Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/2OFA6f1DjHXZMhryh5jA0oQbPrI.roa
File: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (raw, json)
Hash identifier: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=
Subject key identifier: D8:E1:40:E9:FD:43:8C:75:D9:32:1A:F2:87:98:C0:D2:84:1B:3E:B2
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 019423D6F2977B36E43FF8B1052300A9C2CB
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/2OFA6f1DjHXZMhryh5jA0oQbPrI.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198060
IP address blocks: 193.56.209.0/24 maxlen: 24
193.56.211.0/24 maxlen: 24
193.56.231.0/24 maxlen: 24
2001:67c:1108::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f2:97:7b:36:e4:3f:f8:b1:05:23:00:a9:c2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8e140e9fd438c75d9321af28798c0d2841b3eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:bf:9b:12:75:32:70:c2:13:c4:c5:69:47:
df:7a:7e:c7:83:6e:2f:04:90:99:74:63:ab:f0:c5:
3d:10:97:c6:ad:87:60:2e:55:90:21:9a:3c:24:46:
5c:53:b3:66:48:3e:8e:df:51:95:86:38:ad:93:a2:
d0:99:9e:6c:c7:64:a6:df:be:0b:c8:8b:14:06:ae:
b5:7c:cd:3b:ed:99:15:9a:07:39:60:ee:18:48:c8:
3d:b3:99:ad:ba:04:b9:22:e2:08:7e:e6:fc:d2:40:
fc:55:48:e2:6d:1c:c5:ef:6a:f6:40:f5:0c:7b:23:
6e:77:8a:9a:8f:71:35:7b:1e:0f:17:a9:d7:26:04:
d2:b2:ed:17:18:7c:48:71:12:00:44:99:c4:a2:70:
ed:53:62:dc:b6:ed:c7:e0:75:15:4a:03:58:e0:e6:
56:45:93:b0:ee:2a:08:95:80:1c:76:4d:11:ab:b2:
60:3b:7c:76:eb:b5:99:c4:29:6c:b7:74:2c:cb:bc:
41:7a:a8:da:8b:bd:c7:70:4f:86:40:9b:8e:04:1b:
ba:3d:a2:af:b1:03:aa:bc:40:e8:e6:39:fc:ba:82:
00:cc:8f:66:4c:b7:65:cd:64:8f:40:89:e6:f1:91:
37:07:06:c5:f8:9e:b9:73:51:71:7c:72:ba:f9:8d:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E1:40:E9:FD:43:8C:75:D9:32:1A:F2:87:98:C0:D2:84:1B:3E:B2
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/2OFA6f1DjHXZMhryh5jA0oQbPrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.209.0/24
193.56.211.0/24
193.56.231.0/24
IPv6:
2001:67c:1108::/47
Signature Algorithm: sha256WithRSAEncryption
52:43:58:94:10:f6:c3:f9:ff:ee:bd:b9:77:20:e3:30:12:23:
da:e2:f4:c0:ba:9c:ab:a0:f7:ee:33:92:65:d0:ae:2d:d5:b9:
4c:0c:cb:e9:5a:60:48:e6:16:f2:6d:10:c7:b9:9a:22:e4:af:
bd:3a:f9:4c:23:fc:d3:cc:e2:b0:04:06:ab:2f:c2:8e:5f:7d:
a4:f8:d3:6a:79:5b:44:20:51:c7:b8:ec:88:21:f5:a0:8a:e9:
40:91:c3:0d:cc:84:99:6a:a8:2e:d0:06:77:7b:a3:69:f2:18:
05:c0:c6:5d:bc:08:48:e5:6a:b7:f3:1c:a9:a2:1f:52:5b:53:
d0:73:75:e9:37:e0:d9:9e:54:ba:41:ad:86:bc:a2:cf:8b:82:
ac:6e:52:d3:d8:ed:db:8f:54:53:96:f3:63:dc:a6:77:08:fb:
99:11:5e:f1:85:83:71:be:b9:79:e5:00:14:e0:4b:17:9e:eb:
88:c5:9d:06:c5:77:88:6b:d8:f0:3d:5d:99:72:a7:5b:55:f9:
0b:00:86:cc:70:57:53:2b:05:2f:97:10:53:2b:ec:33:e6:e1:
61:8a:ef:fe:f7:45:8b:2b:ee:e6:60:69:57:3b:3b:33:24:43:
3e:3a:9b:13:d2:3f:b8:66:6c:a5:5a:c6:39:3b:1b:c9:ff:c6:
c4:84:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:19 2025 by rpki-client on console.sobornost.net