Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/n79crWM-L0W_-YTIs0SA8x1g-4g.roa
File: n79crWM-L0W_-YTIs0SA8x1g-4g.roa (raw, json)
Hash identifier: WTPugh0CrOL+7geJ0TTyRViJCXrCGCyNH+3nK4QxB48=
Subject key identifier: 9F:BF:5C:AD:63:3E:2F:45:BF:F9:84:C8:B3:44:80:F3:1D:60:FB:88
Certificate issuer: /CN=cd3c110dfd77f57757391c0faedeebe36086571d
Certificate serial: 0194282744DCB0C7E6C6766524631EFDF566
Authority key identifier: CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/n79crWM-L0W_-YTIs0SA8x1g-4g.roa
Signing time: Thu 02 Jan 2025 17:54:09 +0000
ROA not before: Thu 02 Jan 2025 17:54:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43598
IP address blocks: 193.187.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:44:dc:b0:c7:e6:c6:76:65:24:63:1e:fd:f5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3c110dfd77f57757391c0faedeebe36086571d
Validity
Not Before: Jan 2 17:54:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fbf5cad633e2f45bff984c8b34480f31d60fb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:4e:2b:fc:e4:02:38:0a:53:f4:26:36:f9:
48:79:da:aa:e6:cc:4a:2a:a3:3a:ee:01:9c:70:6c:
b0:e6:c4:dd:be:fa:1b:8b:83:a3:1d:78:80:d2:8d:
84:66:34:41:26:14:8c:fa:3c:41:2e:da:78:ff:2f:
38:8e:c3:5f:27:30:9b:56:5c:f5:b7:1d:33:7b:33:
0a:cc:03:7c:3a:e5:ab:97:7c:51:3d:e5:f6:1e:17:
1e:66:de:a5:e5:e4:cc:85:d9:a8:88:a3:cf:7a:6e:
d0:33:b7:b9:3c:e4:66:39:58:65:24:72:a6:78:c3:
31:81:ee:80:d8:16:8a:80:ee:c3:74:18:73:f7:ac:
3e:c7:61:35:61:ac:e5:d2:47:9e:da:bd:4f:b5:cb:
23:07:ac:ce:ed:aa:1f:46:ec:77:38:ff:d3:d5:da:
aa:3f:46:1d:70:18:0b:b2:6e:6a:6e:bb:87:dd:23:
25:62:59:5a:4b:57:1d:9b:5a:c1:d1:f4:37:f3:9f:
a1:39:de:e1:eb:fe:92:bf:0d:4a:a2:db:81:5f:7f:
87:09:80:ef:bb:f0:ac:83:3a:a5:ad:aa:db:48:4a:
cd:8f:46:b3:ad:59:fc:8e:d8:56:9b:07:6d:25:ea:
54:9c:97:a4:50:6b:d1:9f:83:c6:4f:ff:bd:a4:7e:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:5C:AD:63:3E:2F:45:BF:F9:84:C8:B3:44:80:F3:1D:60:FB:88
X509v3 Authority Key Identifier:
keyid:CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/n79crWM-L0W_-YTIs0SA8x1g-4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:01:d8:98:22:97:b2:4b:90:7b:bf:ba:22:57:34:55:5f:38:
42:94:a5:1d:ec:0c:41:4b:56:d8:10:bc:92:57:a6:e0:24:7d:
35:48:86:66:7b:19:f4:72:ad:7d:8c:2c:d4:fb:4f:05:4a:2f:
9e:3b:2b:c2:3b:73:dc:72:b3:09:92:8f:9d:e7:20:dc:49:10:
45:2d:77:69:dc:ea:be:2d:22:7f:28:6f:47:53:09:55:81:bb:
63:59:a1:8f:3f:fe:cc:00:ad:89:ff:66:aa:50:b3:08:f9:0e:
39:c6:7c:24:42:83:ea:5f:c8:fb:5b:d2:6b:c0:31:90:89:86:
48:9d:83:1d:64:60:b4:4c:7c:03:76:0a:52:80:72:05:1e:30:
d6:17:e6:e2:20:1a:88:9f:09:eb:11:ca:a0:33:67:0b:6a:f6:
bd:11:c9:78:00:3d:cb:75:2c:87:4d:42:11:7f:f8:9e:d8:65:
f9:af:72:95:28:18:7e:94:71:b9:77:bb:9b:c7:b4:30:b0:37:
85:8a:30:bd:32:f2:e8:58:6b:d2:e2:9b:63:37:56:a3:09:e1:
38:1b:80:3d:1a:ea:80:d3:e5:75:c5:d2:43:53:7c:35:67:16:
13:cb:ee:79:f4:f2:fb:f6:c1:cb:72:ac:f7:5c:7f:c0:7b:af:
32:09:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net