Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/urVdPzAr5hcmUa_BCZWJpXPsm3s.roa
File: urVdPzAr5hcmUa_BCZWJpXPsm3s.roa (raw, json)
Hash identifier: q/f+k2J6pg2/lVHaao8qrOCAoWMApYxChxvdtUZ21VY=
Subject key identifier: BA:B5:5D:3F:30:2B:E6:17:26:51:AF:C1:09:95:89:A5:73:EC:9B:7B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01962B45D97F4C0070BE1149CBFE102CD474
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/urVdPzAr5hcmUa_BCZWJpXPsm3s.roa
Signing time: Sat 12 Apr 2025 18:32:00 +0000
ROA not before: Sat 12 Apr 2025 18:32:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215232
IP address blocks: 193.23.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:45:d9:7f:4c:00:70:be:11:49:cb:fe:10:2c:d4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 12 18:32:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bab55d3f302be6172651afc1099589a573ec9b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:6d:7f:9e:6b:36:58:a0:0f:e0:bf:df:28:
63:f1:1c:22:18:a2:be:c6:ac:30:31:b4:4e:65:f9:
cc:8e:40:58:15:c3:a4:ce:a2:38:8c:cf:ed:db:ef:
64:2f:01:50:f9:4a:07:30:32:61:25:79:d9:3f:09:
00:2a:1b:3d:b4:82:ce:ac:c5:fd:6d:3c:2f:5d:6b:
a7:68:62:d0:fe:23:66:1c:70:06:22:aa:8c:c8:ef:
20:a6:79:5f:16:bb:3b:04:d6:b2:5b:e0:3f:13:aa:
8e:d3:b2:1e:2f:bb:d0:61:d6:fc:05:36:fe:69:fe:
ac:2e:88:cf:03:25:0d:7e:eb:e9:16:e3:b5:fe:90:
03:61:7e:50:89:ed:f1:af:ee:3f:7c:3f:df:77:b9:
48:e6:fe:b4:39:79:42:4d:c8:cf:31:78:9a:7e:b8:
b9:18:99:66:b9:1c:9c:ab:84:8c:fd:b2:fb:ae:17:
81:33:34:d2:01:12:8b:ba:e5:fd:7a:11:66:a8:e7:
85:c2:ed:b6:d8:43:f7:b5:4f:4d:a5:1d:f0:69:e0:
a5:10:9d:cf:b7:5f:d1:8e:f1:21:26:18:7f:9e:32:
6b:70:f0:61:9e:de:de:d8:3f:71:41:a7:87:69:96:
e4:f3:d4:2c:43:a4:ec:c8:24:1c:fe:ec:e5:f1:30:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B5:5D:3F:30:2B:E6:17:26:51:AF:C1:09:95:89:A5:73:EC:9B:7B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/urVdPzAr5hcmUa_BCZWJpXPsm3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
33:72:a0:e8:3d:86:5f:a4:c3:f6:e8:aa:47:84:84:ca:cf:26:
ee:26:49:ea:61:37:45:74:09:08:2d:08:62:9f:8d:5a:87:08:
d2:17:9f:34:bb:ce:90:bb:16:dd:e2:a9:b7:0b:37:57:04:74:
c9:5c:80:e7:a2:d5:eb:bc:e3:d9:0e:83:ec:11:3c:03:5f:96:
39:8e:8d:cd:76:a8:db:82:3a:1f:11:d1:03:7e:95:c4:17:9b:
32:be:90:a3:7d:e7:07:34:1a:a1:5f:0d:57:aa:fc:06:9d:75:
0f:50:81:ba:e9:9c:fe:7a:37:c0:29:23:83:4c:37:68:81:04:
6e:99:e2:ae:cf:f0:dd:8d:e3:7e:46:12:83:9c:04:0a:dc:37:
3a:6b:a3:e2:dd:29:39:f6:e5:25:0a:6a:07:8d:a4:c6:0d:e1:
7d:33:bb:49:ab:f8:d1:ed:cf:ac:62:a1:91:9d:77:19:0c:bc:
79:d5:c7:2b:00:b7:f1:7f:47:20:da:0a:25:eb:e8:79:40:8c:
24:95:4d:c6:23:8c:f0:20:0c:46:11:45:3a:2e:9d:17:32:34:
ba:10:f2:48:70:c2:35:aa:e0:ea:84:8d:65:3c:6e:2a:fa:dd:
bb:9c:b0:35:cf:90:3a:ef:31:37:0e:d2:84:db:8a:0b:20:dd:
ae:d6:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net