Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa
File: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (raw, json)
Hash identifier: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=
Subject key identifier: 22:AC:5C:77:F7:D5:D5:0B:16:07:93:BB:E1:90:21:E0:D3:35:F1:CB
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 01942369ACF78EF6A68934A510DE31E5DCAB
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197889
IP address blocks: 193.188.192.0/24 maxlen: 24
193.188.193.0/24 maxlen: 24
193.188.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ac:f7:8e:f6:a6:89:34:a5:10:de:31:e5:dc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22ac5c77f7d5d50b160793bbe19021e0d335f1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:75:46:d4:10:47:e3:9b:d0:e7:a8:52:23:
22:1d:2e:34:92:6f:12:9a:ed:41:ad:8a:cb:4c:f1:
4a:b7:d1:da:62:9e:ea:e5:3d:00:fc:1c:11:65:74:
1e:dc:ed:be:d3:21:21:9f:41:e8:8d:d9:ac:5f:d8:
c2:36:51:c5:99:f2:2a:a9:49:2d:8f:18:c7:92:f3:
19:eb:bb:42:59:45:49:4d:3e:3d:66:f9:5a:21:96:
15:dc:64:49:09:29:fb:cf:bf:e9:b2:13:19:53:94:
10:28:8e:52:42:ef:da:34:d7:0d:58:c7:6d:51:ba:
42:90:df:ab:ce:0e:87:9c:ef:81:3b:d2:e1:5f:e9:
c0:62:33:8f:66:c1:ae:16:e5:1a:15:51:77:ad:68:
d0:cd:4b:d9:be:ac:44:ce:e0:d8:ae:27:c0:3f:85:
d1:79:2b:a8:30:da:03:94:16:b0:75:c3:9c:f5:a3:
6c:e3:bb:80:2a:89:92:c4:86:a0:7c:87:6f:8d:67:
20:fe:fc:42:a3:3d:98:3c:4b:54:4f:cf:84:9d:a4:
81:68:cf:3d:cf:1c:7f:cd:c0:e4:34:d2:a2:27:0e:
46:50:d2:d6:df:28:6a:78:33:9c:06:be:8c:28:46:
76:77:3a:0a:58:54:29:60:6a:cf:a9:ae:26:67:e6:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AC:5C:77:F7:D5:D5:0B:16:07:93:BB:E1:90:21:E0:D3:35:F1:CB
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.192.0-193.188.194.255
Signature Algorithm: sha256WithRSAEncryption
8f:2a:33:50:7a:aa:59:cb:e9:db:3f:e1:7b:2c:f4:8c:aa:13:
ab:4f:62:f2:3f:cd:65:84:4d:61:c7:78:f3:6d:ef:90:0a:12:
d3:09:20:10:5a:61:f4:ce:f8:95:6f:cc:49:77:f3:fb:cc:5a:
c8:28:63:55:8c:f5:2c:1a:cb:a9:7e:f2:5f:3d:89:ce:b5:15:
2d:15:c8:75:31:f1:ab:1d:d1:74:38:f6:73:13:05:3a:05:b5:
ef:81:2d:6a:2a:0e:f4:4e:11:10:4a:0d:e6:14:4b:b3:bd:41:
c5:de:96:56:fb:44:af:cb:18:7c:4e:8d:13:97:b8:e7:9b:fb:
2f:0b:cf:3e:97:c9:ea:21:ae:ff:d0:7a:88:06:11:a1:e4:0b:
a3:34:5a:94:4d:33:bb:9e:7b:f5:33:4d:2a:3c:b1:ea:5b:4e:
6f:9c:36:f5:3f:75:ab:54:49:9d:1c:f8:6e:d8:9f:b4:54:aa:
01:8e:bd:c0:ab:00:24:aa:8c:2f:7f:88:12:0e:93:81:da:de:
2a:f9:58:39:95:4e:09:22:8a:b8:02:29:ef:1f:bc:34:c2:8d:
66:21:fc:bc:cc:cb:d7:4f:71:33:f1:b1:4c:79:0b:41:ab:bd:
86:a7:3e:dd:33:dd:9c:c0:06:17:0f:48:ac:35:0a:84:32:a7:
e8:5f:8f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net