Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/N-IkqmIl8KlWw01vFtAZ-uos0pY.roa
File: N-IkqmIl8KlWw01vFtAZ-uos0pY.roa (raw, json)
Hash identifier: YeMMYzZTCS8ByuvcJi0c6d7AtfKEEZ2nt+xBnMZjmqQ=
Subject key identifier: 37:E2:24:AA:62:25:F0:A9:56:C3:4D:6F:16:D0:19:FA:EA:2C:D2:96
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 0195FFAD6A7956D586AC8BD66FBE4EB9511A
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/N-IkqmIl8KlWw01vFtAZ-uos0pY.roa
Signing time: Fri 04 Apr 2025 07:21:49 +0000
ROA not before: Fri 04 Apr 2025 07:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47536
IP address blocks: 193.105.29.0/24 maxlen: 24
2001:678:964::/48 maxlen: 48
2a12:79c0:100::/48 maxlen: 48
2a12:79c0:200::/48 maxlen: 48
2a12:79c0:300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:ad:6a:79:56:d5:86:ac:8b:d6:6f:be:4e:b9:51:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Apr 4 07:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37e224aa6225f0a956c34d6f16d019faea2cd296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:84:ee:37:fb:c7:aa:99:7f:7f:0a:b5:63:
c0:31:1d:01:3a:c0:3d:8d:1f:8c:95:52:c4:70:b9:
0e:da:55:30:53:8a:ae:71:c0:20:4b:62:5d:d0:2d:
44:75:63:8a:04:22:6b:f4:8b:98:ea:4f:d4:f8:75:
a8:05:80:79:49:9c:91:48:e2:45:07:47:96:83:b0:
ba:6a:dd:4a:c2:e0:41:5a:3d:ae:2f:97:6e:c1:1a:
20:ba:47:5a:62:75:8c:98:d5:2c:d0:ee:9e:2f:3d:
ec:f2:90:3a:61:0d:db:6b:86:2c:5d:73:63:dc:40:
2a:3a:0c:b7:65:7d:cf:34:10:4c:84:f9:1d:12:56:
89:ad:67:51:ec:58:69:c5:17:6c:56:b9:5b:29:04:
38:c1:a9:0c:50:0e:62:7a:9f:a7:ad:8c:3e:45:75:
d2:62:6a:41:02:45:fd:45:d5:fc:23:4f:09:85:a8:
6f:82:c7:5a:97:83:4e:d9:61:54:d3:1f:4f:52:0f:
6e:42:67:3d:a1:8c:02:a5:ba:e9:0c:85:4d:0e:82:
2f:52:1e:90:97:76:85:dd:c9:08:c8:64:91:b4:2d:
2c:6b:fd:f5:c1:62:c4:8e:4a:b8:ba:a1:42:32:b9:
47:40:7d:3c:53:bd:c7:37:ae:c4:c1:13:f1:2d:83:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E2:24:AA:62:25:F0:A9:56:C3:4D:6F:16:D0:19:FA:EA:2C:D2:96
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/N-IkqmIl8KlWw01vFtAZ-uos0pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.29.0/24
IPv6:
2001:678:964::/48
2a12:79c0:100::/48
2a12:79c0:200::/48
2a12:79c0:300::/48
Signature Algorithm: sha256WithRSAEncryption
1d:07:14:13:42:53:89:e1:12:97:f5:f9:be:d1:b0:cb:7e:c1:
02:e4:d9:70:15:23:18:ad:0f:29:57:62:5e:d0:04:40:52:e6:
7c:e7:07:14:07:81:f1:7a:e2:58:19:53:57:05:a8:30:33:a6:
af:9a:58:8f:3f:1f:c5:43:fe:b9:7d:32:70:52:c2:38:2a:84:
33:63:1e:77:0d:38:f1:4e:e1:8d:2d:f0:bb:9d:11:5e:41:63:
49:56:cc:00:9d:df:b5:57:b9:ea:85:be:77:a7:d1:1d:20:bf:
7d:b0:cc:92:3a:0e:66:45:40:48:61:82:4c:c0:53:d7:3a:82:
08:65:f9:5f:cd:2f:36:6a:d3:c8:ae:be:e0:c4:67:27:9e:2f:
99:ca:3e:82:11:59:25:02:bf:37:37:db:19:d5:70:43:f4:78:
aa:65:ef:56:03:18:87:08:84:fd:6e:f0:0c:c4:da:77:fa:8a:
6c:44:9a:65:4f:a6:93:3a:3a:24:8e:19:2c:7d:5e:01:c1:7b:
ab:d4:62:9f:85:6c:b0:bf:13:5d:fd:37:a0:14:51:d0:d2:32:
df:85:e1:ec:8b:2d:8b:3e:d6:d4:3f:c6:e7:02:e4:50:ff:d8:
f9:9b:5f:6e:85:de:c9:53:a4:5a:8e:cb:c3:19:a5:80:a0:fa:
1e:dc:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net