Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/ouBji2SgP5WP-tAVvBIOpWh6QHU.roa
File: ouBji2SgP5WP-tAVvBIOpWh6QHU.roa (raw, json)
Hash identifier: tjTYINhRmm1QHUqB8THsImRJUSYCerOiGq+34MjJwz0=
Subject key identifier: A2:E0:63:8B:64:A0:3F:95:8F:FA:D0:15:BC:12:0E:A5:68:7A:40:75
Certificate issuer: /CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Certificate serial: 01941FFA1904FB2E544CEF01E9AA6F3059B7
Authority key identifier: 17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/ouBji2SgP5WP-tAVvBIOpWh6QHU.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3326
IP address blocks: 193.111.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:19:04:fb:2e:54:4c:ef:01:e9:aa:6f:30:59:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2e0638b64a03f958ffad015bc120ea5687a4075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:70:49:0f:64:01:96:84:70:54:b5:b2:ad:
51:e9:9c:b0:7a:ab:d6:8c:64:04:d2:52:e8:b6:b4:
c6:28:ce:3b:cc:98:30:3b:3f:3b:b0:23:b4:cc:61:
e1:ad:ba:3c:86:43:b2:e1:38:95:d8:50:6b:0a:59:
78:dd:99:ba:56:8b:d4:4f:cb:8d:39:58:56:8a:85:
93:e9:8e:c1:64:0f:77:b4:90:e4:89:9b:ff:f8:c7:
05:ee:12:b4:90:09:90:02:e8:21:4d:fc:a4:44:77:
cb:df:9d:1d:25:93:d4:1a:22:1d:28:7c:8d:49:a9:
4d:a0:77:ce:eb:90:29:24:d9:2b:2a:2b:cb:e1:c1:
c0:f1:86:de:48:e9:9e:54:d6:e7:33:43:de:8a:7c:
12:c6:5b:23:01:4c:7c:d6:4f:7e:bb:64:f4:00:c0:
b6:3f:76:15:ce:c8:c0:9d:3d:f0:61:19:e4:20:21:
ce:89:22:b4:fe:28:3a:6a:9a:db:c9:74:96:f6:09:
a4:6a:e5:04:3e:a3:cc:df:2e:04:50:71:46:79:45:
71:88:29:fb:76:f3:4e:9f:d5:d5:1b:02:ce:04:8c:
5e:f8:76:0f:1e:cd:66:4e:7c:08:a0:64:86:37:97:
05:e9:1d:d6:8b:0b:2b:d9:e8:b2:93:5c:e7:ee:fc:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:63:8B:64:A0:3F:95:8F:FA:D0:15:BC:12:0E:A5:68:7A:40:75
X509v3 Authority Key Identifier:
keyid:17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/ouBji2SgP5WP-tAVvBIOpWh6QHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:41:38:62:44:c9:92:22:da:1e:6f:2c:40:02:d9:f6:c4:a2:
a4:d4:90:77:a9:d0:6a:fd:b6:fb:b1:34:2c:39:95:76:07:e7:
8f:58:e0:db:b0:74:e2:ad:4c:12:d0:02:28:f6:d6:17:07:f6:
8b:f0:85:3e:39:3c:9a:1b:08:28:fd:48:60:3f:7b:c3:3a:62:
6a:a6:17:48:7e:cb:42:8e:aa:d0:16:1a:58:59:53:8d:95:57:
da:6e:58:1d:19:0e:3c:ed:8c:8b:fb:a9:9a:16:89:cb:b3:7d:
14:7f:8d:84:6c:69:91:d7:94:ac:7f:fa:c0:70:1a:89:b8:9c:
cd:63:cc:f4:cb:30:37:29:e3:7e:29:8f:b0:dd:09:37:3e:8d:
ab:da:9b:48:93:84:23:40:f3:18:f3:d9:57:5b:37:44:bf:8d:
dc:07:d7:53:11:4d:97:75:1e:eb:f6:f4:9f:54:6d:d2:71:f2:
69:14:d9:2a:41:f7:48:17:d2:3a:14:85:ee:ef:70:c7:1c:58:
61:e3:12:ef:1b:e1:20:8d:0b:c7:ee:86:a3:c2:34:46:dc:9a:
f9:4d:b0:17:14:de:aa:ae:11:8f:69:5a:48:2d:d1:bd:c9:29:
1f:4e:4f:80:0a:c7:6b:63:0e:e1:9a:5d:be:f4:de:93:ec:65:
05:3f:e3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net