Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/fQVeNcrq7kU1tYxJRtkt3SOvvXo.roa
File: fQVeNcrq7kU1tYxJRtkt3SOvvXo.roa (raw, json)
Hash identifier: itVQ4LlHjtOHPgaWlMhz4dYrc9D/clTCC3TwfIeH/4s=
Subject key identifier: 7D:05:5E:35:CA:EA:EE:45:35:B5:8C:49:46:D9:2D:DD:23:AF:BD:7A
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD669AB1F841699246FB8144911B7B
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/fQVeNcrq7kU1tYxJRtkt3SOvvXo.roa
Signing time: Thu 02 Jan 2025 07:49:11 +0000
ROA not before: Thu 02 Jan 2025 07:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 193.232.178.0/24 maxlen: 24
194.226.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:66:9a:b1:f8:41:69:92:46:fb:81:44:91:1b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d055e35caeaee4535b58c4946d92ddd23afbd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:57:20:6b:5d:b8:2b:91:51:10:29:fd:dd:
df:bc:7a:d8:02:95:7d:ed:b2:45:94:09:da:e4:ee:
0e:68:01:9a:3e:b1:a9:47:b5:71:e3:81:47:f6:41:
c6:33:24:ca:c5:46:a6:12:8c:00:7e:4d:36:10:a0:
54:25:d6:0d:e2:66:74:e7:14:35:95:98:11:dc:dc:
21:ef:11:f1:c4:15:a9:c3:a7:51:18:35:88:ed:40:
5f:dc:a8:c6:c9:7f:23:0f:33:36:4c:cb:b5:ac:48:
a6:50:a0:37:da:a9:8b:25:1a:b4:71:c4:15:ad:26:
b6:d3:b8:e7:8a:33:fc:ad:c4:da:38:b3:7f:04:5f:
a2:ae:e3:40:77:77:ac:e0:f2:ce:e4:4e:fa:89:21:
98:aa:02:a7:eb:d3:19:5a:4c:06:1b:c7:67:c6:3a:
11:d8:78:8d:18:b1:91:e8:7c:a4:36:ec:ff:dc:f4:
54:e8:97:b4:50:56:70:7c:bc:1d:7d:8c:8c:60:24:
6f:4d:92:67:c6:00:a7:25:e2:6c:53:a2:21:76:e6:
7c:a3:95:b2:0b:47:9d:fb:49:13:a2:72:61:64:2c:
e7:d4:4b:6f:ec:50:bb:6a:69:35:4e:9b:52:cf:f7:
04:bd:2e:be:35:10:aa:2b:b3:5d:c7:db:6d:5a:28:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:05:5E:35:CA:EA:EE:45:35:B5:8C:49:46:D9:2D:DD:23:AF:BD:7A
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/fQVeNcrq7kU1tYxJRtkt3SOvvXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.178.0/24
194.226.169.0/24
Signature Algorithm: sha256WithRSAEncryption
37:58:89:d8:c4:60:73:d9:66:35:2d:5d:57:27:9b:f0:fc:69:
6b:f7:c2:fa:80:e1:72:a7:56:94:6e:85:c5:82:af:73:cf:0b:
cf:a7:cb:53:70:d1:47:3d:73:2a:48:96:d0:06:d1:85:a1:93:
15:ff:30:80:3a:7a:95:aa:0d:0b:ab:14:9e:00:78:0f:ca:86:
72:96:25:b5:de:3b:7d:8f:52:32:28:2e:b5:fe:d0:fd:3f:73:
2f:f4:ef:85:40:db:7f:3b:7a:42:06:d6:44:6f:d1:5c:f6:f1:
55:5c:04:14:d6:07:d6:63:5b:dd:16:94:89:b3:af:43:b4:81:
75:15:5e:57:dd:ab:b1:2a:d7:0c:6a:14:e2:f1:d8:43:ba:dc:
3c:ca:84:68:87:aa:df:1f:0f:be:9e:0e:88:61:d6:62:a8:60:
2b:5f:d3:79:72:8c:42:da:ad:33:05:14:0b:2f:d2:65:a5:12:
36:f2:53:6e:2a:e0:68:5d:67:26:ad:92:f9:aa:35:a3:07:0c:
5f:40:44:d5:76:69:62:ac:cf:36:0d:82:61:1f:ff:76:32:21:
87:c4:b7:ab:b3:fd:fc:94:b2:8b:5e:7f:12:0d:be:b9:ca:50:
ba:c7:39:81:32:20:94:f5:ff:5a:b1:9b:47:8b:a8:69:f5:d4:
e4:10:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:30 2025 by rpki-client