Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/cD5IUm-EGBa-Vh255QRP5iyEl_s.roa
File: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (raw, json)
Hash identifier: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=
Subject key identifier: 70:3E:48:52:6F:84:18:16:BE:56:1D:B9:E5:04:4F:E6:2C:84:97:FB
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194221FA82003D1E8782C2FF8198993C176
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/cD5IUm-EGBa-Vh255QRP5iyEl_s.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213777
IP address blocks: 193.42.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a8:20:03:d1:e8:78:2c:2f:f8:19:89:93:c1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=703e48526f841816be561db9e5044fe62c8497fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:84:6f:90:d1:27:f9:e3:79:73:4d:9b:f6:
05:4f:af:a8:6a:94:0a:d6:11:c2:f9:ca:a0:b4:74:
01:ca:90:b5:ff:68:4c:f2:1b:f6:01:f6:32:7e:9a:
4d:87:dd:2d:20:f3:39:27:42:a3:d5:a7:47:00:4a:
9b:1d:90:2f:9a:bd:04:36:35:f1:86:a1:a8:d4:83:
e4:d6:b3:d1:be:72:8a:73:49:bd:c2:95:bb:1b:a8:
c3:1d:db:a3:e9:c2:73:ed:f3:c5:0f:38:f3:8b:62:
5e:f5:8e:a0:fb:75:d0:f9:54:74:99:ea:f5:e0:bd:
5e:da:fe:c2:99:e9:03:23:a4:52:23:91:f3:aa:db:
97:ff:5b:eb:6e:70:ce:27:be:51:12:59:fe:eb:fa:
7d:f2:74:7a:89:2d:14:a5:14:76:f7:7f:f5:25:f4:
54:7b:69:fc:e4:f3:ef:a0:52:7c:d9:50:4d:a9:c6:
70:d0:dd:bc:ba:f3:f7:60:88:44:da:77:5c:f6:a5:
a0:c9:c4:97:01:d8:bc:79:69:be:c2:52:dc:7e:2b:
71:82:68:f5:3b:df:74:93:a1:be:03:10:7f:ac:f9:
00:c3:bf:81:75:70:55:23:dd:f9:dd:d1:08:38:d8:
24:b3:25:3b:93:8e:fc:93:67:6b:6c:13:b1:a0:74:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:48:52:6F:84:18:16:BE:56:1D:B9:E5:04:4F:E6:2C:84:97:FB
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/cD5IUm-EGBa-Vh255QRP5iyEl_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:5f:6c:9c:44:d3:83:41:e4:89:f0:0c:60:fe:51:84:4e:a3:
29:7b:5f:91:71:e1:f1:cc:73:dc:c2:c2:ba:4b:5f:35:1c:a9:
e8:eb:c6:bb:22:0c:1d:bc:a9:aa:20:ce:98:30:a4:d7:f7:3b:
46:35:53:f4:6d:93:3e:05:24:2c:5f:f5:0c:7a:36:86:3d:c3:
19:57:55:d9:92:9f:bd:02:fc:9c:53:62:f1:ec:9b:9e:57:69:
fb:44:ae:4d:2d:7b:cf:0e:8a:40:d5:65:52:26:88:7d:a1:30:
44:e5:5a:d4:69:3a:0d:dd:3c:72:ce:ba:9e:07:89:93:60:ce:
82:1c:49:78:8f:f2:7f:51:a8:be:a8:37:ac:2c:a5:a1:08:81:
2d:18:13:0f:eb:68:ef:a8:bf:3e:4a:52:b6:60:63:59:47:db:
fa:e8:e8:a0:e1:c9:4a:c3:05:62:11:bb:8b:f1:57:90:7f:6a:
ff:e3:29:a5:f2:3e:c2:5f:d0:c0:82:8c:99:c8:9b:7b:75:62:
78:8e:b0:e0:67:c4:09:e8:a8:f3:fa:29:69:c8:60:af:4b:b0:
bd:aa:ed:1f:55:ad:25:92:b2:9c:fe:3b:30:e3:e1:2a:db:3a:
77:f9:ad:b6:96:4d:60:46:4a:cc:f3:09:80:e4:44:82:a7:a2:
86:02:c1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:31:09 2025 by rpki-client