Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/sWuySCoAeegdfWnkMuqNoxyi1Bw.roa
File: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (raw, json)
Hash identifier: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=
Subject key identifier: B1:6B:B2:48:2A:00:79:E8:1D:7D:69:E4:32:EA:8D:A3:1C:A2:D4:1C
Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial: 019420D5B13A060E6FC4AAA7F8AE9D6CFB82
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/sWuySCoAeegdfWnkMuqNoxyi1Bw.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51462
IP address blocks: 193.105.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b1:3a:06:0e:6f:c4:aa:a7:f8:ae:9d:6c:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b16bb2482a0079e81d7d69e432ea8da31ca2d41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:e9:43:fa:ef:e8:5e:17:08:95:75:f5:3d:
26:ef:3d:4b:f7:cf:b3:65:26:bd:84:3e:a7:20:52:
3c:5f:66:23:b7:5a:a9:e4:6c:93:1d:85:30:e6:51:
e6:ad:6b:88:13:8c:91:30:1d:96:00:bf:5c:f9:33:
ec:79:da:d3:95:a6:2c:57:57:f2:84:d6:19:5e:14:
2b:73:b2:1c:5f:3a:91:33:39:fc:19:5b:67:b9:94:
26:43:7a:ac:24:80:5c:c0:4b:c0:2f:79:54:91:0c:
fc:cc:c4:27:87:0e:7b:e1:fd:a6:7c:6c:f7:bb:12:
ab:61:ea:9a:51:f3:1d:70:ba:b1:38:f7:f6:9b:ea:
64:74:f4:43:09:d3:53:ec:1b:b0:97:0c:16:d6:af:
2b:8a:d3:70:fd:68:69:14:ed:ac:08:8b:e6:bc:cf:
d9:eb:88:18:59:3a:a7:56:b5:d2:70:2a:d3:9e:74:
62:a4:86:ad:1f:18:de:55:9f:2d:ce:83:8c:e2:12:
a2:aa:5a:40:46:40:9c:66:ec:02:43:1e:10:4b:0a:
22:19:a9:cb:99:21:e7:3f:fd:68:38:03:b7:69:28:
81:de:de:cf:22:3e:08:eb:82:4e:bd:39:cf:d3:fa:
44:48:bf:41:bb:c0:03:d1:dd:1c:da:5c:8b:37:fa:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6B:B2:48:2A:00:79:E8:1D:7D:69:E4:32:EA:8D:A3:1C:A2:D4:1C
X509v3 Authority Key Identifier:
keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/sWuySCoAeegdfWnkMuqNoxyi1Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.106.0/24
Signature Algorithm: sha256WithRSAEncryption
66:aa:49:42:27:bf:ec:45:d5:1f:2b:e7:01:1c:e1:1f:d8:9b:
61:13:23:18:20:00:24:8c:e7:62:f7:1a:9e:58:1e:ce:d4:0d:
5f:6d:75:ba:29:76:c8:68:dd:1c:e0:42:14:a1:25:3d:52:5f:
60:dc:52:33:a9:e1:3c:02:63:9b:dd:d8:b1:77:6f:4b:45:7a:
2d:84:5c:0f:a3:40:a8:fc:88:6d:44:49:1f:36:8e:aa:5d:e2:
05:3c:2e:8c:61:22:43:d3:f7:6e:53:9e:9d:dd:3e:0d:d2:5e:
74:8c:62:43:08:e7:28:da:be:07:ae:5a:ae:7b:ee:db:0d:e1:
e6:67:c8:dc:a6:53:4c:16:24:7c:1b:ee:4f:cd:b4:07:07:02:
20:95:27:4e:48:15:19:72:95:de:9e:aa:53:31:a1:04:21:15:
7a:95:2c:81:e2:52:25:e5:14:f5:9b:60:dc:ca:6b:2b:a6:0d:
6c:29:a1:68:4d:d9:fc:28:cb:7d:f6:9b:c4:c3:05:3d:51:02:
05:65:ed:2c:d5:82:7e:9a:ae:90:f3:fd:6e:a2:55:a9:ba:ce:
cc:bd:8f:14:c5:ff:5a:3c:08:15:bf:b8:2b:a4:ac:44:9a:11:
34:cf:96:e5:73:0a:e6:03:94:06:38:bf:ca:4b:83:69:65:e3:
a7:78:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net