Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/lAsvBALGAB7ffanhsI2XBbzGjwg.roa
File: lAsvBALGAB7ffanhsI2XBbzGjwg.roa (raw, json)
Hash identifier: Lfmd3jAWkGrnZmmpvbr3VmK27pHIPidZbcCZnfMNIH8=
Subject key identifier: 94:0B:2F:04:02:C6:00:1E:DF:7D:A9:E1:B0:8D:97:05:BC:C6:8F:08
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FF182EDA6186BE9E0C8A90585D5CF
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/lAsvBALGAB7ffanhsI2XBbzGjwg.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48447
IP address blocks: 193.160.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f1:82:ed:a6:18:6b:e9:e0:c8:a9:05:85:d5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=940b2f0402c6001edf7da9e1b08d9705bcc68f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:a7:87:eb:8b:77:b0:3d:0a:3f:89:03:7a:
c5:7e:41:1b:92:60:0f:0c:8f:ca:c4:77:53:5d:9d:
c8:ea:d9:be:b8:37:ee:06:6f:7a:c4:e6:7c:25:dc:
ea:44:36:dc:b8:f7:c8:50:72:92:9b:1b:e1:88:09:
64:5a:8a:15:65:ac:8a:b3:2e:20:91:6c:08:00:fc:
06:4b:97:ab:11:16:8d:b3:13:26:84:c7:a7:04:ee:
93:83:d0:56:dd:bb:77:70:73:58:3d:ce:15:1d:09:
ce:c0:ac:a0:46:4e:63:e5:a3:30:d8:eb:2a:a1:25:
32:d0:9a:fb:d3:1c:f2:18:52:58:81:ef:bf:85:e8:
fa:41:7d:ea:c8:b5:4d:17:59:ce:c9:b5:88:ae:4f:
05:d8:df:a1:a3:99:cb:1c:5a:fa:55:78:73:e4:21:
5c:40:85:60:cb:8b:06:40:b0:47:35:49:36:34:27:
58:e8:d8:dc:5a:b2:80:2b:89:a6:4c:62:80:4e:c9:
2c:b1:c1:86:63:ab:b2:25:e6:f8:af:d6:9b:ca:28:
ce:41:d9:c1:9e:3c:7f:0e:61:d0:80:83:c4:2e:65:
95:91:8b:e7:bc:93:61:cf:11:f6:d1:2b:a1:6c:4f:
52:76:35:64:5c:5c:5b:09:24:2c:05:9a:87:bc:72:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0B:2F:04:02:C6:00:1E:DF:7D:A9:E1:B0:8D:97:05:BC:C6:8F:08
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/lAsvBALGAB7ffanhsI2XBbzGjwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ac:02:91:85:1f:a5:bd:26:f3:b9:e7:9d:0d:39:23:ae:42:
6a:cf:b1:87:ec:f7:eb:9a:f6:d4:56:ab:7d:8d:16:e7:9a:d7:
40:11:ce:59:56:3a:9f:26:fa:87:ce:5e:d3:02:c3:8d:0e:68:
dc:fc:43:ed:11:c0:48:e7:e9:88:30:bf:cf:c1:f8:71:64:71:
38:68:87:bd:a8:2f:99:65:89:75:31:83:7c:03:46:d8:13:0c:
53:3b:49:f0:41:67:0a:d4:77:0e:7a:d5:4b:c5:84:a0:27:17:
f9:3e:89:80:22:18:f8:bd:ca:a4:80:63:f9:7f:05:f1:08:40:
bf:34:0e:a9:36:94:20:59:4f:e5:b8:99:69:ac:86:38:30:a7:
33:28:91:3f:50:b8:1d:8b:1f:c9:82:c8:95:3e:68:ff:26:d5:
9a:63:5e:e3:d2:66:37:0c:2a:5f:13:a9:a5:00:43:c6:15:ef:
36:b0:c7:f4:42:3f:02:4d:c6:c3:9b:a5:a7:4b:84:e6:12:41:
09:c8:a2:1b:e7:87:cf:9b:e3:72:5a:6a:50:e9:7a:ca:99:d6:
11:6f:21:80:f7:79:bc:85:25:64:3b:d1:95:6b:d8:24:b3:d5:
c6:e4:9e:fe:6c:5c:7b:3c:61:44:ff:22:9e:45:e0:42:5c:6c:
81:a8:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net