Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Ix9O-i4_zw0G5oouxc3xseGA8Eo.roa
File: Ix9O-i4_zw0G5oouxc3xseGA8Eo.roa (raw, json)
Hash identifier: c7xx1EFWXS87VmDm0MCiaBwoUVVt5kZzZI5Y7YpQiDg=
Subject key identifier: 23:1F:4E:FA:2E:3F:CF:0D:06:E6:8A:2E:C5:CD:F1:B1:E1:80:F0:4A
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0194D1DD920CD6687D5C3F8E1EBE70CAC82D
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Ix9O-i4_zw0G5oouxc3xseGA8Eo.roa
Signing time: Tue 04 Feb 2025 16:49:06 +0000
ROA not before: Tue 04 Feb 2025 16:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 193.135.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:dd:92:0c:d6:68:7d:5c:3f:8e:1e:be:70:ca:c8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Feb 4 16:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=231f4efa2e3fcf0d06e68a2ec5cdf1b1e180f04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:f4:8e:d1:cb:15:ca:c0:62:64:41:0d:1b:
dd:92:0d:d1:d4:a3:e4:1e:db:a0:08:32:bb:66:15:
f9:4b:a0:c1:da:f6:9b:04:3f:13:14:74:d1:c3:3e:
99:32:7e:c8:39:33:3f:58:63:e7:53:26:5c:3d:ec:
4e:08:0e:1d:5e:9d:c7:31:24:dd:a0:d4:b7:90:40:
dd:ec:2b:e4:c3:61:33:bd:c5:e1:1c:3e:37:a7:ba:
fd:0a:bb:69:df:19:c5:e7:66:36:c9:e2:9f:55:c1:
f2:4d:5a:d4:cc:c0:17:ce:13:25:30:2f:c8:31:fc:
8f:9c:6e:17:52:8d:b3:53:c8:b0:a5:93:bb:21:53:
00:2b:56:97:3c:3f:a5:f3:e8:23:d7:04:03:99:e1:
fe:15:ab:fd:be:34:72:64:15:8e:fb:db:c1:80:7b:
b9:14:10:ae:5b:4e:9e:f7:ca:fa:ee:75:39:eb:b8:
74:ad:59:cf:58:31:1c:ef:22:60:cd:6a:e2:35:01:
ec:ef:09:d6:e8:36:2e:e4:d4:da:b9:02:5e:1f:6e:
e7:a1:29:8b:41:48:2b:86:ff:bc:66:b9:4e:39:5a:
03:57:c4:72:5d:ab:82:fc:5d:d3:84:16:59:56:e4:
85:44:27:4c:46:4f:f7:68:ae:58:62:3d:b7:38:fb:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:4E:FA:2E:3F:CF:0D:06:E6:8A:2E:C5:CD:F1:B1:E1:80:F0:4A
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Ix9O-i4_zw0G5oouxc3xseGA8Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.137.0/24
Signature Algorithm: sha256WithRSAEncryption
34:35:ff:3b:33:5f:af:4e:a6:95:10:0c:b0:2b:4b:52:66:88:
2a:c3:2c:35:0e:5c:45:40:40:18:ec:4b:c0:b9:05:ae:a9:ea:
49:77:43:dc:1e:79:c5:aa:d7:6f:e8:b7:bc:2b:89:98:eb:6d:
7e:e1:cd:c1:42:5a:9f:3b:69:7c:ca:71:dc:62:b9:6a:5f:ec:
c6:f9:70:1e:cb:f2:74:64:d8:5a:9e:77:34:8d:e9:4a:38:a1:
7f:c6:16:c9:14:55:77:86:6d:40:f4:33:4a:71:3c:02:92:4c:
2a:04:83:51:06:6f:98:c8:9e:20:a4:75:8f:30:80:08:52:2e:
7f:ff:aa:cb:20:cb:6e:0b:cc:42:f1:47:e0:c1:a5:d9:93:b2:
02:8e:a9:39:53:8a:67:20:5c:a3:06:98:64:2b:6a:95:50:c8:
c6:85:3c:33:01:fa:27:9d:8a:e6:5b:46:91:52:aa:b5:6a:ce:
ef:52:e8:9e:4b:ba:33:12:93:de:e9:04:9f:e6:94:56:c4:12:
37:b5:7f:bf:e1:8c:9f:dc:13:71:6b:bd:f4:c3:d0:57:19:44:
d9:7e:05:ea:63:2c:e3:12:a9:14:15:3f:80:ff:41:01:05:d6:
68:1b:64:8d:14:9e:b2:a4:36:71:e3:db:86:07:d8:34:b1:85:
a5:8d:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:26 2025 by rpki-client