Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/iaMRdP2RyDT-6nSIejme8ejtlz0.roa
File: iaMRdP2RyDT-6nSIejme8ejtlz0.roa (raw, json)
Hash identifier: w6co8/yr5pK0Ot58oo5ftwFcerLdy7XppbhZMwkZj3M=
Subject key identifier: 89:A3:11:74:FD:91:C8:34:FE:EA:74:88:7A:39:9E:F1:E8:ED:97:3D
Certificate issuer: /CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Certificate serial: 019425FC150D952F94CCAE1BCFAE26EE1610
Authority key identifier: 12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/iaMRdP2RyDT-6nSIejme8ejtlz0.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34762
IP address blocks: 193.109.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:15:0d:95:2f:94:cc:ae:1b:cf:ae:26:ee:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a31174fd91c834feea74887a399ef1e8ed973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:de:93:50:9d:bd:41:32:a1:91:aa:07:5f:
f6:5d:74:7d:21:5f:35:6c:98:37:df:bd:59:be:10:
f0:96:4d:0f:75:8d:6d:9b:ab:0c:9d:41:50:26:c5:
49:d9:d6:75:96:4f:a6:0c:3d:2d:37:d7:e9:22:6b:
a8:6e:66:1a:77:2b:ea:51:fa:d2:58:97:eb:a9:7a:
39:23:95:ad:da:4c:2f:92:12:5d:04:52:29:de:2f:
f2:47:4b:a0:8f:ec:2f:02:37:fa:0b:7e:5a:98:4c:
6b:53:60:57:29:90:67:f0:29:2f:c5:01:74:dc:5b:
64:56:8b:98:69:6a:d3:c4:47:62:dc:2a:a3:e3:0a:
02:a6:78:5d:bf:54:c6:44:22:ca:26:27:00:c4:9e:
0f:17:8c:a3:e7:25:e8:c8:7c:27:56:95:4b:3f:ab:
c3:99:30:bc:62:47:76:fc:da:50:fe:a8:82:30:45:
ed:29:65:e1:6f:78:44:f5:08:fa:e5:95:a9:89:bc:
a4:93:4f:99:28:8a:b2:c6:4c:8c:89:a5:f5:a7:aa:
eb:f4:f2:98:c3:6a:07:b9:0d:39:ed:96:87:c1:61:
92:e1:3a:27:b1:c7:ca:8c:65:11:f1:83:35:a5:cb:
bd:78:16:19:2f:68:d5:14:d0:65:d9:4b:8d:96:7e:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:11:74:FD:91:C8:34:FE:EA:74:88:7A:39:9E:F1:E8:ED:97:3D
X509v3 Authority Key Identifier:
keyid:12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/iaMRdP2RyDT-6nSIejme8ejtlz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.228.0/24
Signature Algorithm: sha256WithRSAEncryption
25:56:9c:91:87:58:fd:fb:37:ba:f9:14:cc:cb:ef:ed:a2:4d:
b0:6d:05:7d:79:b1:06:75:93:78:27:76:fc:40:96:c0:73:64:
e3:f3:47:c0:88:bb:8c:3c:a4:29:50:5c:70:62:07:81:25:0b:
c1:15:66:0b:8f:df:ad:f3:2f:0a:b3:df:d6:f0:b4:e4:0d:ce:
7a:56:c6:02:9a:b2:47:fa:a4:98:66:91:9b:3f:88:51:d6:98:
83:25:f3:d0:06:0c:99:3a:b4:d7:16:a1:e5:d2:8e:70:47:d0:
bd:6b:89:cb:dc:ec:aa:d1:57:dc:07:54:50:54:0e:bf:8f:ff:
58:d1:a5:12:ee:7e:64:52:a3:b0:c9:e8:1b:28:92:7d:8d:fb:
54:6b:7c:d2:a4:20:2c:d9:02:2e:5c:32:06:cf:18:16:de:1f:
94:8a:c2:5e:51:11:42:af:c5:d1:8f:d4:a5:b6:ae:bf:ed:42:
35:1d:37:43:d6:f7:8c:3e:79:0d:cd:a2:a5:02:28:85:5a:6b:
43:25:74:d7:f0:c6:13:ab:27:ca:18:33:1c:b3:04:4d:48:bb:
45:2d:76:28:86:45:5a:43:9e:ae:e0:11:46:62:26:f2:61:78:
1e:7b:03:00:0b:6a:c5:54:60:a4:6d:36:f9:27:0f:ae:52:6d:
28:5c:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net