Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/ij43C7xr8xTz-pjXAc9irjAaFXA.roa
File: ij43C7xr8xTz-pjXAc9irjAaFXA.roa (raw, json)
Hash identifier: TchsYLXYDpTrG6rR/zLX/7ji8qJkl2gfrI50UG67KC4=
Subject key identifier: 8A:3E:37:0B:BC:6B:F3:14:F3:FA:98:D7:01:CF:62:AE:30:1A:15:70
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 0194228DE11BCCD216BC10F846ACCC357EFB
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/ij43C7xr8xTz-pjXAc9irjAaFXA.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208023
IP address blocks: 193.194.130.0/24 maxlen: 24
193.194.131.0/24 maxlen: 24
193.194.142.0/24 maxlen: 24
193.194.143.0/24 maxlen: 24
2a0f:9d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e1:1b:cc:d2:16:bc:10:f8:46:ac:cc:35:7e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a3e370bbc6bf314f3fa98d701cf62ae301a1570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:69:af:13:f5:e5:41:9e:56:52:c7:af:c2:
9f:da:55:76:53:37:62:b2:c6:5a:17:44:2c:ac:fe:
bf:6e:ba:d5:e3:7a:04:90:ed:8d:ae:2c:54:21:7f:
43:d0:d3:0d:92:31:7a:57:32:d5:ea:b3:2a:2c:24:
dc:31:c6:ce:9b:ed:04:2e:73:ed:e6:51:62:ce:cd:
73:68:44:3b:57:01:f7:16:99:fd:a9:79:84:22:f5:
7a:17:f0:f4:3c:fc:9b:3e:4d:70:59:e6:9f:4f:66:
99:17:cf:cf:dc:01:e0:87:9d:3e:88:f0:ed:45:56:
8c:e7:1c:4f:1d:48:62:33:8f:6b:9d:be:8b:b2:20:
09:93:c2:76:38:eb:6b:d3:b5:f9:36:da:0f:c3:b1:
31:47:3c:dc:f0:1d:df:9a:29:9b:c0:0b:d4:6b:5d:
60:4d:7c:4c:31:a5:c6:84:6c:0c:10:bb:36:72:09:
39:c5:95:a4:af:fc:dc:75:23:04:86:52:d8:10:b6:
03:54:f8:fc:02:37:cb:16:bf:a2:ea:12:e4:79:2e:
b8:8a:a8:06:27:30:50:7b:5a:a8:cc:05:22:15:73:
42:60:ae:2a:ed:4d:31:9e:1f:3e:52:bb:13:29:18:
14:44:c9:38:41:5e:bb:bf:3b:bf:75:bd:58:08:3b:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:37:0B:BC:6B:F3:14:F3:FA:98:D7:01:CF:62:AE:30:1A:15:70
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/ij43C7xr8xTz-pjXAc9irjAaFXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.130.0/23
193.194.142.0/23
IPv6:
2a0f:9d40::/29
Signature Algorithm: sha256WithRSAEncryption
9d:bf:8c:6a:6f:8c:fc:06:3d:e1:29:f8:29:d0:dd:15:b5:19:
6e:9d:48:72:85:0e:3a:9b:cb:4e:13:ee:20:4a:b2:9b:1c:07:
34:bd:ce:cb:90:32:9d:9a:49:80:0f:76:98:77:f0:8d:5c:dc:
9e:77:91:3a:48:40:65:a8:b6:0c:e1:69:60:00:40:78:14:65:
de:1a:7a:a5:ba:02:0a:83:4f:2b:51:4e:30:16:63:23:04:b8:
01:44:9a:6c:46:49:c8:bb:f5:cd:f2:f1:c9:fe:29:96:d2:57:
4b:6f:db:9d:78:b4:b1:33:45:f0:b5:57:55:81:1f:a5:01:54:
18:f9:18:a5:9b:8f:ae:58:61:48:db:00:dc:bc:79:e3:66:9a:
2b:51:f3:29:72:ab:cf:52:1d:6e:45:29:10:f7:79:dc:db:de:
f8:d6:0d:85:4a:80:1e:14:ab:10:13:18:87:3d:e6:68:37:18:
ba:4e:6e:5a:bc:ae:d9:d2:d6:47:02:97:ed:a9:ff:24:7f:da:
1b:6b:7b:f3:52:f0:00:0a:54:47:7a:5a:8c:4f:fc:af:5a:d4:
16:7e:a1:06:ff:7c:3d:d8:11:d5:4a:40:d8:dc:51:c8:0e:ef:
bc:0a:85:e7:23:98:e8:62:4f:8e:1f:92:5c:98:d4:87:e5:ea:
68:97:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net