Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/68akK538AgBQpzV9ol21s3i1l5E.roa
File: 68akK538AgBQpzV9ol21s3i1l5E.roa (raw, json)
Hash identifier: FVtdNzWjJOk17abGuskk0fG+irWuLqKU8WFk4kXyjGs=
Subject key identifier: EB:C6:A4:2B:9D:FC:02:00:50:A7:35:7D:A2:5D:B5:B3:78:B5:97:91
Certificate issuer: /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial: 019421443FF5034D9EBBFDA5D11E5AD526AB
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/68akK538AgBQpzV9ol21s3i1l5E.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42982
IP address blocks: 193.200.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3f:f5:03:4d:9e:bb:fd:a5:d1:1e:5a:d5:26:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebc6a42b9dfc020050a7357da25db5b378b59791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:e2:f8:60:40:97:92:8e:56:5b:f0:45:8b:
84:74:63:c5:94:76:55:c9:b6:bc:73:79:30:ed:1b:
35:cc:42:8e:f4:12:4f:db:96:d0:1e:a6:e8:83:7e:
04:fa:d1:d8:34:de:a9:a0:88:29:30:21:95:41:ff:
63:77:33:90:34:17:6b:5b:6f:39:1f:42:e6:69:4e:
5c:b5:08:0e:80:b4:3f:20:e0:41:e7:43:c4:05:24:
8c:18:ce:89:44:9b:6d:ad:84:eb:f0:a8:77:53:f7:
33:9f:43:af:4a:cb:6a:4e:61:cd:fd:c5:c9:75:0e:
b3:1a:c3:0e:45:ab:07:57:5a:9c:05:fd:77:75:cc:
a8:6d:06:74:c2:3d:f7:63:ac:72:d0:37:6b:2b:0a:
48:96:76:d6:18:45:dd:02:e3:99:60:01:50:93:32:
78:ca:3a:d0:32:84:84:31:2f:38:42:e3:45:86:a1:
3d:93:55:a4:88:1a:c2:29:6c:7b:8e:1a:33:ef:68:
08:fb:3e:71:f0:e5:c8:78:91:ef:6d:32:bb:3c:db:
a3:e9:86:e4:66:d1:69:84:a1:bd:0b:10:a7:0a:1c:
b8:22:4e:08:7d:0e:86:8e:f3:8d:6d:50:ce:0b:3e:
31:99:3d:ac:27:e2:d6:68:3e:e5:0d:56:a7:e1:eb:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C6:A4:2B:9D:FC:02:00:50:A7:35:7D:A2:5D:B5:B3:78:B5:97:91
X509v3 Authority Key Identifier:
keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/68akK538AgBQpzV9ol21s3i1l5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:97:c6:a1:86:7b:5b:58:cf:49:a4:7f:18:24:d2:6a:37:18:
09:ee:41:ee:d2:05:b9:d5:c5:75:54:6e:f0:1b:e1:18:85:7d:
cb:75:9f:b7:bd:b1:c3:b8:ad:7e:52:4a:92:ea:6b:c1:c2:37:
00:b0:cc:23:bf:75:d4:9d:0c:48:21:cc:4b:d6:04:26:16:c7:
54:e8:5d:07:6e:32:99:dd:e9:99:6d:81:69:2c:56:20:fc:64:
66:74:df:3b:67:8f:f2:d5:c5:4c:ab:ae:cc:37:ff:bc:0f:ed:
0c:d9:47:2d:a1:8e:cd:86:99:4f:a4:f9:a6:23:fc:45:50:2a:
8d:8b:61:78:93:1c:77:17:bb:23:41:d4:d7:46:b8:45:1a:4b:
37:fb:73:36:ce:8e:f6:44:3e:20:37:a7:d0:5b:a1:cf:b1:21:
11:0c:f4:3b:22:76:bf:e5:d7:3e:b5:55:c3:db:04:1b:74:76:
be:ce:a6:d2:79:52:12:d9:32:77:8e:80:b1:3d:74:1b:53:39:
aa:70:fd:f6:6a:70:16:af:20:91:4e:ea:4e:85:98:29:e2:96:
91:82:60:48:16:68:c4:78:aa:9c:5a:fa:b6:42:3c:48:67:4e:
98:e1:a9:39:2f:aa:cf:a9:b2:75:e6:7a:c6:f1:01:36:f9:df:
b7:d2:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:24 2025 by rpki-client on console.sobornost.net