Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/BI17rjABA76SOlvogh6SdQMJxIo.roa
File: BI17rjABA76SOlvogh6SdQMJxIo.roa (raw, json)
Hash identifier: pnRs5Mj2fHfyWrcxdf27va/C0JvgLkooHE205X5FWag=
Subject key identifier: 04:8D:7B:AE:30:01:03:BE:92:3A:5B:E8:82:1E:92:75:03:09:C4:8A
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 0194472D9C489E6F34060056FD8B50435C9C
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/BI17rjABA76SOlvogh6SdQMJxIo.roa
Signing time: Wed 08 Jan 2025 18:29:18 +0000
ROA not before: Wed 08 Jan 2025 18:29:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215082
IP address blocks: 194.104.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:2d:9c:48:9e:6f:34:06:00:56:fd:8b:50:43:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Jan 8 18:29:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=048d7bae300103be923a5be8821e92750309c48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:c9:68:64:70:bf:49:36:80:34:63:3e:10:
5c:96:3d:33:d7:5f:f2:ed:62:f8:8e:88:89:41:c9:
29:f1:81:e1:27:fc:12:92:f9:05:62:d6:8f:a1:1a:
9b:8a:95:ee:58:06:24:12:c1:62:8a:28:08:19:26:
fd:77:c6:1c:0a:83:ec:66:42:f3:47:d5:df:87:e8:
99:fa:da:c0:c5:44:72:d4:a1:26:38:af:06:f1:7f:
7a:a0:3f:01:7c:36:c4:98:3b:ee:83:dc:40:b0:62:
85:37:b8:55:6a:65:3e:11:6c:ad:e5:5a:f5:ff:9b:
3a:35:30:04:c1:11:8a:4a:2f:0b:29:86:10:d8:35:
b2:ec:66:9d:eb:06:d2:bf:57:a7:fc:dc:2a:b7:92:
60:27:75:2a:c3:6a:50:f3:29:96:0c:7f:80:04:da:
4d:5f:29:7e:93:d4:41:5c:72:d9:15:2e:d4:23:de:
78:18:11:6a:6b:61:f4:b3:bf:bb:f1:ad:07:5b:9e:
66:15:73:b5:ec:28:34:41:ab:90:0e:1a:1d:aa:4f:
eb:83:ec:e8:b7:bf:bc:d4:64:75:15:55:b9:8c:e7:
f0:da:8f:c9:e9:be:74:f2:b4:e1:84:a3:63:0c:6c:
bf:10:5a:2c:79:48:e1:55:a5:74:48:9c:39:be:bf:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:7B:AE:30:01:03:BE:92:3A:5B:E8:82:1E:92:75:03:09:C4:8A
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/BI17rjABA76SOlvogh6SdQMJxIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.235.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ae:f3:ae:5f:32:f6:30:21:95:ed:60:df:a0:da:44:24:eb:
45:69:93:27:38:7b:e6:08:94:c9:4c:63:60:ac:87:41:07:86:
45:8d:c7:a3:00:96:cc:4a:ed:39:8f:11:9b:66:73:51:f4:ed:
65:95:05:30:77:b6:a7:e3:57:75:1a:57:e1:8d:4b:6d:22:ff:
6e:6e:23:7f:c8:2d:19:f8:9f:e6:e4:34:b4:b1:40:29:9d:5c:
73:e7:fc:b0:34:0e:a6:b1:e5:56:d8:4a:14:f0:10:98:cb:17:
54:6c:a9:72:66:e2:30:6a:a5:16:a6:8c:fa:05:28:a6:08:e5:
8d:f8:ea:fa:5b:2b:16:58:a2:7d:20:4a:1f:75:db:1b:44:b3:
98:81:50:45:58:5f:d3:67:c2:b5:ce:f6:ff:80:09:c9:10:54:
46:ba:e9:9c:ce:6e:de:b5:ca:32:1c:70:75:e0:bc:ef:8a:17:
e3:c9:eb:db:99:a4:e1:eb:95:a9:28:9b:6d:b6:47:94:0d:d3:
5b:59:f5:ff:6c:36:7f:ae:f8:59:9b:c8:45:4c:9a:a3:6a:40:
b5:f5:cf:a5:d1:c1:80:7e:ca:5d:7c:87:0f:be:f0:97:98:3b:
cd:27:ca:4a:7a:2b:35:e9:91:7f:3b:f2:75:61:38:13:2c:94:
cb:e7:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:05 2025 by rpki-client