Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/f5UfFSDlOg-m-uL2DNAR_tMDSg8.roa
File: f5UfFSDlOg-m-uL2DNAR_tMDSg8.roa (raw, json)
Hash identifier: /83b/LfsXl5zV/MG30U3LspgV+eRL7MbbHPb/CymUic=
Subject key identifier: 7F:95:1F:15:20:E5:3A:0F:A6:FA:E2:F6:0C:D0:11:FE:D3:03:4A:0F
Certificate issuer: /CN=0bac8a3206e367b80b8ca689220f098d188491ba
Certificate serial: 019427B510EB1B27FBD0FDE25EC46A6FF82F
Authority key identifier: 0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/f5UfFSDlOg-m-uL2DNAR_tMDSg8.roa
Signing time: Thu 02 Jan 2025 15:49:25 +0000
ROA not before: Thu 02 Jan 2025 15:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1136
IP address blocks: 193.177.241.0/24 maxlen: 24
193.177.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:10:eb:1b:27:fb:d0:fd:e2:5e:c4:6a:6f:f8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac8a3206e367b80b8ca689220f098d188491ba
Validity
Not Before: Jan 2 15:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f951f1520e53a0fa6fae2f60cd011fed3034a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:a1:27:98:da:dd:7c:26:ce:2d:82:6b:53:
c8:a4:48:dd:44:fc:15:f1:5c:70:39:38:29:f3:96:
ca:a4:7d:bf:7b:0f:e9:74:25:22:45:82:b9:62:94:
1a:76:55:ff:5d:07:26:39:5d:f0:82:14:fb:48:a9:
42:b5:d6:49:bd:39:e5:65:c3:43:ee:e5:a0:8d:cc:
6f:80:ba:87:d3:5c:69:14:22:6d:d2:e8:e1:d2:8f:
0d:74:cc:46:48:51:60:0a:1e:c4:c1:d9:7e:49:dc:
48:bd:78:cc:8e:28:cf:d7:f2:89:72:3a:a5:8f:c4:
53:ee:ef:1c:74:8e:0b:e1:53:ec:25:39:c2:f0:f6:
c8:65:f9:f8:74:36:e6:b1:cb:25:34:1f:35:8a:31:
ab:8c:33:80:58:1b:57:04:e6:9b:bf:16:dd:57:75:
10:bc:96:14:53:51:40:24:fc:30:86:f9:89:74:74:
46:9d:9a:ba:19:ac:8a:99:32:bc:39:1c:1c:b6:fe:
21:5b:76:fa:6f:74:60:03:73:95:ec:e2:f8:54:7e:
ed:6e:5e:55:e4:ea:e0:82:08:40:fd:ab:b2:84:5e:
59:c8:81:d8:74:c3:e2:08:7f:28:fb:23:54:7e:65:
79:82:96:55:f6:0c:ea:db:e8:35:06:a6:ee:cc:ea:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:95:1F:15:20:E5:3A:0F:A6:FA:E2:F6:0C:D0:11:FE:D3:03:4A:0F
X509v3 Authority Key Identifier:
keyid:0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/f5UfFSDlOg-m-uL2DNAR_tMDSg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.241.0-193.177.242.255
Signature Algorithm: sha256WithRSAEncryption
70:fd:a9:fb:12:f0:b0:e6:5e:c1:45:4e:57:55:2e:81:f1:6b:
ad:e6:e1:dd:3f:78:46:8e:13:19:4b:59:8d:0f:52:8f:c9:f8:
f5:92:e8:45:c3:82:80:c4:e8:63:26:3c:65:05:a8:53:bd:36:
14:46:38:8d:eb:1b:90:73:4e:dd:d5:c8:d2:a2:67:0f:37:53:
78:50:f1:77:0f:55:f7:10:f4:b5:65:00:23:6a:93:85:7b:64:
46:96:f3:99:4c:75:ba:dd:21:bf:07:07:0b:ea:9e:90:67:bc:
eb:d2:57:91:e9:5e:b5:7f:72:39:9b:9e:83:66:b2:53:01:1a:
30:57:5f:b1:4b:a2:07:3c:f8:90:88:c9:98:ed:b0:14:f6:a9:
ce:bd:54:6e:de:ca:ee:d5:50:0b:2f:6f:c9:84:8b:3b:4f:b8:
d5:b0:03:4d:36:e7:5a:a3:09:ff:bf:8b:bf:05:82:49:1a:ec:
1a:3d:55:c0:10:cb:a9:80:5b:52:71:b5:00:e5:4f:8b:60:08:
db:1f:ac:99:de:a5:31:97:22:6b:ab:aa:47:98:6e:03:68:30:
4c:3d:a9:e8:63:d7:c8:ba:ae:72:53:ca:de:dd:38:da:f3:14:
1c:5f:1b:69:dc:5e:0b:7f:7b:e5:a9:5e:cb:ea:7f:8a:c8:5d:
45:ff:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:20:24 2025 by rpki-client on console.sobornost.net