Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/iadbrK3hZ0ZLFbp7i-LD7UOSlSY.roa
File: iadbrK3hZ0ZLFbp7i-LD7UOSlSY.roa (raw, json)
Hash identifier: L0rWbLhAvUSqdKKdKCFLF+EcLMlzHqVX2r0C+w1aC7Y=
Subject key identifier: 89:A7:5B:AC:AD:E1:67:46:4B:15:BA:7B:8B:E2:C3:ED:43:92:95:26
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 0194F5419171A04FD9C54E01F60DEF16E110
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/iadbrK3hZ0ZLFbp7i-LD7UOSlSY.roa
Signing time: Tue 11 Feb 2025 13:45:02 +0000
ROA not before: Tue 11 Feb 2025 13:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 193.142.146.0/24 maxlen: 24
193.142.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:41:91:71:a0:4f:d9:c5:4e:01:f6:0d:ef:16:e1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Feb 11 13:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a75bacade167464b15ba7b8be2c3ed43929526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d6:63:f6:0c:6d:55:8e:d2:b6:f2:54:92:c2:
1a:1a:bd:1a:2e:ee:b1:f5:0a:a0:e1:bf:81:a7:6d:
5b:14:60:99:b9:01:02:36:8a:49:9c:20:2e:a2:2c:
07:14:b3:33:f4:12:0b:23:98:ea:f7:19:88:d2:67:
06:b2:22:a1:86:9b:6d:e7:8e:58:1b:aa:e1:33:25:
a9:57:ac:90:e2:9d:e0:42:98:23:cb:1a:e3:c9:b7:
f7:29:de:ba:75:0b:d3:b9:d5:ba:72:c7:67:fa:1e:
0c:8d:80:65:29:39:b4:76:04:8f:9e:d9:41:0e:e1:
16:52:d9:c0:6e:46:aa:f6:28:f9:06:6c:b3:2b:0f:
74:1b:35:e2:3f:5c:66:dd:62:a6:53:1f:a7:e9:79:
aa:d4:ec:56:48:27:1f:14:d7:42:d2:31:1a:9e:69:
72:c7:4c:ef:ca:85:09:6b:ae:ec:00:f4:47:44:5b:
ac:f9:ba:d6:41:59:a7:d3:e1:1f:09:b0:68:11:6e:
98:05:95:10:0f:f0:69:f4:84:23:88:07:05:01:ac:
a9:42:d7:bf:6d:38:21:66:ed:4e:66:a4:78:56:d1:
63:cf:a9:25:b8:1d:c2:be:c4:17:60:0b:5f:5f:53:
fc:d6:5b:39:a8:90:3d:bc:b0:0e:c1:fc:99:d9:6d:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A7:5B:AC:AD:E1:67:46:4B:15:BA:7B:8B:E2:C3:ED:43:92:95:26
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/iadbrK3hZ0ZLFbp7i-LD7UOSlSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:da:04:d8:9d:b5:99:ca:7d:50:e7:eb:c5:68:09:07:2f:51:
fb:6c:32:1b:3e:e0:77:30:77:c1:6b:f8:17:a9:5e:d1:a0:ef:
ab:d2:7f:11:58:13:79:a0:e0:8d:c9:2d:62:b0:6d:54:c0:99:
aa:6b:4c:d7:ec:a3:7e:e8:8f:0f:95:04:44:13:65:06:32:10:
09:ad:71:d0:5f:ed:f6:1c:46:e2:82:96:ae:fc:6e:be:33:43:
c2:0b:60:71:b3:44:d9:1b:27:31:f3:77:c2:4f:f2:ca:6d:d9:
84:5d:c8:7f:2f:46:ef:71:8b:dd:30:9d:f8:b3:ae:d2:2f:19:
74:a5:6b:14:96:14:89:33:f3:02:3b:54:52:16:f7:9d:97:43:
31:1f:e2:ef:de:53:b7:10:2c:1e:8f:30:e1:82:dc:9c:c7:73:
15:56:1d:45:a8:29:84:fb:61:9e:fe:a8:47:fd:6e:46:5f:17:
a6:35:a5:fd:ec:b0:f7:ff:56:80:6e:ab:c4:2a:67:08:90:c9:
e6:eb:62:2f:a6:e6:6c:f9:81:83:da:8d:67:a0:df:91:5e:45:
fa:a7:2f:74:13:e9:4b:39:c5:bf:52:74:4f:ee:33:32:22:23:
15:97:a1:41:ba:09:7a:b3:2f:fd:16:4a:45:da:a9:7f:be:6b:
42:f2:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:15:09 2025 by rpki-client