Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa
File: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (raw, json)
Hash identifier: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=
Subject key identifier: 8B:7B:AD:72:D4:B0:5C:9A:D2:92:07:79:4D:BA:79:22:A9:25:A3:E6
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 01941FFA94B7749A1A6F6E60E8BDAFDE6F5A
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47214
IP address blocks: 193.34.197.128/25 maxlen: 25
193.43.0.0/26 maxlen: 26
2001:7f8:6d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:94:b7:74:9a:1a:6f:6e:60:e8:bd:af:de:6f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7bad72d4b05c9ad29207794dba7922a925a3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:c8:76:c0:95:32:7f:b9:65:09:59:04:a9:
e1:12:3a:34:e6:bb:8e:2a:86:ee:9c:38:73:5e:45:
0c:3e:53:de:97:4a:c5:9a:48:41:95:80:d1:36:15:
6e:9d:d9:82:47:04:ff:88:a0:c2:b8:9e:15:36:5e:
5c:79:78:eb:dd:28:ca:6a:e7:70:a4:85:96:5b:a8:
c9:98:5a:ea:7e:e2:9b:ac:ee:93:1e:ad:73:84:86:
1e:3b:24:43:dd:10:e3:60:3b:4f:fb:0b:12:05:b6:
0e:3f:ad:3d:23:6d:97:89:91:02:a2:ee:cf:07:bc:
3a:c5:75:32:11:b1:f1:8c:49:b0:50:17:42:5c:bb:
e9:48:00:a8:6f:e3:5c:4e:b1:19:7d:be:bd:86:09:
d7:4d:75:4a:c8:84:ca:b9:9f:41:91:47:9e:b2:81:
15:1f:db:26:8c:e3:68:c8:ee:cd:6f:95:ad:6c:ec:
19:f1:a8:58:b5:2c:71:3c:07:b9:72:db:f4:ce:47:
1e:c0:a1:0d:c3:48:a5:df:29:2b:d5:b0:8c:a2:ca:
8b:06:75:b1:f8:75:35:01:34:dd:e2:2f:07:e9:a4:
f8:9e:a9:b9:3b:5b:72:d0:c8:c9:99:ad:03:b5:16:
d5:45:c5:f4:32:1a:e4:31:f4:80:74:8b:ea:d3:a6:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7B:AD:72:D4:B0:5C:9A:D2:92:07:79:4D:BA:79:22:A9:25:A3:E6
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.197.128/25
193.43.0.0/26
IPv6:
2001:7f8:6d::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e4:77:e8:1e:99:b8:ee:b9:d6:17:df:64:6d:44:23:4f:d0:
ed:61:47:06:50:5d:96:17:c8:d9:f3:da:b5:c1:79:26:49:fb:
0b:fa:ce:0c:d7:26:8b:44:d1:67:30:43:53:5d:ef:b9:26:be:
48:75:b0:52:14:0e:4e:e5:3c:84:77:83:b9:1f:e1:55:40:76:
e4:99:31:b1:15:a1:5b:49:92:c6:74:da:ce:6e:24:1e:59:1b:
a5:26:cb:29:fb:1b:eb:51:78:3b:84:1f:80:08:97:69:74:0c:
7a:fd:d6:a4:24:5a:a7:e9:52:74:47:11:2c:96:32:21:b2:80:
54:b1:14:5b:09:24:db:ad:f0:63:84:db:0b:b5:6a:97:5b:47:
d4:b0:cd:61:8a:d9:dc:5d:c2:62:7b:78:4c:ad:cc:99:35:e7:
84:2c:e9:f2:28:11:26:d9:a8:b3:21:5d:6a:86:78:f7:ff:5e:
b8:fb:1f:65:44:f2:6f:fb:a2:6e:82:f0:2c:9a:23:6d:9a:50:
70:ef:c3:d2:91:f6:0a:98:21:93:08:f6:e9:f1:6a:61:dc:5c:
0c:64:db:40:a4:2f:91:19:87:1a:03:6e:9e:06:77:07:93:1e:
b1:69:1b:3a:64:fc:76:9a:54:d7:de:79:38:3d:e6:32:a9:1f:
ce:5c:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net