Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/J5QgCxKNKik7O15LPyeeQADYm_g.roa
File: J5QgCxKNKik7O15LPyeeQADYm_g.roa (raw, json)
Hash identifier: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=
Subject key identifier: 27:94:20:0B:12:8D:2A:29:3B:3B:5E:4B:3F:27:9E:40:00:D8:9B:F8
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 019422203AEF86A8011E6741E78B00B82A12
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/J5QgCxKNKik7O15LPyeeQADYm_g.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12703
IP address blocks: 193.33.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3a:ef:86:a8:01:1e:67:41:e7:8b:00:b8:2a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2794200b128d2a293b3b5e4b3f279e4000d89bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:f6:b0:f6:94:7d:bf:40:36:ec:77:12:f3:
fa:58:50:8f:fb:b5:03:0c:8e:e6:bc:2b:c2:72:b9:
7b:69:05:d5:4e:c7:68:d5:ea:15:9e:2e:fb:8e:e0:
a0:6e:5e:b0:cd:b4:04:94:6c:68:97:f5:8d:01:2a:
ad:d1:6a:c9:8b:0f:ca:51:dc:40:3c:42:19:3b:de:
1a:76:17:d7:b5:2e:19:e8:c5:43:f1:1d:25:8c:b8:
13:49:a5:10:2d:4c:73:88:cf:90:5b:a0:32:05:f6:
b1:3c:84:87:c6:cf:cf:bd:9b:3e:61:69:fb:8f:94:
01:16:35:ff:18:4c:0c:19:1b:a2:da:a6:08:70:2e:
e0:48:d4:c1:66:97:ce:51:20:d1:4c:ca:ae:6e:dc:
92:8d:18:08:4b:a5:e8:11:86:86:92:46:d1:93:f6:
55:5f:98:dc:19:88:1d:25:eb:b0:ec:2f:79:94:57:
0e:7d:cc:1f:d9:b2:8e:81:96:52:3a:b8:c9:7c:03:
9f:be:f4:0e:2d:3c:b9:01:d5:a8:a7:5d:ff:6a:82:
58:17:ac:cb:5c:e8:c3:d5:84:5a:84:7f:2d:d1:0d:
7e:1f:e2:73:d3:c1:5d:5a:87:92:a0:96:8a:80:16:
26:5b:b1:5a:c7:a1:69:49:55:97:f1:e9:3e:ef:07:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:20:0B:12:8D:2A:29:3B:3B:5E:4B:3F:27:9E:40:00:D8:9B:F8
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/J5QgCxKNKik7O15LPyeeQADYm_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:8d:e9:42:fd:4f:76:bc:10:a2:b4:82:82:24:13:38:26:ea:
22:ce:25:e6:9e:69:74:2a:7f:6f:f2:38:46:3d:28:95:a5:cf:
2e:e1:ab:07:17:2f:1e:e3:5b:8f:52:63:90:8c:95:3f:b2:0c:
53:4a:1a:7d:ec:5b:fb:37:92:67:62:68:5a:3f:f6:26:40:b8:
a3:42:82:bb:e3:3a:83:a8:c4:77:4b:64:65:36:37:93:22:71:
b0:0f:e2:21:b2:45:91:0d:88:fc:87:4f:86:e0:14:fe:df:51:
09:30:bd:80:13:c9:fa:51:0f:e9:ec:50:d2:1d:fc:c6:d4:50:
88:eb:d3:0d:b6:e1:76:9b:9b:1b:65:ae:5b:6c:11:f7:67:e6:
b2:ba:8c:96:a0:0c:c1:75:09:25:09:f0:b7:3f:01:1f:ba:55:
1f:0a:db:7a:a8:04:3b:6a:26:81:2c:f5:00:fd:2a:f9:14:23:
9c:31:ff:43:4e:c5:97:14:2c:b5:dd:e1:a2:ea:9b:c3:62:7c:
d5:01:38:d8:2c:50:d4:bf:ec:a8:ad:f9:11:15:13:63:40:a5:
1a:92:1c:f3:9c:8d:e9:30:69:ad:71:e5:e2:5b:18:5e:44:9a:
8f:7e:57:06:67:da:91:98:de:ae:5f:59:d3:c9:b3:7f:e9:94:
97:4f:cb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net