Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa
File: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (raw, json)
Hash identifier: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=
Subject key identifier: 33:B4:46:06:B5:5E:47:72:AD:40:86:1C:1D:84:63:4C:C7:78:B0:FE
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 01942827393C011A0B44CEF299AF4AA4541E
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa
Signing time: Thu 02 Jan 2025 17:54:06 +0000
ROA not before: Thu 02 Jan 2025 17:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.3.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:39:3c:01:1a:0b:44:ce:f2:99:af:4a:a4:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Jan 2 17:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33b44606b55e4772ad40861c1d84634cc778b0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:fd:6f:e6:51:48:7c:76:a4:98:ed:03:ba:
2d:e3:c7:7d:c9:1b:40:6d:d5:36:39:ca:b0:2d:64:
b9:88:3d:42:a0:3d:cc:22:50:6e:99:33:6f:20:b0:
5b:11:8b:73:1c:7e:93:d4:a7:ec:93:21:27:c4:07:
e5:40:54:f2:05:72:73:2c:75:e4:ad:ef:62:c3:0b:
b5:33:12:e3:fe:b5:ec:e4:77:9c:2e:71:f4:79:f7:
be:89:0c:fe:60:a7:9e:1c:a7:d8:19:7b:d6:c9:26:
03:ba:b2:fd:e2:2e:e6:22:cf:40:72:f4:83:93:5c:
95:81:19:19:32:6e:a7:8a:a5:74:43:9d:89:c1:7a:
68:0d:83:12:98:74:61:bf:02:3f:85:9b:db:4a:b3:
d1:4f:b3:d0:32:25:8c:63:42:6e:b6:00:8a:d9:4f:
4b:89:38:1f:e4:7d:5d:8e:48:81:16:12:1d:02:10:
6c:f4:a2:e8:66:77:ae:a2:d1:05:07:94:1e:5a:35:
7f:87:74:d9:b8:df:17:eb:69:07:87:f3:86:68:73:
02:d6:6e:21:b7:c2:53:06:17:9e:a4:f2:b3:dd:00:
26:ce:a2:d3:de:77:f1:fe:08:85:2e:f8:32:70:0b:
ca:2e:9a:e6:20:64:88:ef:32:23:8e:84:96:19:2d:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B4:46:06:B5:5E:47:72:AD:40:86:1C:1D:84:63:4C:C7:78:B0:FE
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.160.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ad:4f:7c:82:ef:70:2f:7c:67:b5:2d:a1:b5:c8:bb:fd:5e:
07:dd:7a:32:60:f0:62:dc:cb:81:64:08:ab:e6:dd:ea:5a:91:
00:79:7b:f3:ba:03:17:4d:d7:be:10:97:4d:3a:11:f7:db:c3:
d7:8c:90:25:e9:5b:6a:96:d9:c8:18:e4:68:e7:ad:6c:0b:eb:
44:6e:fe:a7:cf:09:4b:f6:f4:83:8c:bf:58:ab:c7:34:fe:89:
eb:2d:94:da:5b:78:11:7c:9c:58:bc:0f:dd:e2:ff:9f:06:37:
d3:22:4a:34:12:89:2b:2a:68:d3:f2:a8:be:5b:52:0b:4f:a7:
f6:2f:36:0d:37:82:05:20:69:f4:63:75:90:72:9c:4f:ae:66:
46:01:fe:1d:38:5a:7a:30:e5:de:39:c9:71:2b:f8:8e:eb:7f:
6d:c9:3f:72:28:96:90:8b:2a:6e:94:17:f6:c4:67:e6:78:a2:
9c:59:b7:79:84:ad:4b:2b:cf:d5:94:40:9e:cb:c2:fa:6b:16:
53:f0:c8:31:b0:75:c3:9f:d5:0d:ca:60:65:2e:f4:ed:c5:e1:
6c:e6:45:92:5a:fd:2f:ce:55:23:62:05:33:df:ab:c5:92:0d:
92:13:17:5e:f6:6a:2b:5a:85:36:c6:a9:01:70:8d:61:5d:e5:
da:55:cd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:01 2025 by rpki-client on console.sobornost.net