Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/dUaS3KgspyJ0T8WRK707oEQ6alw.roa
File: dUaS3KgspyJ0T8WRK707oEQ6alw.roa (raw, json)
Hash identifier: bhT9P2ytymr/FTiOMzScdhj1xB9k9jZeaWdGvuU94lA=
Subject key identifier: 75:46:92:DC:A8:2C:A7:22:74:4F:C5:91:2B:BD:3B:A0:44:3A:6A:5C
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 019428265D8E6B55C646B1142F02F845FF93
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/dUaS3KgspyJ0T8WRK707oEQ6alw.roa
Signing time: Thu 02 Jan 2025 17:53:10 +0000
ROA not before: Thu 02 Jan 2025 17:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214837
IP address blocks: 193.53.35.0/24 maxlen: 24
193.53.82.0/24 maxlen: 24
2a14:57c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:5d:8e:6b:55:c6:46:b1:14:2f:02:f8:45:ff:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Jan 2 17:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=754692dca82ca722744fc5912bbd3ba0443a6a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:76:66:b3:5b:cc:98:4a:41:1c:1c:fb:fe:
b5:53:6e:1a:d5:f6:eb:07:7e:19:a8:01:36:01:74:
17:49:2a:d0:8b:bd:3a:68:31:25:bf:68:94:36:f7:
e3:10:79:ae:d5:7d:d3:b9:09:cb:4a:a3:f7:52:73:
0c:ab:d8:20:42:76:95:0c:26:20:13:4c:49:d6:c2:
d0:b9:ad:51:52:ac:81:25:c3:97:c8:d5:01:17:af:
fc:f6:52:14:36:f8:98:5a:d6:16:8f:76:0f:07:af:
23:e3:0c:d2:c9:4f:bc:95:f8:06:c3:e1:2f:ab:9a:
25:99:ae:65:c3:15:a9:69:68:71:34:ce:0d:bf:94:
3e:24:5e:b4:a0:72:16:7b:14:bd:9a:c9:17:9d:ce:
44:46:45:ca:ec:b1:5c:6d:a7:7f:2a:07:af:f7:ee:
cd:68:26:44:06:a5:54:a2:7c:b9:63:18:95:b5:fe:
c8:12:8a:02:0e:74:d5:8d:7f:61:81:08:58:8e:22:
11:27:28:ff:e6:2a:94:8c:68:32:cd:d4:b7:a4:ac:
98:b6:05:f2:7c:63:2c:08:ee:d2:df:53:a0:e2:5f:
af:ef:a8:c6:b5:f2:01:d6:80:2b:fb:62:53:0a:a4:
2e:1d:a6:b8:67:83:f0:c5:58:66:a9:b4:82:04:7d:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:46:92:DC:A8:2C:A7:22:74:4F:C5:91:2B:BD:3B:A0:44:3A:6A:5C
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/dUaS3KgspyJ0T8WRK707oEQ6alw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.35.0/24
193.53.82.0/24
IPv6:
2a14:57c0::/29
Signature Algorithm: sha256WithRSAEncryption
28:77:c9:a3:75:e1:64:57:92:25:b0:52:33:18:48:c9:1f:c1:
db:dc:cd:0a:3e:32:d7:1c:91:39:d2:6d:46:07:14:97:d4:a2:
0a:64:d4:1c:d0:1c:b8:76:c7:ee:2a:0c:a6:81:91:8d:e4:ca:
96:fc:35:24:b6:25:d2:f2:dc:22:bf:78:91:b1:2c:f1:87:cb:
68:71:c6:01:96:8e:be:b1:df:76:e1:21:7b:74:c6:dc:f7:6a:
c1:74:51:19:78:9a:38:db:44:ce:ba:96:fa:07:98:e9:18:62:
64:42:67:33:71:ba:8b:0b:73:ea:7e:bd:43:53:64:3c:8b:f5:
0f:ea:67:51:ed:91:9a:ee:62:e1:39:5c:c0:a7:ca:71:34:f1:
0e:4c:59:c3:e0:79:66:96:17:26:f9:44:f1:94:3e:12:eb:c0:
d1:c8:ec:94:0a:5f:07:27:68:12:f5:eb:9c:83:b5:50:d1:03:
4d:ab:4b:27:d4:85:cf:fa:d6:9b:19:81:58:03:07:f7:ee:f1:
88:8d:57:19:93:11:79:c1:f0:63:51:e1:fc:95:7a:97:da:e8:
e3:5e:51:27:c0:d4:99:59:42:fb:3d:1c:4b:59:1c:bd:55:56:
a4:07:b3:26:66:78:5f:c8:06:f6:0d:bb:6a:02:54:d5:8c:f8:
8f:20:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:31 2025 by rpki-client