Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/KggI_agyWZEGcuvLUYbek7Jnzsg.roa
File: KggI_agyWZEGcuvLUYbek7Jnzsg.roa (raw, json)
Hash identifier: XcvJq2viVXn6DT12PuISsc06xmUGkRIBvDBO/dOpSt0=
Subject key identifier: 2A:08:08:FD:A8:32:59:91:06:72:EB:CB:51:86:DE:93:B2:67:CE:C8
Certificate issuer: /CN=dd2a1fd0ac3786905695af57f3ff277ffa86fea0
Certificate serial: 01857042A1FEA96DA1F560DD4CEBB75D0F0C
Authority key identifier: DD:2A:1F:D0:AC:37:86:90:56:95:AF:57:F3:FF:27:7F:FA:86:FE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Sof0Kw3hpBWla9X8_8nf_qG_qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/KggI_agyWZEGcuvLUYbek7Jnzsg.roa
Signing time: Mon 02 Jan 2023 02:14:53 +0000
ROA not before: Mon 02 Jan 2023 02:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199994
IP address blocks: 193.104.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a1:fe:a9:6d:a1:f5:60:dd:4c:eb:b7:5d:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1fd0ac3786905695af57f3ff277ffa86fea0
Validity
Not Before: Jan 2 02:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a0808fda83259910672ebcb5186de93b267cec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:cc:5c:bd:eb:45:84:fc:1c:ec:67:d7:27:
a8:33:84:60:fc:f6:fa:9d:c9:25:20:b0:d6:1b:3b:
17:27:2e:75:64:81:97:93:a2:f5:84:95:45:30:14:
45:04:a6:01:21:4e:5b:8e:1f:66:0a:19:35:24:79:
ab:c1:a0:53:8e:f6:29:9b:dc:56:1f:90:c2:b9:95:
6e:cc:ae:1b:f4:38:a1:2e:5b:f8:71:bd:a6:52:99:
14:17:b0:3a:ba:d9:cc:31:67:50:8e:87:8c:ee:93:
f6:19:7b:7a:24:ef:1e:14:f4:60:5d:74:96:e4:3a:
42:ec:96:68:49:1f:81:ce:27:b2:30:42:ea:bf:f4:
5b:d5:82:f7:46:5f:5b:c3:b7:a6:af:c2:c4:90:db:
83:82:26:0d:4d:08:de:99:e6:6a:3a:37:9b:f2:1d:
ae:02:1c:f5:ee:86:9e:95:7d:e6:37:c1:dd:79:b2:
f6:69:69:6b:0e:de:24:c9:13:ad:bf:56:43:9c:7a:
84:55:f3:8e:d6:91:61:35:9f:04:45:9b:82:12:7a:
c2:e4:71:7f:1f:9f:0d:6c:75:9b:91:80:71:b5:e3:
44:52:8f:5d:7f:c9:86:5a:b4:67:c1:db:3c:53:b5:
56:a3:97:35:1d:c6:f1:86:e4:68:c7:b3:16:37:0f:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:08:FD:A8:32:59:91:06:72:EB:CB:51:86:DE:93:B2:67:CE:C8
X509v3 Authority Key Identifier:
keyid:DD:2A:1F:D0:AC:37:86:90:56:95:AF:57:F3:FF:27:7F:FA:86:FE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Sof0Kw3hpBWla9X8_8nf_qG_qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/KggI_agyWZEGcuvLUYbek7Jnzsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/3Sof0Kw3hpBWla9X8_8nf_qG_qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d6:bf:82:0d:51:e0:a4:82:73:7d:da:b2:c6:3c:f3:fe:d5:
ad:66:d3:ff:0d:99:b3:4c:cc:a1:26:7d:d7:4c:08:b7:f5:71:
9d:1f:0b:2c:80:ef:c6:c7:ee:e6:fa:b2:2b:30:9a:46:24:5d:
b1:39:c1:1c:1b:34:09:09:2c:72:5e:d4:5e:92:dd:4b:a1:72:
2a:d1:c8:3d:54:8b:1c:f2:ee:87:f7:29:2a:03:a2:72:c4:bf:
a9:fe:93:28:ce:1a:67:b3:29:6c:cb:62:eb:e6:9b:bf:43:a2:
cc:84:fc:4b:6e:9b:88:88:b3:47:aa:e1:f7:4a:38:c9:b6:4b:
a4:72:92:49:9a:36:ad:18:15:a0:cc:08:4c:b5:49:33:3b:6c:
3f:49:23:0d:99:d7:8e:86:5e:db:cf:04:64:b8:7a:40:b8:2c:
c3:8f:11:ea:d4:f2:47:90:31:00:da:86:cd:78:5c:77:bb:13:
4f:4a:2e:86:c2:70:6e:d4:82:47:75:ac:fd:9b:7d:bc:1b:4a:
03:86:03:da:08:71:50:4d:85:15:33:36:a5:5a:ad:cb:d2:25:
c9:0a:1a:17:66:bd:73:8e:dd:37:35:2a:5b:e0:ec:d0:38:4c:
94:1b:78:fb:75:8f:a1:58:cc:4b:d1:ce:78:66:bf:47:66:5f:
80:24:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:16:34 2025 by rpki-client