Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa
File: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (raw, json)
Hash identifier: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=
Subject key identifier: E2:1B:14:A9:B7:79:2C:EE:03:E9:F9:E1:3B:9A:A7:87:BC:A1:AA:23
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 019423D6F4856C89213AC9A10F7AF8ED7CDC
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58039
IP address blocks: 193.135.15.0/24 maxlen: 24
193.135.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f4:85:6c:89:21:3a:c9:a1:0f:7a:f8:ed:7c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e21b14a9b7792cee03e9f9e13b9aa787bca1aa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:28:6a:74:6d:fc:51:1f:6a:aa:22:5b:43:89:
e9:e3:a5:f3:03:f6:ed:b8:f6:27:32:50:f7:d6:98:
bf:5f:6b:8b:24:32:8d:90:64:f2:27:07:fb:e3:ad:
cb:af:81:7c:38:4c:90:f4:dd:2e:ae:3d:57:a8:9e:
01:23:43:a3:d0:00:32:7c:59:13:86:99:9a:33:01:
c4:8f:30:7a:a4:66:4d:2b:fd:f2:e7:b1:fd:65:2f:
e3:03:71:c5:96:f3:cc:bb:5b:1a:94:4c:d0:41:cd:
6c:5f:14:64:f9:de:6c:36:24:58:91:c6:3a:a3:05:
79:0e:8e:10:f6:88:f3:79:7e:07:99:ed:b5:80:37:
d2:cc:43:62:90:e2:71:01:1e:b5:39:6e:c3:ce:84:
33:d5:0b:76:09:75:f2:2a:82:68:6e:74:be:0d:69:
bb:24:8f:a6:06:19:ef:e6:3e:51:af:03:9e:14:5b:
e6:3b:63:61:06:88:5b:2a:3f:1f:66:53:0c:34:8c:
5d:cc:e8:06:73:e2:00:33:5c:da:ef:1f:72:82:de:
5d:3b:ee:6f:50:3b:56:03:62:52:e9:84:b8:a3:ab:
51:d2:08:43:1e:ba:33:8b:38:fd:3a:27:9a:ca:4d:
82:e5:1f:d0:e0:3e:57:60:05:86:56:4d:b4:c5:e9:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:14:A9:B7:79:2C:EE:03:E9:F9:E1:3B:9A:A7:87:BC:A1:AA:23
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.15.0/24
193.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5a:86:5e:40:09:02:f7:8d:8b:5e:20:a9:c7:ac:6e:9d:55:
a5:eb:f4:31:6b:e1:55:d3:d1:e7:cd:39:c2:91:db:3b:a9:ae:
1d:66:96:c7:fd:7e:a0:20:b2:24:38:b8:7d:ae:d4:ec:7d:e4:
66:9d:ce:ec:af:2e:5b:d2:71:91:87:19:01:7e:97:3b:2e:24:
b5:4f:c5:3f:c2:3f:6f:6a:07:c2:65:67:ad:fc:6c:f1:b8:01:
a8:cc:56:fd:13:ad:21:dd:14:f9:59:be:e5:6d:0d:0a:b3:1c:
6c:78:fb:42:24:29:9c:94:8b:c2:2c:4b:28:08:a1:18:4d:65:
90:7f:3d:ac:be:2d:06:51:1b:7b:48:1f:39:11:19:d4:f9:be:
a2:c1:fd:44:2c:74:c6:b1:12:f7:26:04:7a:35:9d:79:43:68:
8c:60:39:69:c0:91:cd:ed:96:bb:73:51:7c:da:de:3f:7a:dd:
a4:cf:50:0d:06:24:30:07:dc:bb:5f:d7:b3:75:e5:b0:d6:d3:
0e:22:bb:77:0f:20:47:d0:5d:fd:cc:6b:fa:3a:48:af:ce:8f:
e8:00:4c:ed:ea:3d:10:53:d8:01:66:83:65:e2:8e:1e:08:d3:
9e:c8:68:c1:4d:2a:2f:f0:7c:96:34:65:8c:fe:74:3f:58:1a:
23:34:3f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net