Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/pIHIruBkWSXEhwElM3sSrgjzMr0.roa
File: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (raw, json)
Hash identifier: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=
Subject key identifier: A4:81:C8:AE:E0:64:59:25:C4:87:01:25:33:7B:12:AE:08:F3:32:BD
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 019425FDAE403EC6927C64AB93E818D8848B
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/pIHIruBkWSXEhwElM3sSrgjzMr0.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43891
IP address blocks: 193.186.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ae:40:3e:c6:92:7c:64:ab:93:e8:18:d8:84:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a481c8aee0645925c4870125337b12ae08f332bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:a5:e4:f3:a2:28:36:4a:2f:20:ea:9e:78:
76:67:24:98:ab:57:3d:04:cd:98:1a:96:db:c9:be:
2e:9d:ea:70:33:ef:77:e4:b0:9c:ed:a0:20:d7:f6:
7f:b9:89:b5:3f:6b:a9:60:91:dd:6e:f1:c7:1e:e6:
82:6a:d5:31:38:cc:43:2a:a5:fa:e0:ae:c2:4d:4f:
e3:79:ba:e4:46:b5:68:4d:22:14:91:80:55:43:d9:
f4:79:3c:20:a5:0b:4a:00:35:52:d8:d2:2b:d3:60:
74:54:08:01:e6:91:32:00:1a:db:2b:0f:30:b1:8e:
cf:b9:96:5f:f4:28:ae:36:74:d4:46:99:89:30:5d:
d8:16:09:11:7f:e8:7a:0e:01:65:71:c8:21:29:a5:
19:f8:7d:bc:02:bf:98:35:c3:f4:97:79:47:d9:6e:
da:7d:5e:ad:ea:14:3a:a1:f2:bf:73:3e:a1:d3:e7:
f1:e0:10:1f:64:93:77:a6:bc:d2:4a:b0:d1:d7:a7:
5e:0f:51:05:7f:f5:4d:3b:09:61:d9:cf:ae:38:80:
34:bc:df:26:ac:6a:b7:a0:d1:a0:2b:d3:b4:82:4c:
46:83:89:31:8b:2a:dd:f0:5c:83:41:73:7e:9c:35:
e9:38:b6:9c:b2:3c:ba:84:75:8e:e7:f2:1c:89:33:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:81:C8:AE:E0:64:59:25:C4:87:01:25:33:7B:12:AE:08:F3:32:BD
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/pIHIruBkWSXEhwElM3sSrgjzMr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1b:33:c9:75:26:5f:c2:27:7c:3e:27:c4:ff:a9:7f:18:db:
48:04:3a:70:61:04:53:c9:b2:69:82:c1:01:c3:53:a1:15:19:
17:d5:52:63:2d:1b:f6:e0:f7:2c:f5:e9:cc:91:fe:fc:a4:91:
db:45:60:d1:c0:1d:94:b4:e2:d6:42:be:e5:43:8e:32:3e:d6:
51:33:09:db:ec:10:bb:58:3c:94:c3:71:7a:2a:d7:16:15:00:
42:93:ce:76:e3:8d:70:a5:2c:87:9f:61:77:b6:82:a5:15:8c:
1a:be:fd:1e:5d:5a:a0:08:0e:13:9d:1c:1d:b1:c4:ec:08:b1:
7b:46:8c:7d:a8:45:3e:c0:70:b0:9d:7d:6c:14:eb:4c:cc:89:
df:2d:f7:01:2c:c7:8b:09:ad:37:63:2c:a1:17:fc:79:ef:9c:
46:2c:d6:57:43:a2:1c:22:dc:d7:ea:d0:6e:12:09:72:fc:17:
2d:8a:f9:34:9e:8c:4c:2b:d0:03:f3:13:5e:cb:b7:60:31:83:
e3:2d:ed:33:76:d3:3b:94:35:bf:da:1d:f3:fc:55:ab:bb:b8:
72:af:b9:49:8f:78:b2:84:a5:d1:b6:69:9b:ff:eb:d8:c2:60:
79:89:01:a1:45:15:81:55:b3:5d:95:a3:48:4e:ba:cb:ae:90:
9c:10:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net