2:25:01:9f:ff:75:0b:3d:a4:24:
7c:42:62:46:ba:aa:2f:a7:5f:5b:56:56:bd:9e:a6:
b6:59:bf:02:91:c4:c7:7d:1b:fa:a5:1c:7d:90:34:
3b:d9:71:2c:fb:bc:67:89:59:56:41:73:17:4b:cb:
25:59:36:e9:a3:42:be:84:3a:8e:cf:62:cd:51:f9:
f5:b2:33:18:2c:02:be:fb:26:43:6a:ee:ed:c2:24:
18:61:8c:d7:73:1a:6a:a0:bd:87:72:ec:f5:38:a7:
e5:cd:f7:2d:48:c6:4f:df:1e:be:c8:3a:db:22:26:
eb:7b:ac:97:eb:b7:92:43:8c:f9:92:e4:1d:87:b1:
2c:61:28:bb:31:f8:a0:e7:7f:7f:bf:3a:28:3a:01:
f0:fb:f7:89:0f:28:08:71:2b:c6:46:d2:57:55:f1:
36:70:1b:54:3b:74:49:f0:53:53:c9:43:a0:c3:33:
20:1f:17:ae:61:e8:28:17:57:e6:76:47:f6:cc:5e:
17:fc:f5:9c:06:e1:97:9b:f3:d2:2a:ce:84:c4:a9:
dd:25:56:44:15:92:6b:9d:ee:b0:21:4c:85:49:fe:
70:5d:58:85:af:7b:d5:83:69:ed:e9:23:8a:cc:ce:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5D:56:FF:D8:E4:15:BA:09:16:9D:F0:88:C4:EB:66:DA:D5:B7:80
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Y11W_9jkFboJFp3wiMTrZtrVt4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7f:3e:3f:19:50:7f:8b:74:4c:55:89:43:4a:8f:04:91:15:
f8:4e:90:65:60:5e:10:a3:e1:77:f0:78:9f:7a:64:c9:c1:d5:
cb:f2:06:f5:f7:ea:ff:51:69:56:25:30:b6:7c:04:38:00:07:
2b:a5:cb:29:27:b4:68:6a:b0:bd:c2:1d:37:cf:d1:88:ad:b3:
29:3f:28:b5:eb:11:04:c5:86:2f:f0:dd:c6:90:e2:d8:5a:1d:
2a:2b:0f:a1:6b:36:b7:f0:f7:a1:e0:59:44:4e:fd:fd:99:e6:
75:49:7f:17:72:23:80:13:00:24:ce:56:58:22:86:74:b2:da:
ed:e6:12:13:fb:c6:1f:ca:41:5e:fe:ad:18:22:4f:4b:23:7a:
91:a3:7e:1e:83:a0:88:ef:32:1c:39:10:a8:17:cc:9d:95:15:
09:54:f0:ff:77:06:fd:c1:cb:66:41:a7:9f:ed:8c:43:b0:91:
e5:49:d9:ac:b6:a5:3d:03:4f:df:50:81:88:d4:da:af:88:f8:
55:a4:0c:cd:8d:62:65:cd:e0:92:15:e3:75:5e:79:33:b7:51:
85:17:03:f4:d7:2c:da:91:e9:72:ff:2b:7d:db:45:5b:b6:5a:
36:3d:f2:ed:64:d8:5a:70:dc:2f:f3:0e:d8:28:c0:53:d2:bb:
7a:bc:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:54:14 2025 by rpki-client