Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/vDGDX2wIiExO6AcsphzPX7w0rD8.roa
File: vDGDX2wIiExO6AcsphzPX7w0rD8.roa (raw, json)
Hash identifier: 6H+fcKSw03UJYZabhwRmpHlYumXXGe9flqc+/pdyWXc=
Subject key identifier: BC:31:83:5F:6C:08:88:4C:4E:E8:07:2C:A6:1C:CF:5F:BC:34:AC:3F
Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48
Certificate serial: 019425FD6C9D44EF2D1F441A2DEC50EF9A04
Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/vDGDX2wIiExO6AcsphzPX7w0rD8.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198385
IP address blocks: 193.73.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6c:9d:44:ef:2d:1f:44:1a:2d:ec:50:ef:9a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc31835f6c08884c4ee8072ca61ccf5fbc34ac3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:79:cc:f7:9b:be:85:9c:0a:a4:11:24:b9:
17:44:6c:28:07:3c:88:61:52:15:0a:90:a4:19:5a:
2c:5c:ef:cb:4b:cb:f6:f9:1a:eb:50:f7:64:4d:dd:
88:f3:a6:2a:81:2b:ed:d4:55:bd:9d:1a:04:d0:00:
c0:be:f7:7b:22:e3:fe:36:3b:f5:10:f6:b3:f0:1d:
49:4c:64:c9:ca:48:6b:69:eb:68:fd:20:93:a9:04:
0e:aa:66:2c:ec:e5:67:0f:65:d9:a6:a6:c9:b5:6e:
43:74:9c:0b:c1:8a:e3:97:1a:a8:36:77:b5:c9:48:
95:ba:b7:1c:e2:38:35:9f:c3:18:15:19:0a:db:6e:
06:53:84:fd:31:c8:b7:b3:2e:1f:19:37:53:6a:0c:
d2:52:42:7b:d6:19:79:0c:3d:6c:7b:48:46:ff:da:
2a:2f:4f:8e:15:89:39:1d:a5:7f:93:d3:a1:f8:8a:
81:5c:de:a5:de:60:2c:94:1a:88:c0:82:2c:ee:63:
1c:ae:a5:b2:25:79:e0:42:23:5d:30:54:67:83:45:
e3:df:0d:d8:a3:fd:cb:63:c6:63:4e:6f:d4:21:71:
66:af:a9:05:c4:5f:f6:97:d5:d0:2e:e6:ff:4d:8a:
a9:63:78:98:df:c0:86:03:e9:06:01:72:7a:6e:0c:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:83:5F:6C:08:88:4C:4E:E8:07:2C:A6:1C:CF:5F:BC:34:AC:3F
X509v3 Authority Key Identifier:
keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/vDGDX2wIiExO6AcsphzPX7w0rD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:56:7a:3e:aa:58:c3:88:a1:dd:b3:67:35:03:97:72:11:89:
ed:ce:de:7f:4b:af:09:5b:9b:6e:b2:cd:ea:00:5c:49:9a:49:
31:40:e5:53:72:00:25:c3:50:fc:30:a4:4f:02:b9:59:ce:94:
4b:1d:44:dd:24:92:16:7f:53:34:4d:8e:18:d7:23:32:90:b2:
a5:63:a1:39:04:de:d8:c4:86:6e:b5:c8:0d:12:2a:c7:28:d4:
b5:8a:b8:aa:31:3f:40:33:25:3b:57:f5:ca:64:05:27:32:06:
2c:f8:b2:cd:5c:3e:f4:4b:90:5c:fe:e9:db:65:76:e4:d8:72:
25:01:36:61:c7:04:f6:fa:ea:5d:8b:54:26:f9:ac:e0:43:b1:
77:61:46:45:96:23:20:8a:77:f2:e7:2e:58:e8:22:aa:33:44:
55:7c:e2:b4:1c:a8:71:97:62:1e:9d:82:d4:79:72:9f:90:c6:
02:f7:fa:e0:6e:d6:93:f1:49:01:4d:f0:d4:72:4e:c5:82:19:
2a:c6:ba:5a:c9:4d:26:34:91:a6:36:42:ba:fd:c9:b3:f6:1c:
06:14:9c:78:c4:ed:d1:fd:d8:a3:20:99:41:d1:a2:07:0e:14:
f4:4b:b6:ea:63:67:c2:b1:91:72:ac:ae:fc:ae:24:04:bb:1b:
2e:e1:57:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:01 2025 by rpki-client