Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/q5t8pCbXocy8z93aEyQcoKIUr7k.roa
File: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (raw, json)
Hash identifier: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=
Subject key identifier: AB:9B:7C:A4:26:D7:A1:CC:BC:CF:DD:DA:13:24:1C:A0:A2:14:AF:B9
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019423D7535A6FCC350A72F017924702261D
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/q5t8pCbXocy8z93aEyQcoKIUr7k.roa
Signing time: Wed 01 Jan 2025 21:48:21 +0000
ROA not before: Wed 01 Jan 2025 21:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199611
IP address blocks: 194.140.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:53:5a:6f:cc:35:0a:72:f0:17:92:47:02:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 21:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab9b7ca426d7a1ccbccfddda13241ca0a214afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:75:3a:ad:15:ee:28:fc:94:c0:a7:e4:f3:
da:16:c1:bf:5f:9e:9c:ea:56:2f:80:eb:5e:ce:2c:
47:6e:2c:a4:af:9d:09:52:78:0c:cd:95:39:a7:98:
e2:ca:e6:33:3e:33:33:84:c9:d7:7a:58:2a:f3:94:
2b:35:d7:4a:91:e8:bf:0a:6c:4d:cf:71:3a:43:89:
a9:cd:c9:bb:18:c3:4a:f8:2e:5e:c6:ed:15:58:83:
28:fc:0b:c0:8e:2f:18:37:9d:6d:ca:47:92:51:51:
50:66:51:64:b2:66:dc:89:ee:23:db:83:30:ca:d2:
10:0e:22:cd:85:61:c9:29:50:01:bb:fa:c9:f1:9d:
90:2d:22:1d:91:5e:ca:63:c2:c3:88:69:3e:c3:93:
91:80:c4:38:f1:52:fe:43:3e:47:f0:c4:ea:8b:0c:
c0:26:7f:af:55:3c:ab:87:15:d3:7b:de:d1:61:e9:
99:67:b8:3f:a7:a4:de:5e:9b:83:22:e2:6a:9a:57:
e3:e2:3d:bf:aa:b8:a6:01:68:21:64:06:d9:59:69:
bf:41:24:30:b0:03:ee:83:f9:0a:fc:92:6d:0a:6a:
bd:86:17:70:8d:8a:99:70:87:87:22:79:ff:88:08:
3e:f6:db:3f:d0:7d:5e:fd:2f:d8:de:a6:ed:56:57:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9B:7C:A4:26:D7:A1:CC:BC:CF:DD:DA:13:24:1C:A0:A2:14:AF:B9
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/q5t8pCbXocy8z93aEyQcoKIUr7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.135.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d4:2a:33:89:f7:79:74:86:21:f3:a7:09:6a:ea:08:c5:e3:
96:45:59:aa:72:ca:f6:ea:7d:37:22:bc:7e:fb:75:b8:23:64:
d3:23:38:c0:bf:b6:19:3b:98:77:86:64:9d:b6:26:96:ab:36:
a6:14:9e:0c:61:c5:3b:8a:bf:57:e1:24:46:bd:ca:3c:ba:2b:
bc:52:5e:fe:74:26:8c:26:ce:b5:15:07:f3:3b:11:bc:e2:b5:
ff:46:58:a6:cb:e0:df:d9:86:24:6f:2f:ff:46:3e:30:96:e3:
3e:53:58:01:8c:3f:83:60:bf:22:70:f5:84:62:6e:a8:6e:e7:
30:39:69:28:3d:96:33:b9:d0:2d:61:29:17:7f:59:5c:86:ef:
4c:1d:0f:47:52:b9:0a:28:a2:0e:e0:54:e2:58:80:e5:2a:7d:
5c:73:b9:8a:76:ae:8b:4d:62:8c:6b:4b:fa:7a:ba:83:9d:7b:
3b:02:f1:1c:2c:e1:64:e4:2d:ca:82:09:48:40:5f:ed:19:31:
2b:7c:66:a6:f6:1e:80:36:5e:4f:9a:27:0e:05:a0:65:f2:67:
69:c8:41:ae:81:16:1a:92:62:42:1b:b7:d6:cd:c3:91:4f:84:
b6:9d:18:b1:4c:48:a9:de:98:5f:4c:fc:82:de:c7:c6:0b:e9:
ab:ef:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net