Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/D-kvzPrAwGbNDxb_KzLw4lsFxes.roa
File: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (raw, json)
Hash identifier: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=
Subject key identifier: 0F:E9:2F:CC:FA:C0:C0:66:CD:0F:16:FF:2B:32:F0:E2:5B:05:C5:EB
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 019425FC86C8FAF68E5E17841172C27BC869
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/D-kvzPrAwGbNDxb_KzLw4lsFxes.roa
Signing time: Thu 02 Jan 2025 07:48:14 +0000
ROA not before: Thu 02 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51050
IP address blocks: 193.38.140.0/23 maxlen: 23
193.39.6.0/23 maxlen: 23
2a0f:b580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:86:c8:fa:f6:8e:5e:17:84:11:72:c2:7b:c8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Jan 2 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fe92fccfac0c066cd0f16ff2b32f0e25b05c5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:b8:93:60:17:d7:12:31:22:b7:ee:8c:69:
0a:9e:fe:da:66:f5:b8:0d:7b:06:4b:ce:cc:db:c9:
d4:40:99:20:f5:41:10:f5:af:d4:42:77:7d:cf:17:
34:96:ec:9b:e9:76:61:21:a9:10:b3:f8:95:10:cc:
f6:16:b3:ad:e1:e3:2d:fa:c6:a8:ed:dd:3e:d6:2c:
84:a5:d4:e7:45:c4:7b:07:bc:cf:47:78:db:f7:50:
14:5c:87:76:8f:a4:09:c2:09:60:61:4b:a7:f9:5e:
08:62:d8:67:29:46:f8:ef:7a:28:1c:3f:e0:d9:05:
37:85:b4:37:76:c0:51:f1:2a:e4:83:b9:01:b2:c4:
6b:03:71:ca:f7:b2:4c:23:c7:57:fe:f2:6d:99:75:
76:6b:e6:b2:db:1a:7d:b3:6a:cc:96:18:6a:c6:94:
64:5d:56:34:5b:95:02:0c:55:f0:09:28:76:e6:e8:
f7:df:0c:f7:03:c1:39:2c:76:fe:c7:5d:36:a1:b2:
6e:d4:14:3f:36:84:4b:eb:f1:56:ee:dd:1d:d5:89:
7d:17:3b:f5:c3:d9:05:fa:55:88:56:fc:1e:68:63:
0f:5c:e1:f9:e9:84:86:8d:d1:34:eb:19:c9:b7:21:
06:b5:9a:41:f6:f8:a7:e9:d4:e9:5d:d2:76:77:46:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E9:2F:CC:FA:C0:C0:66:CD:0F:16:FF:2B:32:F0:E2:5B:05:C5:EB
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/D-kvzPrAwGbNDxb_KzLw4lsFxes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.140.0/23
193.39.6.0/23
IPv6:
2a0f:b580::/29
Signature Algorithm: sha256WithRSAEncryption
72:a8:e8:c5:62:a3:3e:b1:90:c5:d9:e8:1f:4a:14:24:27:a9:
19:89:f1:f0:7d:c4:2a:ef:16:86:a5:39:04:ff:14:38:c1:b0:
8f:5e:cf:3d:1d:84:b7:3c:d6:a6:30:94:7a:e4:72:08:f1:57:
27:37:d5:2b:19:86:70:b8:d3:12:a6:b2:36:e5:aa:34:73:93:
04:9c:28:d2:4a:af:57:83:94:82:68:10:e5:5d:79:bf:44:b4:
a0:8b:69:60:25:85:8f:86:36:7c:ae:12:b3:9c:78:38:9e:10:
e9:cf:26:ad:bd:0a:c8:55:9b:0b:97:91:6c:85:56:b3:6c:2a:
ff:16:b7:1b:0f:de:ae:52:5d:95:ea:d6:e3:51:01:49:cc:c1:
c6:0d:a5:1a:59:19:f7:a8:25:9a:99:9f:28:16:d2:d1:b3:b8:
82:fd:61:00:a6:00:e9:5b:97:df:a1:c9:b4:96:50:0a:32:61:
fa:ed:8c:9a:2c:5d:75:c0:6d:ef:df:25:f5:9a:85:2a:22:da:
18:1e:a2:3c:31:04:82:67:a0:5c:7e:10:31:94:a2:02:14:71:
3c:ec:4c:f9:ff:40:eb:e4:32:b6:e5:52:c7:8c:89:fe:d5:95:
93:5d:7b:50:2e:b8:73:a6:94:4b:65:5d:b0:0c:aa:58:fe:f8:
43:ed:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net