Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/FzL4SlSs_uFjHZS5YX5ero2HyWw.roa
File: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (raw, json)
Hash identifier: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=
Subject key identifier: 17:32:F8:4A:54:AC:FE:E1:63:1D:94:B9:61:7E:5E:AE:8D:87:C9:6C
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 0194221FC6D904184B42E4614746256D81A3
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/FzL4SlSs_uFjHZS5YX5ero2HyWw.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210145
IP address blocks: 193.168.58.0/23 maxlen: 23
193.168.58.0/24 maxlen: 24
193.168.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c6:d9:04:18:4b:42:e4:61:47:46:25:6d:81:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1732f84a54acfee1631d94b9617e5eae8d87c96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:e7:03:ae:04:a2:34:ec:00:82:f7:02:7c:
d5:32:66:eb:dd:8a:de:a4:a8:d2:ec:88:84:38:80:
7f:bc:04:6b:d3:bb:15:cc:a2:01:f0:fa:bf:d2:07:
48:c8:eb:70:00:3f:02:08:b4:f6:f0:aa:15:7f:28:
51:fc:b5:c4:e4:8e:22:7a:64:83:bd:d6:c6:e2:6b:
cc:ef:ca:28:80:b6:e5:c6:0f:f8:56:77:50:16:3d:
4f:f5:92:2c:90:e0:04:96:f0:fa:7d:b2:4e:87:c0:
c6:45:2b:bb:c2:e8:af:9b:63:b1:19:31:6d:57:4b:
64:3b:94:ee:8f:88:81:37:fd:5c:d0:01:8e:ad:93:
70:c7:9d:c8:91:fe:af:64:4b:52:ae:7a:d5:50:b8:
aa:26:16:bb:f8:0e:ef:d2:7e:bd:20:4d:94:10:89:
6f:c1:1a:7a:76:47:da:ac:4f:b2:33:f9:4b:38:00:
22:86:b2:3c:96:a9:07:13:1f:b1:46:56:dd:cd:fe:
ed:ec:9c:ee:7c:af:8b:e8:5c:62:52:0b:1f:51:70:
b9:e7:75:03:d6:ba:06:aa:84:33:07:d9:8b:ef:0a:
e2:9e:50:e3:bf:fa:65:2f:91:85:19:41:57:1d:b2:
7e:59:72:2b:2d:80:32:af:9e:4f:f3:58:3d:38:a7:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:F8:4A:54:AC:FE:E1:63:1D:94:B9:61:7E:5E:AE:8D:87:C9:6C
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/FzL4SlSs_uFjHZS5YX5ero2HyWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.58.0/23
Signature Algorithm: sha256WithRSAEncryption
52:95:a1:6a:27:7c:f4:56:f5:df:8e:41:54:db:fd:e1:3b:22:
ea:d1:52:fd:74:09:76:3b:9c:b8:bb:86:fc:6f:fd:78:d5:46:
30:56:4a:4d:03:8c:12:e1:83:9c:cc:17:68:2d:f4:34:58:06:
90:f2:e9:18:a4:cf:8e:95:cf:a6:fa:0b:70:9c:6e:14:34:59:
21:9a:08:57:f1:62:74:08:da:0c:5e:fb:5a:73:6b:41:6d:dc:
89:d4:eb:a8:a2:93:27:77:80:d5:a5:e1:6a:2e:d5:0c:af:42:
55:45:ca:0f:a7:be:c9:6a:4e:26:a1:71:d6:d7:6b:1f:00:d0:
aa:c1:84:22:6b:80:8b:26:de:2d:dd:ec:ed:a0:0a:a6:e9:6b:
67:45:2e:25:ea:9f:b4:e9:51:75:d3:32:24:21:36:30:05:b2:
e3:75:39:6c:fd:f0:d1:e6:4d:6b:0a:da:eb:ba:cf:2c:87:3d:
d0:24:b0:33:8c:cb:04:e3:75:2b:43:e3:84:07:d7:0c:fc:f2:
e5:83:a3:25:cc:aa:29:da:d2:82:bc:d7:14:e4:0c:e2:97:90:
f1:65:57:ca:b9:aa:94:e5:2b:60:25:56:7b:49:68:ca:09:46:
26:94:ed:ae:c1:39:5b:83:1d:3d:9b:a5:2e:f9:3c:01:78:af:
d5:e0:e7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net