Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/_3URjmHxdeAClYJBPx5hMe6tQL4.roa
File: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (raw, json)
Hash identifier: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=
Subject key identifier: FF:75:11:8E:61:F1:75:E0:02:95:82:41:3F:1E:61:31:EE:AD:40:BE
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 01942143DA460BFEBF586C44BF99B6AE4D8C
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/_3URjmHxdeAClYJBPx5hMe6tQL4.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201228
IP address blocks: 193.247.208.0/24 maxlen: 24
193.247.209.0/24 maxlen: 24
193.247.210.0/24 maxlen: 24
193.247.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:da:46:0b:fe:bf:58:6c:44:bf:99:b6:ae:4d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff75118e61f175e0029582413f1e6131eead40be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:d7:16:32:b5:dc:6f:8f:6f:30:b2:74:35:
73:c4:08:0b:6c:59:0f:36:09:f2:2d:b4:e2:d4:24:
9d:ac:ee:2e:cf:c1:f6:01:fe:a4:65:e0:a9:ea:09:
ab:dc:d7:90:48:54:92:df:2b:34:30:88:f0:03:c0:
aa:54:c0:e9:33:87:5b:74:39:21:e8:55:f8:48:8c:
88:10:df:e4:96:e2:08:3c:ff:88:60:2d:9d:68:66:
b6:ee:d9:a8:e4:02:31:ea:5a:8c:3e:81:69:cc:62:
cb:15:9b:29:c6:35:be:13:de:cf:a7:cb:0f:45:b4:
70:83:f4:ef:91:39:17:1c:ae:9d:f7:ae:af:e0:12:
00:c5:7c:a6:59:c2:94:21:fb:8d:23:4e:b2:44:64:
d1:89:ef:b2:1c:05:bb:7d:8e:a9:7a:07:dc:ae:6d:
3c:c7:08:f1:6e:90:f2:42:ca:45:67:2e:7e:4a:61:
23:ce:36:0e:52:47:38:46:30:6c:0a:c5:52:aa:88:
8b:08:0e:11:b2:6c:f9:ce:ea:70:5a:d1:5d:64:9c:
f8:c5:4c:72:1f:c1:3c:a1:78:af:96:cb:ce:5c:51:
62:06:3c:92:b0:21:81:67:e1:60:60:7f:ae:5f:7b:
31:8d:0a:39:ed:53:d6:4e:6d:1c:a3:19:40:bb:1b:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:11:8E:61:F1:75:E0:02:95:82:41:3F:1E:61:31:EE:AD:40:BE
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/_3URjmHxdeAClYJBPx5hMe6tQL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.208.0/22
Signature Algorithm: sha256WithRSAEncryption
17:25:88:1d:95:85:a1:6f:fc:a2:89:7d:d8:29:25:ee:e7:6b:
05:14:98:76:6e:a1:5d:f1:dc:a1:c5:65:08:28:fd:32:21:7b:
dc:f9:59:5e:e9:43:70:f9:da:dc:dd:e7:41:58:7a:e5:eb:f5:
88:52:37:81:6b:4d:d6:b9:84:42:96:70:36:5b:8c:0e:9e:eb:
78:40:82:4c:62:a9:cd:3a:47:ec:9e:1c:05:b6:64:e6:60:c7:
87:76:9b:fc:70:5a:3d:02:3d:bc:43:fc:5e:22:c3:a8:6f:ef:
7c:cd:4b:c8:05:cd:d5:61:74:9b:d5:99:24:88:d7:9a:24:f7:
6b:c9:32:b1:ca:23:0c:75:de:43:4e:3f:20:8f:26:7c:5a:7a:
53:54:31:80:8d:53:f3:31:34:9a:ef:c6:44:f0:37:44:40:a5:
e1:54:6b:12:87:26:bd:18:c3:df:fe:44:c4:32:3e:4e:f6:bd:
6c:34:8d:4e:ca:c4:b5:0c:ba:3c:f5:af:b9:f1:8d:33:6a:8e:
85:d6:50:3d:88:23:49:f1:26:2a:cd:34:c5:1e:74:08:8c:2e:
13:67:13:31:7d:e2:86:98:d1:44:5c:1e:aa:28:e8:3a:4c:31:
7f:a0:49:ad:e3:0e:e1:df:c5:80:3f:07:3a:63:64:80:20:79:
ae:e4:b9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net