Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/AJoKV4qloK-gv346yQRe9jE_1Lc.roa
File: AJoKV4qloK-gv346yQRe9jE_1Lc.roa (raw, json)
Hash identifier: cy9XY0oo3u/4Yi8UZQJSoFS5/DHP0ILoCjdTHcKoQDk=
Subject key identifier: 00:9A:0A:57:8A:A5:A0:AF:A0:BF:7E:3A:C9:04:5E:F6:31:3F:D4:B7
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 01942747FE1E080BF7EE61E6E72995043E54
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/AJoKV4qloK-gv346yQRe9jE_1Lc.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42156
IP address blocks: 193.107.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fe:1e:08:0b:f7:ee:61:e6:e7:29:95:04:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=009a0a578aa5a0afa0bf7e3ac9045ef6313fd4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:93:cd:d6:83:a2:82:97:40:d9:49:f4:97:
a7:6f:fd:45:a4:58:4e:af:9b:d3:ee:e0:8b:57:15:
6f:60:c0:04:e9:63:5b:c5:65:29:ab:e4:44:9d:eb:
9e:4e:b4:11:e2:1c:02:a6:af:64:90:27:69:34:d7:
5d:53:01:cd:09:ad:71:ad:e4:c8:84:6f:66:f6:ca:
57:8b:ea:52:cb:8c:a5:a1:86:4d:1a:80:b9:eb:b1:
fa:f2:20:76:ae:0b:f1:38:ea:0d:61:d6:39:a5:96:
4c:d9:a9:84:b6:27:c3:8a:17:fc:98:d5:f9:8e:be:
10:6e:af:52:81:25:d6:4e:00:ac:39:e4:c2:cc:a3:
6d:1b:0c:df:e3:ff:20:35:e1:10:13:9f:9e:5a:be:
d8:a9:75:24:f5:1c:98:3f:80:2e:38:7e:b1:57:dd:
4d:8a:db:a3:26:0e:ba:a8:3f:81:f8:27:97:cd:13:
7c:fe:74:52:05:dd:17:c6:47:5f:86:a1:df:17:b7:
73:42:4f:26:d7:3d:4e:b2:8c:ba:69:f0:d7:08:2d:
19:b0:f0:ba:ab:72:ac:ba:a7:7c:b1:00:de:ee:22:
67:28:0f:e6:20:f4:39:2b:18:54:51:21:0b:5d:c1:
56:09:f9:ae:36:f5:da:b2:c9:d5:b5:05:eb:0d:43:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:0A:57:8A:A5:A0:AF:A0:BF:7E:3A:C9:04:5E:F6:31:3F:D4:B7
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/AJoKV4qloK-gv346yQRe9jE_1Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.247.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a7:94:5a:68:3a:83:c1:28:66:f6:b5:f0:b3:d5:7c:83:f1:
d3:cf:03:c7:9a:5b:b6:cc:78:42:cb:13:4a:fe:fc:ff:81:a3:
c1:df:22:7a:35:6d:12:ae:e9:56:08:6b:ec:58:65:ca:4e:1f:
29:28:1d:0d:43:eb:fc:3b:4b:37:e1:72:9b:90:ad:a0:fa:40:
04:cf:ac:d7:94:ed:c1:22:77:0a:97:82:34:40:5d:b3:6a:0e:
9c:9f:f6:81:e8:c3:17:0c:1d:be:1a:46:59:a5:be:41:65:20:
91:b8:3a:08:c4:df:ae:95:af:ef:47:9a:13:f2:0a:5f:73:86:
ec:4f:05:40:3c:d6:c9:ce:13:b6:1f:ed:5a:89:35:24:24:f6:
a5:0f:60:d9:3a:a3:a8:e1:53:b2:03:57:4b:7a:d6:da:b5:b0:
f7:0b:35:f8:74:5c:22:86:98:39:a4:92:dd:2b:7c:09:1c:90:
16:1c:b1:30:50:7a:d9:15:6f:bb:5f:dc:70:5f:af:b8:92:be:
74:9f:3c:26:c3:95:80:eb:b7:d1:30:6d:5c:df:72:1d:ae:75:
a4:4a:bb:05:7f:c0:5b:7c:e6:42:5c:dc:46:9b:5a:dd:35:66:
05:98:0e:f3:74:d9:4a:ec:80:86:46:eb:22:9a:ef:4a:9d:1d:
0c:3e:70:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:00:38 2025 by rpki-client