Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/gDeneKJTQtX9OIr5MlGy6dCHOYA.roa
File: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (raw, json)
Hash identifier: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=
Subject key identifier: 80:37:A7:78:A2:53:42:D5:FD:38:8A:F9:32:51:B2:E9:D0:87:39:80
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 019424B28E4AB2F291CFFDB2A865CB51D452
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/gDeneKJTQtX9OIr5MlGy6dCHOYA.roa
Signing time: Thu 02 Jan 2025 01:47:48 +0000
ROA not before: Thu 02 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34794
IP address blocks: 193.194.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:8e:4a:b2:f2:91:cf:fd:b2:a8:65:cb:51:d4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Jan 2 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8037a778a25342d5fd388af93251b2e9d0873980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:9a:8e:5b:01:87:05:90:12:26:0e:7c:13:
1e:23:29:2c:3f:ed:5f:47:44:2f:b5:f0:13:f8:02:
2d:1f:39:41:08:fa:f2:d1:70:14:a1:a8:28:9a:93:
3d:a6:bd:7b:a3:61:28:ef:81:8f:53:7c:68:2d:32:
2f:49:12:45:9f:b4:37:14:cf:4e:f4:b8:81:67:1a:
e7:df:7a:37:21:94:ea:3d:a4:b3:0b:01:a0:da:13:
75:41:4e:77:d3:f9:c2:9d:7e:a1:c9:97:3b:0a:97:
17:14:60:aa:d4:91:80:d4:65:bb:c9:31:c8:d6:04:
e2:e9:1a:1d:fa:2c:89:47:3d:7a:7a:9f:dd:ed:b9:
55:f0:b3:0e:4e:a7:c5:62:b5:61:c1:d1:ba:23:09:
26:63:0b:19:e3:dc:de:1a:6a:ae:e6:e5:31:4f:58:
da:9f:2e:c5:6e:12:25:4c:21:cc:08:9f:e3:98:55:
11:39:74:62:e1:38:29:35:f4:ff:17:eb:f0:f6:4a:
9c:ef:0d:87:64:b8:43:ca:4a:d5:37:e6:df:70:65:
b3:a6:e8:12:bc:85:4f:73:01:5c:ca:6f:a1:e5:fd:
a2:3b:19:4c:42:f5:79:d2:9a:41:8b:a9:a8:8e:62:
aa:90:e6:4b:aa:41:68:8e:c0:75:cb:d7:d9:50:ac:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:A7:78:A2:53:42:D5:FD:38:8A:F9:32:51:B2:E9:D0:87:39:80
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/gDeneKJTQtX9OIr5MlGy6dCHOYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:d7:9c:82:db:30:15:19:44:e0:a9:4b:f1:fd:54:0e:2d:40:
df:42:3d:36:85:2c:cb:bb:45:3d:e8:2e:45:bf:e7:e8:4c:43:
32:a3:4a:1b:2c:1f:43:75:59:5a:7b:94:3d:b7:34:b1:5a:81:
20:05:eb:9e:c4:da:ac:7c:8d:5e:ae:f6:b5:31:85:68:9b:5c:
45:18:55:40:c5:b6:3f:3a:32:f5:8c:3f:4f:a6:19:00:f1:6f:
78:59:42:1f:f3:85:36:ab:30:e0:a8:1c:55:85:66:61:e8:5a:
30:41:4a:86:ec:15:c2:c2:d2:cc:45:3a:bd:d2:42:6c:3c:53:
21:96:3c:0b:6a:13:12:70:2f:83:c7:65:45:fa:20:4c:25:b7:
11:d5:98:d9:42:24:6e:b5:0d:d4:8c:34:08:54:ae:a5:85:7a:
2e:6a:c1:2f:72:69:3f:a2:8d:7c:67:a2:93:57:17:2e:70:71:
00:aa:53:42:61:a2:71:ef:c7:2b:8b:85:24:18:76:fc:d4:78:
47:fb:fa:45:7e:6f:9e:f5:f6:75:3a:68:1b:31:2d:37:9f:4f:
29:ce:45:82:71:e6:91:26:95:1b:2d:02:9f:36:d3:cf:65:3c:
9b:24:f4:61:07:10:39:cb:6c:83:8a:7a:52:06:00:c5:27:3f:
75:58:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:11 2025 by rpki-client