Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/30dF88R9p_cbRx6VSnFVxrOujdw.roa
File: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (raw, json)
Hash identifier: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=
Subject key identifier: DF:47:45:F3:C4:7D:A7:F7:1B:47:1E:95:4A:71:55:C6:B3:AE:8D:DC
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 019427B5274D34E117B6B70AD36E3520AFAB
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/30dF88R9p_cbRx6VSnFVxrOujdw.roa
Signing time: Thu 02 Jan 2025 15:49:31 +0000
ROA not before: Thu 02 Jan 2025 15:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56683
IP address blocks: 193.194.116.0/22 maxlen: 22
193.194.116.0/24 maxlen: 24
193.194.117.0/24 maxlen: 24
193.194.118.0/24 maxlen: 24
193.194.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:27:4d:34:e1:17:b6:b7:0a:d3:6e:35:20:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Jan 2 15:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df4745f3c47da7f71b471e954a7155c6b3ae8ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:94:22:4e:8d:48:19:5a:2b:29:96:6f:b7:
63:34:6a:e1:bd:62:84:a2:1b:24:54:26:05:81:f8:
6c:32:be:c1:da:c9:be:f2:8d:81:8b:c6:7e:67:44:
04:a9:0c:04:3c:64:f2:37:08:67:49:e7:9e:13:78:
57:e4:f8:6f:be:98:12:40:bc:a1:72:a6:b1:3a:16:
63:c4:53:6a:56:d3:5a:04:5c:a7:63:41:c0:4c:2c:
78:86:cb:50:ef:f1:65:84:5b:4c:85:be:9c:4a:9e:
3e:3e:0d:95:bf:3c:42:30:95:a3:2f:14:b3:e2:73:
ff:22:6d:e9:4d:5f:f0:0b:d2:37:1c:67:c0:44:49:
66:51:dd:43:37:18:4d:93:ee:98:6d:59:0d:08:f4:
bc:59:bc:45:5e:74:32:04:73:c1:a5:ba:6f:f5:6e:
a8:40:06:96:3a:7b:5d:53:12:cc:75:1f:68:26:2c:
ce:bb:6c:bd:d4:92:54:04:44:69:ec:32:7c:9c:43:
fe:72:07:c2:55:26:f6:6b:24:bd:79:c4:f2:32:de:
80:ae:dc:a8:3e:8b:5f:82:e5:8c:c2:8a:b3:ab:85:
52:ea:1a:1c:e1:f5:93:99:7e:28:f8:10:e9:ab:28:
50:f7:f4:4c:88:a1:4f:a4:86:91:00:4d:ce:5f:33:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:45:F3:C4:7D:A7:F7:1B:47:1E:95:4A:71:55:C6:B3:AE:8D:DC
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/30dF88R9p_cbRx6VSnFVxrOujdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:af:a6:f8:b3:19:0d:c6:77:c4:05:9b:ae:a8:93:5a:a9:47:
3c:b0:69:8b:5f:85:bc:7e:a2:8e:75:dd:3f:53:23:0e:a4:76:
a9:04:d7:f2:0c:90:d6:b3:97:aa:4e:ad:9b:f1:1a:b3:65:c6:
c7:f8:c5:61:2d:6a:df:f0:19:eb:de:2e:ad:ff:db:da:4e:fd:
5e:47:fb:94:72:17:8b:b8:ed:74:a3:0a:93:10:28:de:32:14:
e5:3b:b8:3a:81:61:e8:02:bc:63:80:6e:14:2f:99:71:f9:34:
a8:c7:c1:27:a3:53:45:e5:b3:2f:b8:af:e9:eb:2a:9e:28:a8:
98:48:86:7b:97:89:8d:55:68:e6:75:04:24:2d:35:57:46:42:
eb:1f:0e:02:6b:4f:b9:6a:72:b2:c2:7b:e1:18:29:b5:8a:83:
ec:3f:39:40:8e:ca:93:d9:52:79:44:d8:db:cd:ff:f6:0c:36:
9b:9d:ae:b4:15:f6:8c:b9:66:45:72:29:11:1b:55:34:40:58:
35:c9:1f:64:e7:4e:77:93:8a:88:36:36:1f:28:d2:14:36:12:
cc:0f:63:d6:96:f1:f8:80:8a:70:0d:6c:4d:b9:91:96:86:7e:
1b:ca:fc:59:a4:e4:32:80:99:1f:bc:92:ec:80:b9:f9:65:72:
a4:f9:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net