Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/g8d3H6uyPHc2Z2Kxl1XpuWLylss.roa
File: g8d3H6uyPHc2Z2Kxl1XpuWLylss.roa (raw, json)
Hash identifier: eaBB1dyQ6fgSlZ0sLLDjVtTdM51Muki71DBbt4+3KOo=
Subject key identifier: 83:C7:77:1F:AB:B2:3C:77:36:67:62:B1:97:55:E9:B9:62:F2:96:CB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485A6F702D9625EFAE6E0EF9C417B8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/g8d3H6uyPHc2Z2Kxl1XpuWLylss.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47957
IP address blocks: 193.183.113.0/24 maxlen: 24
193.183.114.0/24 maxlen: 24
194.71.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5a:6f:70:2d:96:25:ef:ae:6e:0e:f9:c4:17:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83c7771fabb23c77366762b19755e9b962f296cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:ea:27:a2:60:5f:61:f9:37:fa:6e:2f:bb:
ac:3d:29:24:ec:44:0f:be:27:b5:5d:c7:df:f7:0d:
02:ad:2f:c4:71:18:8b:e3:de:dc:d3:81:8a:06:2f:
1f:39:4e:10:84:c0:1e:9e:91:79:6f:92:e0:eb:91:
37:af:e3:ad:9e:58:cd:f4:21:71:3a:43:c8:34:ab:
02:b3:71:bc:a7:5a:d9:8c:16:8a:cd:f9:44:78:61:
e0:ae:b2:6f:38:0d:4e:7f:a6:47:9a:50:0e:e7:68:
f8:35:af:21:f5:78:d8:59:e5:50:61:01:64:e5:2f:
d4:66:4d:f7:a2:38:57:07:17:8f:25:fc:df:5f:ed:
11:6f:d2:13:01:1a:0a:e8:6d:81:39:12:53:e0:48:
d2:bb:be:15:00:7f:d0:18:42:39:77:05:68:cc:e7:
4c:39:e3:23:ab:69:d4:94:88:9c:09:2a:d3:0b:37:
8a:b2:0b:87:8c:b7:1a:fe:8c:00:4f:5f:44:c7:55:
dc:fd:ca:3b:6a:20:a2:ac:fd:b8:4f:70:53:cf:dd:
50:42:92:15:45:2e:56:98:99:57:9a:25:e5:50:4b:
4d:66:1e:5a:75:ae:27:43:4e:41:5c:cc:d3:9f:1d:
bb:d8:76:f4:19:d2:6d:20:40:fd:38:e4:ee:ca:ba:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C7:77:1F:AB:B2:3C:77:36:67:62:B1:97:55:E9:B9:62:F2:96:CB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/g8d3H6uyPHc2Z2Kxl1XpuWLylss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.113.0-193.183.114.255
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:fc:b8:a1:3f:ae:0c:52:89:7e:99:ad:57:d7:39:2f:53:8b:
99:82:17:42:f1:fd:bc:9c:8c:95:72:51:45:6e:16:57:a5:58:
08:f1:bb:78:67:f5:13:05:28:90:33:ce:d8:06:4d:b6:2d:e8:
2d:63:6f:0c:8e:c4:a1:3d:96:b1:8c:5d:f3:80:b3:92:d8:28:
71:ab:a2:69:c4:ec:62:d2:b0:f6:be:75:fc:11:f7:83:fc:51:
d2:3c:e9:00:9e:d3:19:a7:01:46:99:72:96:65:1c:9b:2f:26:
f5:27:28:29:90:77:13:dc:39:b9:ba:54:af:06:ed:29:c0:e1:
74:32:ab:f3:3f:25:45:96:3b:fd:c3:8e:d5:91:94:3c:b3:7f:
64:1d:7d:26:fa:92:66:4b:0b:4f:d1:7b:4b:82:d8:d1:64:20:
75:56:74:92:1e:e2:d6:d8:f8:58:e5:ad:e3:9d:db:76:2e:93:
e4:4a:fa:58:2a:ff:cd:87:2e:ef:b8:95:c0:2c:bb:cf:2d:50:
4e:a4:d2:0e:84:e4:fd:15:a2:ed:55:0c:48:23:42:6b:fd:8d:
c8:ce:cd:42:71:46:d4:5d:73:00:d5:7e:2a:ce:4c:16:42:0f:
dd:1e:cc:18:ab:e9:23:4e:5d:40:aa:0b:b6:e3:b5:79:c2:fd:
70:80:46:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:28 2025 by rpki-client