Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa
File: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (raw, json)
Hash identifier: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=
Subject key identifier: D5:A0:A1:07:01:C5:9F:F6:3D:EF:05:B7:CC:E4:FF:4E:BC:D8:F8:68
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 01942522308204BFBF816F5D0CEB6F3AA0D4
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202614
IP address blocks: 193.238.45.0/24 maxlen: 24
193.238.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:30:82:04:bf:bf:81:6f:5d:0c:eb:6f:3a:a0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5a0a10701c59ff63def05b7cce4ff4ebcd8f868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:a7:92:9c:9c:66:bd:80:b8:99:b9:82:d7:
1d:7d:a3:03:ff:c8:e7:a2:ef:be:dd:69:7b:33:97:
7e:b1:c7:b6:20:6d:92:16:e0:08:b4:23:3a:19:9f:
bc:87:39:26:d1:ed:27:af:26:23:d2:60:20:97:88:
ab:72:49:eb:28:7c:f8:18:8d:b3:2a:14:fe:ca:8d:
4f:f7:d1:69:a5:05:de:da:dd:c8:d8:29:3e:92:6a:
e2:36:11:6c:07:3b:ae:94:da:e5:e9:d6:cd:c9:04:
ff:53:74:e2:45:47:17:01:2c:80:7b:18:2d:36:75:
5d:89:5c:de:a4:d1:d9:3b:73:9f:ee:21:33:aa:ba:
9f:f0:55:77:81:92:09:9e:0f:88:19:10:93:24:6f:
e5:41:dd:5c:0f:fc:86:be:45:c8:a0:40:fc:4b:ed:
66:af:39:23:fb:81:fc:d5:1d:0b:5d:c6:2c:24:10:
46:72:19:8e:99:f4:00:44:e2:c6:14:fe:63:bc:3e:
bf:df:ab:1e:a3:72:e2:11:ac:6c:86:df:f8:82:40:
73:7b:f9:37:8f:14:ca:19:dd:3e:9a:bd:a7:f5:dd:
c0:6e:c7:7b:4c:74:b1:1b:5d:93:a5:0e:36:c2:6e:
78:e7:51:d4:ab:ed:c2:43:e5:16:76:69:73:da:b0:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:A1:07:01:C5:9F:F6:3D:EF:05:B7:CC:E4:FF:4E:BC:D8:F8:68
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.45.0/24
193.238.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:be:ec:53:2e:9c:c0:a0:62:45:b5:07:af:03:a5:24:11:4b:
e1:c2:aa:7c:1a:3d:ef:ca:62:c5:82:c9:84:81:14:79:19:fd:
ac:7c:b6:5f:60:da:08:10:0d:e1:a0:99:99:d2:0a:f6:86:33:
e0:8d:50:3c:af:d2:a2:33:78:68:50:6a:96:ab:ca:90:f8:8c:
47:65:ac:a5:86:98:ff:78:60:dc:43:03:a8:13:4c:07:06:3c:
7b:d5:20:f3:ad:9b:01:7a:ed:91:18:5e:95:6c:90:7e:15:6b:
4b:4d:79:f9:08:df:cb:82:11:a1:c6:d0:9d:f8:f1:cc:b5:0a:
c6:cd:cf:93:b3:75:39:67:5f:18:93:63:86:cb:fc:de:6b:e8:
4b:be:5c:42:04:37:af:c3:45:69:58:4f:4c:34:f8:8b:f9:21:
b0:3d:f6:02:4f:75:69:aa:b3:38:f8:5b:d2:00:a1:f4:1a:b6:
a1:83:a0:ce:03:37:ae:cc:32:15:ee:85:cb:7e:c0:48:f3:11:
2f:f4:c6:b6:e0:09:02:a9:01:de:8e:04:08:f4:37:58:f3:1c:
21:86:98:ac:cc:1e:b6:b5:3d:4e:08:2a:fd:ad:39:20:b6:68:
2e:35:dc:bf:6a:c4:b4:eb:da:fd:7e:5b:77:32:3d:98:e9:26:
55:95:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net