Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/k3TRYEDrQBrO6eEJRbpRNKXsKDY.roa
File: k3TRYEDrQBrO6eEJRbpRNKXsKDY.roa (raw, json)
Hash identifier: 4LCjfvPAnVknZ+aHhkSXzNTjWeSMT085uGaEj2C566Q=
Subject key identifier: 93:74:D1:60:40:EB:40:1A:CE:E9:E1:09:45:BA:51:34:A5:EC:28:36
Certificate issuer: /CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Certificate serial: 0194B77F638BE51456D5428FFE43094C9E1F
Authority key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/k3TRYEDrQBrO6eEJRbpRNKXsKDY.roa
Signing time: Thu 30 Jan 2025 13:56:06 +0000
ROA not before: Thu 30 Jan 2025 13:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214217
IP address blocks: 193.247.112.0/21 maxlen: 24
193.247.112.0/24 maxlen: 24
193.247.117.0/24 maxlen: 24
193.247.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:7f:63:8b:e5:14:56:d5:42:8f:fe:43:09:4c:9e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Validity
Not Before: Jan 30 13:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9374d16040eb401acee9e10945ba5134a5ec2836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:d0:26:34:e2:59:5a:9e:f6:86:89:09:9e:
4d:0c:2a:9b:24:31:7e:f9:0e:9f:ef:14:69:8a:cd:
b5:8e:b6:65:65:1e:1f:59:74:e0:ff:e6:fc:98:76:
fc:e7:67:fd:36:23:23:20:b8:95:7b:24:af:c4:53:
b5:a9:12:ee:ed:20:2d:8a:8c:4d:70:9c:af:c0:46:
c9:ae:81:e5:41:1b:84:ea:37:f5:0d:3c:f4:32:7c:
f1:5e:e4:45:53:fb:7e:8d:ea:ed:d3:0b:6e:14:6e:
6c:7e:1b:22:bf:c4:72:4b:1a:1b:0e:41:52:6e:82:
01:5e:d6:7f:3b:21:53:53:fc:63:1e:69:1a:5a:05:
04:ee:f2:2e:1f:57:f0:0d:63:e6:43:a9:5d:49:30:
3f:84:98:6b:d5:e6:d6:4a:8a:e4:a9:47:00:24:34:
45:e5:c0:50:bc:7f:4e:21:6c:bd:64:2b:d2:8d:6c:
77:36:dc:18:ff:48:7a:85:7f:bb:11:fb:55:43:c2:
39:4f:4d:ab:e0:32:cc:16:b3:6b:4d:c2:d4:2b:81:
cf:37:8b:74:f8:9d:48:b7:99:50:a1:2f:15:12:86:
20:08:2e:4b:18:a5:cb:ec:a3:16:a7:47:14:c6:ff:
20:80:ea:8c:d3:db:2f:63:8c:a6:e8:2f:c5:20:5d:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:74:D1:60:40:EB:40:1A:CE:E9:E1:09:45:BA:51:34:A5:EC:28:36
X509v3 Authority Key Identifier:
keyid:CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/k3TRYEDrQBrO6eEJRbpRNKXsKDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.112.0/21
Signature Algorithm: sha256WithRSAEncryption
81:66:df:25:2f:b8:3e:71:db:5d:18:e4:31:f1:0f:23:3b:89:
18:9a:44:72:ee:36:9a:cd:6d:72:cb:45:c9:18:ea:aa:f7:34:
f1:cd:21:c4:84:ca:f3:7c:bc:17:c9:d8:bb:6a:18:32:bc:5e:
a8:2d:d9:90:18:46:16:e9:6d:3d:d8:a7:9f:94:09:06:fc:6a:
40:11:78:a9:69:12:e0:f1:bf:1e:1b:7a:58:df:34:b1:be:10:
fb:9b:b9:d9:f2:41:4f:e9:c9:54:d9:8b:b2:25:d3:b1:95:3e:
8f:e5:b5:44:1f:5a:8f:99:b8:e6:3e:b6:88:93:98:9f:e8:ac:
e7:02:5f:88:27:8d:05:3d:ea:02:df:2e:82:06:6a:39:bb:11:
f9:50:2f:a6:ed:95:64:b0:e9:1c:fc:3c:a8:21:31:50:55:51:
97:eb:cb:48:43:06:13:e9:fa:96:d6:c2:4b:fa:40:58:1a:4d:
78:af:70:c1:9c:28:5e:27:c5:4b:ad:71:7d:0c:d2:25:93:67:
c5:2b:7e:ee:c1:8b:69:ca:61:0d:74:06:29:a9:5b:32:13:26:
eb:7d:80:e5:fa:34:fe:20:ff:e3:f0:6d:08:2c:0a:07:7e:b9:
68:f7:b3:a1:7f:9e:67:88:27:c7:db:2a:c9:59:d0:62:75:f9:
49:aa:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:35 2025 by rpki-client