Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa
File: nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa (raw, json)
Hash identifier: Y4OxWT9eJWsPkC/UoZ21OhHIIi+5C+/UxC4w6spkzhk=
Subject key identifier: 9D:04:67:1E:AE:E1:FC:99:C5:4B:F8:E8:64:5D:19:32:E6:67:7E:3E
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 019423D78923D27270A4D8250B7928931C2A
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa
Signing time: Wed 01 Jan 2025 21:48:35 +0000
ROA not before: Wed 01 Jan 2025 21:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198009
IP address blocks: 193.201.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:89:23:d2:72:70:a4:d8:25:0b:79:28:93:1c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Jan 1 21:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d04671eaee1fc99c54bf8e8645d1932e6677e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:db:f8:ab:fe:ad:0c:ff:9e:91:f8:e6:b6:
72:d4:ef:43:c2:1a:ae:0a:f8:b3:4b:9f:0d:8e:e4:
60:1c:d4:81:7f:8d:1a:c3:5c:e6:04:71:7b:fa:ed:
99:35:27:10:d2:06:a8:8b:12:32:69:e0:a3:d1:4d:
99:b6:0b:2b:14:9a:4f:10:cb:64:02:ae:be:bf:93:
bd:77:ca:f3:1a:a4:f1:46:8a:0b:3f:5d:76:4a:15:
d0:1f:87:53:2c:70:3d:3a:b2:33:f1:47:de:37:48:
23:b9:89:18:b6:e8:59:a9:cc:ae:2a:0a:f5:2b:d8:
de:76:00:73:dc:24:86:df:52:db:03:95:a7:13:e6:
75:68:21:73:7b:f0:a4:84:9b:07:05:ad:3c:d8:54:
9a:80:3d:56:fc:38:d4:61:0f:6c:61:2f:cb:4c:1b:
f8:a2:d8:4d:3a:ca:6f:f7:58:29:79:db:dd:99:22:
16:67:fe:48:b9:d2:dc:d8:e1:6a:2c:50:1a:c8:e3:
8c:1d:dc:f5:d5:dd:0b:e0:bb:68:7a:98:6d:d1:b7:
00:cb:a1:96:bf:b9:9c:46:b8:cc:11:05:dd:37:85:
b0:71:3c:b2:f9:26:01:48:48:39:14:6b:e3:97:bd:
8b:c5:20:67:47:cb:b4:9f:6f:4d:34:fb:61:33:77:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:04:67:1E:AE:E1:FC:99:C5:4B:F8:E8:64:5D:19:32:E6:67:7E:3E
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.32.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:95:e9:3f:3c:76:4b:3e:05:7d:2b:91:be:5d:8d:0b:da:5a:
cc:8d:dd:dd:2f:f6:9e:5f:8d:21:3d:a4:68:1c:54:87:74:42:
d0:8a:26:20:8d:42:b6:ba:55:ab:f6:2e:3f:c9:9a:65:66:cf:
70:c2:9c:34:e8:8d:67:fd:e0:7f:42:80:d3:8f:de:82:d7:10:
b9:4b:dd:b3:7a:de:14:12:30:c5:fb:c8:b5:0e:c3:e8:03:c1:
e0:14:a1:9e:29:19:5f:53:72:d2:ec:fa:78:ac:8d:bd:b2:bc:
1b:b4:3f:63:15:e7:cd:ed:60:98:e9:d5:6f:ef:84:6e:cd:4d:
1a:79:e4:a5:d9:81:00:ba:c8:27:68:07:52:a3:9d:08:8c:80:
5b:66:c0:65:b4:7f:27:00:d8:77:48:46:2c:22:0c:44:10:02:
ca:cb:17:20:41:d4:ca:46:0c:3c:dc:36:cf:57:c5:45:1e:b6:
38:1a:dc:be:3e:2f:6a:34:05:56:00:65:46:6d:5c:d2:9e:90:
62:d0:4a:5f:a5:96:c9:46:6d:05:18:15:0b:e6:d9:17:cf:69:
61:08:5d:d1:7d:11:99:61:c9:51:c5:04:2b:27:9a:c7:ac:16:
77:3d:df:ea:f9:c5:1a:98:fc:ed:d4:54:dc:35:29:d4:19:b1:
12:f4:92:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net