Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/TO36gbkW8COMg60JGW_q2Qlywo0.roa
File: TO36gbkW8COMg60JGW_q2Qlywo0.roa (raw, json)
Hash identifier: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=
Subject key identifier: 4C:ED:FA:81:B9:16:F0:23:8C:83:AD:09:19:6F:EA:D9:09:72:C2:8D
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 0194258ED471A6E08B7D6E20EC1056665F41
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/TO36gbkW8COMg60JGW_q2Qlywo0.roa
Signing time: Thu 02 Jan 2025 05:48:25 +0000
ROA not before: Thu 02 Jan 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198917
IP address blocks: 193.242.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d4:71:a6:e0:8b:7d:6e:20:ec:10:56:66:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Jan 2 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cedfa81b916f0238c83ad09196fead90972c28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f3:b6:11:73:5e:e7:c8:bc:85:46:9b:5f:05:
a7:42:75:18:60:c0:f6:13:70:c1:a3:93:d8:87:9d:
1b:95:54:20:bb:46:7e:cf:64:9e:3b:17:b7:d4:9e:
19:1d:53:07:ae:f3:06:43:fe:f4:29:d0:ba:3c:87:
08:77:02:0d:1b:62:3c:f1:25:ce:a8:c2:1d:c4:e3:
ea:a6:e6:cc:81:94:72:f2:1a:3b:e2:db:67:d9:65:
e6:8c:b6:f7:7f:e0:0e:f1:61:08:38:bb:50:70:77:
6a:73:b1:da:3a:6c:8b:94:55:1e:96:d7:53:5a:50:
4b:d5:3a:75:46:36:3b:32:6f:d7:bc:6b:b7:04:8d:
b9:7f:5d:a4:d8:9b:c1:36:f1:13:77:57:5d:89:98:
cd:3b:17:a4:0a:56:e8:9d:d1:2a:63:45:05:52:29:
65:9a:c7:3d:09:af:4b:7b:ee:08:46:d1:4a:42:d6:
c9:27:17:13:47:c2:90:39:10:56:93:32:63:d4:53:
7a:5d:03:64:aa:e2:4c:99:95:15:ed:50:11:68:e1:
be:57:ac:0d:28:17:7d:73:e3:7b:3a:fd:34:fe:ea:
8d:85:3d:7e:14:96:0e:71:2b:d3:82:19:1b:f8:14:
61:ff:b2:d3:ee:f5:1f:55:1c:01:34:fd:16:4a:b5:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:FA:81:B9:16:F0:23:8C:83:AD:09:19:6F:EA:D9:09:72:C2:8D
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/TO36gbkW8COMg60JGW_q2Qlywo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.134.0/24
Signature Algorithm: sha256WithRSAEncryption
93:16:99:df:d9:9f:0c:1e:d2:15:51:61:82:63:b6:91:c5:2b:
f1:77:59:a7:16:26:52:2d:da:08:8d:2a:a5:89:04:c1:c7:f6:
72:23:0f:07:a1:bf:83:eb:f6:a2:27:10:19:8f:73:94:25:1e:
1e:25:6e:5e:f3:86:ca:af:f1:e3:0e:f6:66:9c:da:8d:da:6d:
53:0c:77:b8:14:b2:e3:00:ab:a4:43:69:d1:6b:38:64:28:03:
9a:7d:43:38:5e:86:38:1a:e7:67:29:f7:4a:c2:c8:70:c9:89:
cf:ce:be:a4:73:91:e8:6d:69:7a:1e:58:43:48:a3:68:52:99:
c3:9d:79:6f:c0:e1:f6:66:da:44:3a:07:26:e4:db:4e:25:60:
7b:57:2d:58:8a:e1:c0:b7:38:5f:48:28:70:e6:84:1f:cb:17:
d0:7f:d3:f7:29:49:06:92:49:e9:a8:58:37:8e:d9:4c:fb:43:
b9:a7:03:d5:f2:6a:d3:57:5c:b8:b5:f5:75:8b:b5:d7:52:82:
3e:2a:c2:c0:e5:46:a9:5f:41:21:1c:2d:ce:28:36:1c:d2:d6:
f7:5a:84:c7:7f:31:95:a9:32:32:f2:0f:10:17:5d:7e:9c:91:
ef:eb:54:dd:61:2b:b6:b5:72:87:df:28:25:63:ee:be:87:04:
b8:56:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net