Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/lAlkLc1CavmRfvnNM-ldOwGYoR8.roa
File: lAlkLc1CavmRfvnNM-ldOwGYoR8.roa (raw, json)
Hash identifier: 0wroejPoBcULff3nhQGRj0gl288xNtfnDJXaFr+mf24=
Subject key identifier: 94:09:64:2D:CD:42:6A:F9:91:7E:F9:CD:33:E9:5D:3B:01:98:A1:1F
Certificate issuer: /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial: 019421B1D92BB217C56B9BE86E71E3E9F43F
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/lAlkLc1CavmRfvnNM-ldOwGYoR8.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197353
IP address blocks: 193.33.126.0/23 maxlen: 23
193.33.126.0/24 maxlen: 24
193.33.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d9:2b:b2:17:c5:6b:9b:e8:6e:71:e3:e9:f4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9409642dcd426af9917ef9cd33e95d3b0198a11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:20:0c:50:23:4a:da:b6:da:c5:fa:e9:4c:
ac:47:0e:13:1e:52:c8:74:21:05:bb:f0:c1:a5:56:
54:5b:ea:d9:56:81:37:1b:3f:cd:4b:0c:b0:69:26:
06:b2:13:0f:d8:ea:28:a2:af:70:2f:20:0d:fa:d6:
40:11:c5:69:8c:00:d9:5e:ea:37:ca:51:16:88:3a:
58:e1:98:3a:34:39:49:39:6f:46:68:89:e2:55:b9:
31:6e:23:a8:71:92:bc:38:38:ab:5b:fe:51:d4:d3:
ca:dc:ef:3a:6c:93:1c:f2:04:24:2c:8f:f6:19:2d:
6c:55:07:5e:e8:05:bc:2a:7b:19:47:9d:2c:10:d2:
83:c7:37:e1:66:30:5e:e6:c0:b1:0b:b1:fa:52:28:
e9:03:ce:c3:32:a3:18:e5:b6:a5:48:87:63:82:30:
68:c7:13:4e:32:35:f4:b3:a4:33:ad:18:5b:a3:d4:
80:60:46:f3:fa:45:78:68:38:94:f2:4a:1c:06:01:
0b:28:b8:c4:98:de:08:e0:a2:6b:f1:67:b5:1d:5c:
e2:d0:95:c8:c0:9c:73:7f:1e:df:e2:88:7c:45:66:
de:c2:6c:ad:52:f2:56:74:b1:c1:15:46:d5:16:aa:
06:ea:a8:40:a2:04:10:5b:28:7f:ba:de:97:84:e5:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:09:64:2D:CD:42:6A:F9:91:7E:F9:CD:33:E9:5D:3B:01:98:A1:1F
X509v3 Authority Key Identifier:
keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/lAlkLc1CavmRfvnNM-ldOwGYoR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.126.0/23
Signature Algorithm: sha256WithRSAEncryption
16:6b:68:85:e7:bf:7e:25:45:0d:03:37:28:70:82:23:9e:f7:
a6:3b:25:ac:50:b3:16:d4:ce:b7:19:37:40:91:c5:77:c7:1c:
55:5e:6e:53:4c:e6:4f:09:60:25:d5:93:50:a2:42:c7:de:41:
12:12:67:20:e5:35:e7:d1:81:d5:b8:39:25:8f:3e:14:f8:0b:
4f:07:6b:f0:33:be:dc:de:50:56:be:66:1c:9c:d8:5f:3a:78:
f5:7f:3b:da:ac:e0:4d:03:28:70:2e:77:37:a6:ea:33:b5:98:
26:d4:99:17:e0:e1:d6:0f:47:e2:ef:6e:e9:9a:91:d0:c1:3b:
b6:36:5e:78:86:5e:aa:4b:01:07:df:4f:96:cf:f6:17:68:38:
fb:31:ba:37:1f:ed:80:f9:bd:7b:df:8e:b7:fe:41:c0:8e:c1:
d9:b4:25:08:c1:97:cb:f6:fd:5c:0c:b4:4e:57:77:88:67:ff:
39:b0:a4:1f:92:1a:99:e8:c5:44:c8:11:19:e5:d6:54:b2:0b:
26:1e:d6:99:2a:d8:06:35:a8:ce:17:de:2d:d4:7f:8a:41:0d:
94:c1:8a:71:06:b1:5a:7f:a1:57:b4:90:3a:1c:6d:56:81:69:
f8:3d:eb:c5:52:36:1d:c9:58:05:1d:f2:73:8b:a2:ae:8b:e9:
ab:00:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net