Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/AiPidDvOS911eIE_Bv4bCPvMQdA.roa
File: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (raw, json)
Hash identifier: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=
Subject key identifier: 02:23:E2:74:3B:CE:4B:DD:75:78:81:3F:06:FE:1B:08:FB:CC:41:D0
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 0194228D4D1A5940FE91535EB4B3D94ADF24
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/AiPidDvOS911eIE_Bv4bCPvMQdA.roa
Signing time: Wed 01 Jan 2025 15:47:53 +0000
ROA not before: Wed 01 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50595
IP address blocks: 193.164.246.0/23 maxlen: 23
195.72.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:4d:1a:59:40:fe:91:53:5e:b4:b3:d9:4a:df:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Jan 1 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0223e2743bce4bdd7578813f06fe1b08fbcc41d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:6d:2b:9f:e2:97:71:0a:a4:c1:df:56:c4:
46:b0:63:56:70:53:f5:d4:0b:51:76:e0:fb:c0:04:
d9:0d:17:4c:df:db:58:d4:a5:de:91:a5:60:03:9b:
41:17:46:27:13:de:ef:0a:d4:17:63:0f:b5:38:e9:
ea:56:a3:74:5d:81:17:bb:72:dd:07:06:0a:16:f2:
50:9a:eb:82:45:06:07:27:6e:9a:4b:0e:1d:5f:ec:
f3:96:0d:c6:4f:f0:f8:d4:86:b0:27:fe:ea:3e:8d:
a8:56:95:5b:b2:77:82:2e:a2:3b:26:c3:8e:37:4e:
d7:b8:61:2d:17:df:2d:28:71:91:fe:7a:b5:39:42:
09:c6:c9:cb:32:14:74:30:f9:6b:1a:2c:56:78:a5:
58:fc:c3:cb:8b:04:1f:a3:23:72:cb:db:b2:87:a0:
df:e2:eb:1d:72:90:2a:31:64:26:c2:3b:af:c7:e0:
bb:8a:b9:ab:60:8c:ef:56:dd:d2:a7:0d:47:64:2f:
d3:37:ff:86:55:dc:8b:b9:87:61:7c:bd:ad:e0:44:
f3:33:5d:c2:42:b9:f3:d8:4c:cf:2a:15:8b:a5:95:
1c:ff:c3:16:b7:8a:97:1f:07:4b:78:af:8e:13:b5:
0d:e8:1c:a3:f2:ac:00:d7:c4:79:2b:34:68:54:75:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:23:E2:74:3B:CE:4B:DD:75:78:81:3F:06:FE:1B:08:FB:CC:41:D0
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/AiPidDvOS911eIE_Bv4bCPvMQdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.246.0/23
195.72.96.0/20
Signature Algorithm: sha256WithRSAEncryption
81:98:bf:52:6d:fd:97:cd:4d:ec:d5:7f:40:4e:a5:13:cb:ef:
68:04:b4:90:97:91:c9:00:5d:4c:81:ca:08:51:1c:00:ef:12:
11:9f:d3:f0:4b:33:46:74:d6:c4:ed:6a:9f:6f:ca:60:57:63:
b4:d1:a4:fe:b9:86:db:64:b2:ee:23:23:1c:8f:b6:81:60:e8:
30:1a:95:0e:01:ea:c5:16:74:77:9e:e4:78:cb:b1:03:c4:9f:
cf:52:6e:54:f1:9f:3e:31:27:bb:06:f2:ec:24:e6:ba:f7:c8:
83:af:95:e1:0e:62:6a:97:dd:ac:8a:75:07:d4:88:55:22:a7:
77:2f:88:0f:06:d3:8f:bb:65:05:78:e0:54:b9:65:13:db:4d:
40:ad:f1:6d:ee:6d:08:90:88:ce:b1:b0:bf:7b:01:10:ab:13:
26:08:1a:9c:ed:78:c8:1b:e9:e5:ae:10:2d:ed:4d:7a:7f:ed:
6f:e6:49:bb:ad:44:44:18:cf:8a:5f:1b:71:1d:e1:0e:c5:32:
10:08:b0:63:b7:ce:ea:68:a6:fa:07:ff:c5:59:6f:b2:0b:8c:
ce:f6:18:66:3f:1e:1e:25:41:cd:7d:97:4f:97:42:08:35:f9:
20:13:94:8b:83:4c:60:ec:ce:cd:18:72:be:90:74:af:3e:14:
7a:4a:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:56 2025 by rpki-client