Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa
File: ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa (raw, json)
Hash identifier: PaRvSHJJoV4+LaWhDX1LkioRDCgsWXMWP6C+HnWRO88=
Subject key identifier: 92:D4:39:F9:6F:60:E3:36:4C:78:0B:74:1B:7F:FE:78:E7:2F:35:78
Certificate issuer: /CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Certificate serial: 01941F8C850AF144E43100B091285B433BE4
Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56650
IP address blocks: 193.34.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:85:0a:f1:44:e4:31:00:b0:91:28:5b:43:3b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92d439f96f60e3364c780b741b7ffe78e72f3578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:0b:b4:49:24:2c:f2:9a:8b:fb:91:5f:a5:
6f:c0:2f:db:f2:b6:b5:d1:32:4a:8f:be:97:a2:94:
00:d6:1d:c4:87:0b:a9:59:68:47:77:e0:45:6c:37:
df:1a:d1:15:54:bd:31:e2:24:36:7e:9b:ff:6d:5b:
b7:f4:ae:40:01:15:b2:06:9b:54:56:1c:9c:61:ef:
70:d5:9f:1a:07:61:53:23:81:38:cf:4f:db:e9:d2:
93:d9:ed:69:03:21:41:ad:f2:74:6f:43:84:bf:82:
d3:1e:fc:0c:27:73:3f:63:b3:f2:56:60:16:42:00:
86:10:92:20:78:dc:06:45:f3:7b:31:c1:8d:88:b7:
10:a1:9a:2b:0d:74:69:73:37:d1:64:a6:1a:7b:07:
ea:2b:44:dd:6e:74:92:72:97:99:94:16:a6:b5:e4:
d6:1a:94:28:99:c3:49:d6:88:02:07:38:65:b3:47:
4c:4b:40:d6:33:e3:62:c7:b1:c5:b2:67:5a:c5:e4:
0b:1d:aa:7a:9d:b5:7c:96:95:5d:ae:2c:0f:50:f6:
f6:a4:a6:62:be:8a:15:8a:f2:02:9b:0b:58:ed:25:
e2:0d:5c:78:9b:a5:81:d3:82:f0:5d:7e:92:8d:51:
d9:4a:0c:6f:f2:2a:98:ac:fd:53:10:ba:5f:ab:46:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D4:39:F9:6F:60:E3:36:4C:78:0B:74:1B:7F:FE:78:E7:2F:35:78
X509v3 Authority Key Identifier:
keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.205.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:83:82:ad:d6:02:d8:d6:0e:38:ed:79:37:55:5b:65:a4:ab:
5e:51:18:af:07:be:bf:5d:f8:84:0a:5f:63:2d:65:e5:ca:01:
3f:90:3f:d2:03:b4:60:bd:1f:99:ab:93:ba:5d:13:1d:7e:bb:
aa:6f:52:f3:9d:cf:69:ef:27:1f:cd:86:87:5f:1c:5b:8e:4a:
d4:01:9c:bb:88:28:a8:10:18:f1:8a:6a:9e:d6:9e:38:03:9f:
40:69:12:0c:7d:a7:2e:10:19:a1:0c:a9:e2:89:82:b7:a1:79:
63:af:c3:d2:06:e2:2b:21:12:fb:6a:a3:df:8e:99:70:e3:5b:
2a:d3:16:5a:4d:af:d3:24:13:28:29:e5:da:ca:ba:ee:dd:9d:
f1:8d:9a:33:30:5e:3b:86:a7:b5:8b:5e:74:31:fc:d2:d4:fe:
8a:8f:31:e1:48:31:a7:d9:2e:5e:c3:c2:11:cd:bb:7f:3b:90:
31:86:3d:84:c6:0a:1c:74:f8:10:a1:e9:7b:de:9e:0d:b1:38:
36:aa:cb:e7:44:27:58:85:a8:07:20:b6:f8:cb:70:d8:04:57:
30:a0:63:b9:f5:67:5b:d8:37:ab:9d:60:71:dc:9a:20:ca:76:
a3:aa:b7:12:47:f4:4d:b0:f8:ca:50:5f:90:6a:d8:7c:82:f7:
78:75:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:13:49 2025 by rpki-client