Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/IlzfTHCX--ryHCCh1ym927r2NiI.roa
File: IlzfTHCX--ryHCCh1ym927r2NiI.roa (raw, json)
Hash identifier: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=
Subject key identifier: 22:5C:DF:4C:70:97:FB:EA:F2:1C:20:A1:D7:29:BD:DB:BA:F6:36:22
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 019425FC00E558D8FE23FA45022C716AEED5
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/IlzfTHCX--ryHCCh1ym927r2NiI.roa
Signing time: Thu 02 Jan 2025 07:47:39 +0000
ROA not before: Thu 02 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 193.109.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:00:e5:58:d8:fe:23:fa:45:02:2c:71:6a:ee:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Jan 2 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=225cdf4c7097fbeaf21c20a1d729bddbbaf63622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:8d:0d:9d:0a:31:e3:b7:75:6a:d4:38:bf:
b1:ba:da:86:1e:b4:ab:fe:e2:4a:35:4d:c2:6d:ca:
5b:c2:43:46:61:8f:c5:7c:81:e2:1e:81:60:4e:6d:
6f:66:2e:58:fe:4a:ad:6d:45:2f:30:9d:86:b4:c0:
3c:28:07:6c:33:a2:be:c8:0e:a8:7f:0a:3e:b8:c8:
7a:3e:0e:98:32:46:8a:12:4a:cc:8a:c5:f6:a5:86:
7f:28:03:ff:13:3a:e0:c6:d8:d7:77:4f:36:8e:c7:
b2:af:0a:b5:bd:4e:70:88:77:9b:2a:a1:19:9c:f2:
5a:d7:92:04:14:93:18:d1:56:94:4f:16:8d:9d:9c:
10:a7:65:e0:56:5d:13:f5:da:1e:63:c9:0e:4c:88:
96:7f:85:f5:1c:ca:a8:37:ad:a6:58:73:25:cc:a0:
68:5b:c5:9e:cf:57:cb:08:85:ae:f5:07:6b:8a:ab:
d1:4b:44:ca:a8:cd:f3:80:98:86:23:3b:4d:56:5d:
65:6d:27:11:04:aa:ff:a1:ba:25:0c:d7:d0:39:00:
bb:80:79:df:2a:a7:19:45:38:fc:e2:28:34:bd:29:
1f:cb:a4:11:ad:60:4c:74:ba:ff:f1:04:66:92:0c:
fb:25:c7:db:02:55:08:f0:17:c4:89:cd:68:a6:88:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:DF:4C:70:97:FB:EA:F2:1C:20:A1:D7:29:BD:DB:BA:F6:36:22
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/IlzfTHCX--ryHCCh1ym927r2NiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a4:ce:65:6c:81:2d:ee:32:2b:09:99:00:3b:4d:a7:57:f5:
67:9c:f0:a1:fc:65:65:7a:09:87:de:14:a2:af:b3:3f:d0:0c:
f3:3e:06:28:56:fa:7e:45:6a:66:5d:8a:4e:20:63:85:0a:e3:
28:6e:3d:c8:67:96:d6:fe:2f:3b:c8:7a:4b:67:b7:e0:01:bc:
8d:f7:0f:92:13:dd:01:bc:ce:8e:3d:a7:e1:3c:c9:58:b4:c5:
1a:ed:14:64:7d:80:e2:cc:90:04:62:27:a4:e3:ed:91:c8:ff:
12:74:dc:d4:21:71:64:e1:3d:40:60:03:bd:bd:d0:a1:d0:e0:
50:5a:ea:45:90:07:2e:80:eb:72:4e:fc:39:9c:b6:c8:ee:3a:
5c:37:a9:d0:65:8e:ae:f3:6f:e0:fd:4b:be:f5:7b:b3:29:2b:
61:42:19:42:d5:3a:f6:ee:7f:d8:64:15:a5:85:c0:6b:80:39:
4f:6f:47:b5:bf:a8:30:eb:3a:87:91:1b:2b:90:9a:41:f3:5a:
7e:85:44:1a:3b:81:42:7f:63:95:b5:8d:6e:8a:28:ee:b3:e3:
1c:39:81:eb:e2:90:1d:7d:db:54:ec:09:0e:b0:9b:b5:aa:da:
db:60:33:e1:4a:b8:26:ae:8d:a0:cf:7d:e1:2d:00:65:68:ec:
cf:4d:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:02:59 2025 by rpki-client