Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa
File: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (raw, json)
Hash identifier: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=
Subject key identifier: 1A:26:B9:A8:99:F1:91:34:17:66:FF:78:D8:FC:A0:FE:AC:F4:22:3C
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 019422FBEAA576D72F1ECD79BEF1F44A42A0
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210917
IP address blocks: 167.94.24.0/24 maxlen: 24
193.30.116.0/24 maxlen: 24
2a13:4b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ea:a5:76:d7:2f:1e:cd:79:be:f1:f4:4a:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a26b9a899f191341766ff78d8fca0feacf4223c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:87:d3:b7:04:d5:bf:9e:59:76:71:67:4d:
cf:f3:4e:c9:2e:eb:c9:ab:84:e7:59:fb:38:3f:a9:
c7:79:03:1c:62:54:f4:1d:93:e7:be:8c:08:02:50:
d6:c8:74:0e:47:9d:7a:71:0e:e3:79:43:86:61:a1:
8d:fd:b2:17:e7:b6:bd:31:57:74:50:49:e6:6e:8f:
16:af:40:48:0c:da:20:4e:c8:32:70:3e:09:28:ac:
94:ee:b1:00:8f:40:e2:0f:79:4e:74:22:9a:05:07:
5f:2a:b8:b7:42:a5:7d:6d:3a:da:eb:f5:9f:c9:fd:
9d:c9:19:f6:49:33:76:80:25:e2:84:cf:3c:59:d3:
86:19:0c:22:03:12:45:f2:d6:46:41:70:41:d4:90:
f3:fa:89:57:20:50:98:47:25:1c:e3:93:da:d9:ef:
d4:5e:73:43:53:fd:3f:40:0e:34:a8:80:3b:c9:a2:
e7:9a:70:54:2d:e4:c1:27:0b:6a:b7:a9:f4:cc:fd:
d9:54:1a:1e:66:30:43:97:be:4b:91:b2:f2:6d:4f:
dd:3e:c8:3a:1b:df:4e:b1:56:a5:b4:89:a8:77:18:
0f:b9:39:86:ba:27:61:95:a6:4a:9f:b2:c7:f0:e0:
8c:72:c4:9f:2d:e6:0b:45:b9:48:bf:7e:45:8d:d8:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:26:B9:A8:99:F1:91:34:17:66:FF:78:D8:FC:A0:FE:AC:F4:22:3C
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.24.0/24
193.30.116.0/24
IPv6:
2a13:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
01:49:68:4c:21:0f:c0:82:07:88:f0:35:09:f4:b8:4b:b3:4c:
1a:29:d3:60:b9:a1:bf:1c:cf:68:dd:93:a5:13:8a:73:48:85:
b3:1c:78:fb:fb:33:c5:01:37:64:c8:58:f3:56:b5:be:c6:9f:
4c:b4:60:d6:56:27:f4:83:5b:04:50:10:e4:f3:ef:c4:e2:d8:
03:ae:8c:f4:c7:ff:97:db:6e:60:f0:08:2f:e1:42:f5:34:6e:
bc:81:c4:c5:41:8e:b4:26:c7:72:c2:76:e3:d0:1a:fc:52:87:
35:d5:d3:1e:a1:ec:ae:b9:2e:f3:6e:6b:70:1a:1c:d6:b7:fb:
21:f0:42:ef:bb:93:b4:8e:33:32:e1:82:8b:56:72:68:48:07:
0d:07:ff:78:49:da:10:23:1e:0a:82:8c:05:da:98:f8:b4:ac:
8b:de:5d:33:36:f0:56:e1:de:5d:fa:b2:b1:0f:4a:a4:cd:65:
e1:06:4c:55:a3:54:cb:a6:83:20:3b:db:b9:88:67:b3:56:06:
89:31:42:b0:d6:b2:d6:fa:03:01:bd:8a:84:a1:3d:96:b6:4a:
e3:a0:83:12:10:f1:bb:3c:f9:93:68:40:df:c8:c3:49:de:05:
72:c6:54:8b:6c:ef:9d:3c:5b:b2:2f:c4:f6:b2:4e:93:b4:6c:
ce:1a:0b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net