Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa
File: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (raw, json)
Hash identifier: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=
Subject key identifier: 8C:13:07:17:86:67:71:86:36:75:22:79:08:7A:8C:20:F5:7C:39:F7
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019424B3B30B1387F7B622268D6CC5F21A27
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58206
IP address blocks: 193.46.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b3:0b:13:87:f7:b6:22:26:8d:6c:c5:f2:1a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c1307178667718636752279087a8c20f57c39f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:80:15:8f:8e:38:44:d8:1a:e6:ae:db:fa:
e4:8f:8d:72:0e:31:f3:0d:4a:df:6a:a8:4b:c5:be:
28:65:15:f1:be:d3:53:e0:47:81:f7:a5:79:15:5d:
c9:b4:61:39:45:cf:90:cc:9c:64:7f:21:b7:90:88:
3b:cd:00:28:e1:74:dc:32:4d:97:be:79:dc:17:37:
8e:c1:a9:2f:b3:c5:59:79:35:df:4a:9e:ed:f8:ae:
90:18:a8:36:7a:d2:2a:90:18:f3:7c:21:ad:6e:bd:
74:cc:81:59:0e:83:fb:35:d4:fe:e4:8c:d9:b2:4c:
6a:98:b5:fc:7b:00:94:bc:73:82:97:73:b8:2d:0f:
0a:cf:af:93:48:f2:ba:10:03:fb:88:18:9c:b8:f9:
8c:b5:0c:3a:a8:dd:6e:33:80:8a:c5:7e:7f:47:4b:
a1:44:d5:28:d4:9d:0f:aa:aa:2d:c4:d4:e6:e7:c0:
93:e7:df:10:6a:80:4a:11:03:7d:7f:73:5a:66:36:
84:44:f0:a4:55:0e:3c:11:f4:0b:dd:4a:fc:ed:76:
21:c7:39:b1:bc:c2:e2:e5:00:a5:02:6d:d4:21:23:
0e:c7:a7:ea:84:35:02:7c:9a:52:3c:f4:47:d1:83:
67:5f:12:78:ca:65:5b:f8:c3:e5:dc:2a:64:61:77:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:07:17:86:67:71:86:36:75:22:79:08:7A:8C:20:F5:7C:39:F7
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:b7:d0:0e:13:2d:6a:93:8f:8c:98:9a:28:e6:34:a1:de:6d:
c0:54:c6:5a:ce:c2:b9:5e:c5:8c:65:19:5a:54:9c:76:c4:8e:
0c:57:b2:96:f9:92:16:1f:a5:eb:7c:af:1a:f9:3c:cb:0d:c7:
31:26:c4:de:ff:41:c2:78:5a:a7:0d:ce:73:fa:98:e5:7d:52:
98:9a:5a:c6:3a:cc:93:12:72:f3:0b:31:20:4d:cb:bf:5c:36:
c5:aa:b3:71:02:71:2a:a0:7d:88:2a:68:0b:cb:91:c9:48:07:
11:9c:3f:9b:d9:31:89:1c:31:1c:7e:08:60:ac:94:d9:01:e7:
53:4e:ef:5c:7e:d8:1d:45:b1:18:c7:c7:40:53:25:94:4a:cd:
91:a3:60:07:1d:27:38:ab:a2:ba:3c:8f:24:c9:dc:7b:07:79:
c8:ae:90:1f:2b:ef:0e:2a:7e:b0:0b:62:87:a9:7f:0c:d6:cc:
c1:35:f3:3c:66:2a:b5:7c:9a:e2:2c:ff:be:47:ad:e8:0c:20:
21:94:0b:d8:b2:2a:31:55:a6:4c:24:f4:6d:e4:69:0b:8e:35:
64:b9:f1:9f:3f:ee:45:46:49:96:7a:f0:d5:a8:6e:06:37:9a:
70:45:2b:77:bb:84:78:9e:11:34:80:05:52:85:96:98:68:57:
5b:da:fe:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net