Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa
File: IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa (raw, json)
Hash identifier: vuy64Y3PAKsG7oegiPafGsZ4QGAupXIefuGc7dRwG0A=
Subject key identifier: 20:1A:BE:59:73:57:08:CF:BF:2F:7C:23:EB:F4:AF:E5:1C:78:74:D0
Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial: 0194266B2CBB2E93E232B98C99CF95E605C3
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa
Signing time: Thu 02 Jan 2025 09:49:05 +0000
ROA not before: Thu 02 Jan 2025 09:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202971
IP address blocks: 193.164.134.0/23 maxlen: 23
193.164.209.0/24 maxlen: 24
2a0f:e080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2c:bb:2e:93:e2:32:b9:8c:99:cf:95:e6:05:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Validity
Not Before: Jan 2 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=201abe59735708cfbf2f7c23ebf4afe51c7874d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:e0:9e:71:eb:de:09:8f:fa:23:c2:27:ce:
8e:c0:df:60:93:d0:38:79:e3:27:b3:03:42:d5:73:
6e:10:f1:d2:f5:59:60:4e:f5:13:cd:53:39:19:0e:
cc:15:77:48:dd:6a:d4:b5:1c:85:6d:98:cf:64:0a:
53:66:d0:5a:f5:be:49:09:d3:ba:8a:ca:0a:c8:6d:
63:71:b1:01:a6:15:53:53:3a:92:40:c9:52:a5:f1:
04:d3:7b:f1:68:3c:69:3e:f7:87:09:e1:aa:be:36:
60:d9:cc:a3:32:2a:80:3d:76:05:42:6a:c9:18:7a:
bc:cb:6f:66:55:6a:04:27:49:7b:70:b0:7e:bc:da:
d9:0f:1b:51:21:f7:c6:1a:9a:cf:0f:8f:8c:7f:93:
e9:c3:58:47:43:1b:ec:9a:80:3b:65:76:92:64:8f:
cc:60:c8:06:36:0d:78:42:1a:57:37:e0:f7:85:6a:
dc:bf:e7:3f:73:09:34:6f:3e:24:e7:33:67:ed:83:
84:a1:11:70:3f:48:6b:69:eb:0d:f2:d4:07:a8:f2:
df:2d:3d:ad:5e:cf:9f:6c:d7:45:12:1e:42:16:43:
c4:9b:5b:8f:99:54:46:30:16:c3:90:03:32:6a:83:
79:68:b1:cb:0b:dc:79:a3:8d:3b:c3:41:95:7d:c1:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:BE:59:73:57:08:CF:BF:2F:7C:23:EB:F4:AF:E5:1C:78:74:D0
X509v3 Authority Key Identifier:
keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.134.0/23
193.164.209.0/24
IPv6:
2a0f:e080::/48
Signature Algorithm: sha256WithRSAEncryption
51:2a:f0:cb:7e:2a:66:c3:a0:95:35:ab:a8:26:17:df:df:4c:
ce:e2:e8:28:d7:9c:c3:66:b0:e4:6a:a4:94:17:91:73:73:54:
ec:0a:0f:94:ca:40:01:d5:98:71:b0:58:83:29:52:d6:86:4a:
2e:18:0c:22:67:f7:a2:60:59:5c:9b:1a:7a:91:f7:47:8d:87:
be:f4:46:02:46:b4:52:fa:2e:55:be:c8:51:dd:b2:1d:c0:61:
da:80:d2:19:f9:fa:71:c2:9a:d6:18:32:42:16:24:e2:41:f1:
df:cd:6f:7b:c9:62:4b:73:a7:f6:ab:56:e9:1d:a1:44:66:4c:
d5:82:2b:26:d0:46:c1:c0:d8:4a:7a:35:6d:b2:ce:77:f1:f0:
f5:39:63:07:37:de:48:c2:aa:cf:b6:97:f8:5b:54:09:a7:70:
8e:f8:78:48:b6:e4:9c:4b:4a:4a:d6:b1:62:b7:71:35:3a:1b:
d7:ce:f1:70:e1:41:a6:d2:72:ee:b5:31:cf:1e:1c:9f:1e:df:
ca:a0:6a:19:e5:c6:43:69:ec:20:a8:9b:43:4b:bb:b3:e3:c0:
52:10:fc:f1:59:2f:7b:ed:ff:1b:91:39:bf:e9:a7:9e:70:e6:
13:36:99:af:e1:c5:f4:23:0a:69:55:64:5c:5d:c6:61:19:80:
c4:5c:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net