Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/Yk_mB5Br41Nhda13vL3dksE5LgU.roa
File: Yk_mB5Br41Nhda13vL3dksE5LgU.roa (raw, json)
Hash identifier: K0LuZJCRzNJs5Bjbkimkjj4nwWKGnFgBw0hG+qjP3AM=
Subject key identifier: 62:4F:E6:07:90:6B:E3:53:61:75:AD:77:BC:BD:DD:92:C1:39:2E:05
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 019425216FA11B499283D3A0430EA0F389A4
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/Yk_mB5Br41Nhda13vL3dksE5LgU.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207143
IP address blocks: 193.135.56.0/24 maxlen: 24
193.135.58.0/24 maxlen: 24
2001:678:e44::/48 maxlen: 48
2001:67c:3d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6f:a1:1b:49:92:83:d3:a0:43:0e:a0:f3:89:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=624fe607906be3536175ad77bcbddd92c1392e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:ac:52:92:20:c3:c7:a6:83:ad:6d:18:23:
2a:01:34:03:6f:a1:e9:31:af:3d:2d:47:52:4d:77:
04:68:74:f3:8d:06:78:52:59:0b:2a:9b:df:5d:42:
70:2d:5b:32:d2:b7:0e:8f:3b:0e:20:37:8c:d5:77:
ea:53:97:f1:4d:98:62:b8:03:f1:8b:04:10:8e:e3:
87:9e:8f:19:38:35:1d:1b:fe:f1:3a:df:31:37:4c:
47:b7:3d:e6:74:a9:c2:18:b9:9f:49:e8:bc:54:49:
90:70:a5:6c:58:e9:dd:72:a7:42:59:0e:43:16:60:
dd:5f:04:55:cb:80:29:43:6e:aa:43:d3:2b:f9:42:
3f:b0:25:b7:46:20:7a:64:b7:a8:f2:2d:59:3b:80:
f7:41:16:7e:34:5e:11:41:60:82:50:48:70:54:6d:
51:d2:58:26:6f:51:74:c2:72:c8:b3:b5:2f:d2:a0:
3a:43:c5:27:9e:cd:ef:bd:e2:25:f9:eb:67:e2:cf:
5a:7f:6d:cf:1d:4f:c1:0a:c1:76:dc:d8:fd:d2:a2:
22:53:91:b2:a0:e9:b5:d9:64:42:c0:26:f7:ff:77:
a1:11:e6:04:ef:59:ed:48:c9:f7:9c:c6:5f:98:f6:
d9:99:8a:e4:ef:5f:eb:d9:60:34:77:f2:e5:48:cd:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4F:E6:07:90:6B:E3:53:61:75:AD:77:BC:BD:DD:92:C1:39:2E:05
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/Yk_mB5Br41Nhda13vL3dksE5LgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.56.0/24
193.135.58.0/24
IPv6:
2001:678:e44::/48
2001:67c:3d4::/48
Signature Algorithm: sha256WithRSAEncryption
14:7a:80:2f:3c:b8:23:94:9a:9c:70:09:62:77:82:95:f2:eb:
77:6f:5e:81:6a:08:43:b8:d4:55:65:28:2d:4f:20:5b:13:53:
9b:b7:5a:bb:7c:fb:76:32:4c:27:c4:d4:da:dd:a6:a5:51:c8:
a3:47:7f:7e:65:58:28:6a:2a:ad:95:5c:66:96:16:6c:fe:b6:
1d:a5:09:67:89:38:ae:20:a3:6d:87:41:ff:0e:26:c2:c9:0f:
39:6b:dc:f8:a4:0d:44:83:a3:9f:02:d9:84:32:d3:6b:4a:37:
44:7f:be:75:00:96:71:34:a0:d7:51:1c:27:4a:7e:ec:83:0c:
c1:26:29:75:f6:cd:cf:aa:db:ae:6e:45:39:6f:0b:6a:57:80:
ec:06:98:70:9b:d9:b8:17:a3:c6:07:f3:83:8e:39:a5:ad:07:
a6:f9:25:65:70:d3:d5:3b:99:0a:64:74:2d:03:dc:12:e3:ef:
fe:3f:15:f3:d8:38:9b:3b:c4:06:38:80:d8:01:d8:e5:2f:89:
0c:36:46:ba:f3:b1:ff:a0:eb:ac:5e:0a:cc:ec:47:02:36:51:
8d:c2:e8:54:31:55:2f:98:cc:cc:20:bc:4d:79:a4:0a:b5:9f:
ae:49:c8:e3:b1:d7:53:be:fd:50:b5:16:58:a2:e1:c8:bb:6f:
86:49:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net