Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa
File: yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa (raw, json)
Hash identifier: LgnuacZQDPP2J60/EcJiQNzEwvS+wm94uYSyH+Ocir4=
Subject key identifier: C9:2E:45:23:B9:D8:8C:59:EE:D4:BD:40:9B:C0:2E:6B:8A:17:5C:4F
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 01943C1ECD2FE1CD532A107155B320126F4C
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa
Signing time: Mon 06 Jan 2025 14:57:18 +0000
ROA not before: Mon 06 Jan 2025 14:57:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15401
IP address blocks: 31.193.48.0/21 maxlen: 24
178.237.96.0/20 maxlen: 24
185.3.64.0/22 maxlen: 24
185.23.92.0/22 maxlen: 24
2a00:4280::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:1e:cd:2f:e1:cd:53:2a:10:71:55:b3:20:12:6f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Jan 6 14:57:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c92e4523b9d88c59eed4bd409bc02e6b8a175c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:35:df:d5:46:4d:e6:e8:26:62:f1:70:5d:
17:c0:d5:62:b2:6a:7e:c9:75:5a:c9:82:9f:45:13:
01:ec:7e:35:dd:91:18:93:eb:3f:77:01:db:af:29:
c7:f3:5a:37:79:3c:b9:96:d3:69:de:28:d9:a7:36:
49:43:86:2f:f1:9c:3b:39:e5:c5:f0:cf:55:35:4e:
5f:5e:62:b1:b7:b6:6b:9e:4e:68:fa:b8:fa:0b:f5:
a1:2d:e1:d2:72:f2:ba:3e:4e:13:30:48:da:67:91:
6c:de:92:df:10:80:3b:69:a6:04:ab:3e:b3:d7:76:
6c:39:1b:24:18:73:a1:fc:c7:fd:17:e9:a1:69:63:
49:8f:89:f1:22:f0:4c:bc:28:80:bc:82:b7:c5:d3:
53:05:c2:5b:d4:68:a2:60:b9:31:fd:80:c2:bc:8e:
86:21:71:64:ce:46:a8:02:89:40:93:40:26:ac:cf:
08:1f:71:ad:d8:a5:60:c9:b8:a7:26:dc:1c:35:41:
db:f8:a5:d4:45:b2:80:9f:f0:91:ac:5f:28:13:86:
2c:47:e7:fa:3c:07:7a:13:97:0c:30:08:a7:de:f9:
63:4f:55:2d:77:08:5d:3e:6a:34:26:d5:30:e0:a4:
64:b4:15:2c:c8:8b:13:9b:b4:1d:1e:18:7c:17:08:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2E:45:23:B9:D8:8C:59:EE:D4:BD:40:9B:C0:2E:6B:8A:17:5C:4F
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.48.0/21
178.237.96.0/20
185.3.64.0/22
185.23.92.0/22
IPv6:
2a00:4280::/32
Signature Algorithm: sha256WithRSAEncryption
27:ea:c9:9b:b7:2d:7e:cd:f8:02:9c:c2:fa:69:44:92:98:c7:
e7:4f:b8:1a:59:52:d5:33:c9:3f:68:26:00:9a:90:85:af:50:
7f:e9:71:52:fc:14:c9:4f:2b:7d:38:44:1a:7d:5a:ee:68:3a:
60:3d:07:4c:fa:dc:05:07:6e:0b:20:e5:dc:f1:a3:a0:05:cd:
0a:ba:9d:4d:5b:45:a3:88:e0:7e:11:d3:ab:b5:bd:51:59:fb:
9f:99:cd:9a:81:80:47:b8:8a:0c:9a:32:d0:4e:03:fe:43:e0:
8b:69:5f:c1:35:a9:73:06:c6:5a:4d:0d:27:58:71:01:fb:3a:
7f:ec:03:7d:8e:1a:d0:2f:38:79:90:cd:07:52:9b:24:73:e1:
6e:23:e1:58:cc:c7:1a:99:dc:8c:16:3d:29:50:ef:9a:80:b9:
0d:f8:ba:b3:85:80:5f:16:87:15:52:c7:64:74:03:bb:08:27:
24:8e:9e:64:0f:0f:5c:f6:e7:ea:70:ce:6e:33:6d:58:48:e1:
e4:43:04:1f:62:d0:41:a2:50:7f:5f:6f:be:36:04:19:50:1f:
95:ce:57:d3:a5:cf:22:bf:16:3e:15:b1:be:7d:24:45:2c:bc:
f0:1d:9c:cf:b6:92:6d:b9:a1:63:8b:ca:3d:b8:84:a4:d6:d5:
93:11:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net