Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/AB4qyh-GFm_4fCIscWpIBFj0Kek.roa
File: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (raw, json)
Hash identifier: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=
Subject key identifier: 00:1E:2A:CA:1F:86:16:6F:F8:7C:22:2C:71:6A:48:04:58:F4:29:E9
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 01941FFA9E7CCF8ED1870E52D601CC871ACA
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/AB4qyh-GFm_4fCIscWpIBFj0Kek.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12732
IP address blocks: 193.34.120.0/22 maxlen: 24
193.34.120.0/24 maxlen: 24
193.34.121.0/24 maxlen: 24
193.34.122.0/24 maxlen: 24
193.34.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:7c:cf:8e:d1:87:0e:52:d6:01:cc:87:1a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=001e2aca1f86166ff87c222c716a480458f429e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:1b:da:d8:c1:0e:b8:78:73:4d:43:ed:0c:
74:6e:da:4a:f1:74:65:8a:75:7d:9d:ff:78:8d:7c:
54:89:45:d0:fa:fe:cd:96:d6:de:ea:30:7d:ea:09:
09:48:f5:cb:ce:2a:83:32:7b:53:52:10:dd:46:e8:
b5:99:aa:94:f1:ad:5e:31:64:e1:31:de:01:fa:5c:
24:22:65:53:72:8a:a7:64:3e:16:56:ea:59:a2:c4:
b5:9e:d4:b4:1f:9f:4b:60:90:9c:c4:b6:2a:60:da:
f4:83:d6:ce:50:40:1d:a1:de:0d:08:00:7a:99:af:
ac:96:2b:24:4a:44:49:1f:f1:1c:39:cb:bf:80:02:
e9:b7:63:7d:67:15:94:6e:36:2c:3d:1e:e5:0f:18:
27:15:a6:5a:bd:7e:26:bb:92:48:3c:d0:4b:3d:a5:
76:35:2c:1b:45:55:9c:1a:b5:3f:85:ae:7d:82:e3:
73:8c:f2:03:ed:35:73:08:96:f9:c9:c1:e1:b0:ea:
d3:aa:77:f3:a5:96:24:cb:82:1f:d7:95:5f:8d:50:
a3:95:87:a0:36:09:e3:fd:45:87:bd:d6:01:94:7b:
b1:4e:8e:e2:c6:ae:80:06:ab:0c:c5:ce:6f:34:ca:
8f:c0:3d:1f:52:61:f0:b7:2a:1c:c7:b8:ae:13:64:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:2A:CA:1F:86:16:6F:F8:7C:22:2C:71:6A:48:04:58:F4:29:E9
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/AB4qyh-GFm_4fCIscWpIBFj0Kek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:3b:53:b8:64:6d:25:ce:d0:cf:42:ef:75:ca:91:63:23:3b:
79:b2:72:86:7f:79:f2:3b:54:a1:67:de:48:9a:1e:6f:e6:3d:
35:f0:13:d6:35:fc:f9:a6:52:59:a5:ed:45:b3:88:ee:32:42:
68:d1:eb:d2:88:12:56:da:e7:05:c5:e9:e0:72:72:35:b7:b3:
62:0c:48:9e:a5:d0:3a:15:02:d0:d3:ce:c4:5b:56:0d:0c:c1:
10:48:00:c6:17:7c:2a:03:b5:03:3c:0d:b6:ff:29:48:b5:be:
97:06:20:93:2a:6d:a2:a5:d5:c0:c7:cd:06:80:dc:dd:3c:94:
58:09:25:26:d3:1b:41:c8:96:d8:12:d1:a1:82:46:43:29:9c:
5c:eb:f7:64:23:c9:da:3c:38:d0:db:7f:14:01:ae:00:89:da:
c4:4d:ff:c4:5e:df:73:b0:69:43:0c:5d:6a:ba:38:73:10:2b:
e3:8d:05:9f:3a:a3:90:88:e3:55:5d:f0:79:2c:8a:12:9b:9b:
34:de:6e:84:56:dc:5f:4d:6d:10:ba:93:48:9d:23:8d:1e:cd:
b7:9c:dc:a3:64:95:82:08:8c:52:01:94:d1:16:eb:91:c1:06:
a6:7a:eb:43:80:2f:31:dd:04:53:ad:9f:77:b8:64:b2:72:3a:
c8:60:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net