Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/o-uxsmeV-GDLlYueP7RtZNtRLkY.roa
File: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (raw, json)
Hash identifier: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=
Subject key identifier: A3:EB:B1:B2:67:95:F8:60:CB:95:8B:9E:3F:B4:6D:64:DB:51:2E:46
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 0194221FB0622CC9F82BCDCF414C271A0EC7
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/o-uxsmeV-GDLlYueP7RtZNtRLkY.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44863
IP address blocks: 193.138.245.0/24 maxlen: 24
193.138.246.0/24 maxlen: 24
193.138.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b0:62:2c:c9:f8:2b:cd:cf:41:4c:27:1a:0e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3ebb1b26795f860cb958b9e3fb46d64db512e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:07:c4:c6:15:00:51:b0:6d:32:fd:e3:e4:
cc:d3:d2:34:52:20:2c:0b:99:aa:d0:f4:cf:de:df:
46:91:c9:36:d2:5c:f6:d0:bf:a4:b8:8b:a5:75:f3:
36:2d:cf:a9:ae:3c:20:5f:cf:cd:8c:ff:ff:d4:32:
07:c0:26:b6:48:4a:ce:47:80:97:0c:0e:35:18:cf:
43:b3:71:cc:ef:df:a5:84:2e:f5:ba:a5:59:e1:cc:
6f:3f:86:2b:4a:35:6f:c6:84:cd:6a:9a:ec:b0:16:
6a:79:22:b0:c1:9a:97:a7:3b:bb:e0:cb:31:4f:ed:
7f:dc:7c:8a:63:c8:7d:50:cf:03:0d:62:6d:19:48:
bd:a3:bb:71:d2:54:5b:b2:20:7d:6f:40:e4:a8:5a:
1a:5f:5e:e0:6d:02:5a:64:5a:d7:45:ab:f7:91:7e:
5f:56:b7:61:27:83:04:22:14:ab:d9:13:0b:06:db:
6d:49:56:de:04:52:85:ab:41:1a:ad:23:d7:a4:ff:
7f:34:49:75:d0:26:dc:b3:e7:ca:68:d3:98:26:0f:
0a:1f:dd:b0:36:1b:64:62:6e:39:31:f2:1d:cf:8e:
50:a5:c9:0b:cc:0f:ee:eb:ec:1f:07:2f:50:13:47:
cc:4f:b5:8e:19:06:99:3e:a3:9f:2f:6c:34:84:7e:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:B1:B2:67:95:F8:60:CB:95:8B:9E:3F:B4:6D:64:DB:51:2E:46
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/o-uxsmeV-GDLlYueP7RtZNtRLkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.245.0-193.138.247.255
Signature Algorithm: sha256WithRSAEncryption
3a:8d:4b:fc:49:b5:9a:84:50:64:d5:2f:2e:7d:d2:e9:e8:30:
50:b5:e5:f1:6c:87:89:ec:17:d6:86:ef:19:85:3b:72:c9:68:
42:dd:d3:c0:36:5d:10:26:71:3b:c6:e9:6e:f4:8a:c2:e8:e2:
af:3a:32:2c:18:91:54:4e:92:5e:64:3d:4c:a3:d1:8f:21:e6:
fb:4d:7d:95:9d:bc:92:25:30:6f:b8:1c:39:77:44:bf:ec:0c:
a9:13:0f:06:97:eb:02:4b:cb:59:12:19:9f:c5:59:9f:7a:a7:
e5:48:ee:4c:d7:4b:cb:5a:08:26:76:5c:bd:dc:84:a5:37:dc:
3a:7d:c3:a8:90:2d:d9:f0:86:24:25:44:9f:40:07:ee:37:d4:
00:c4:f6:a8:20:45:0c:b6:98:5e:c2:ef:e7:32:26:56:a9:bf:
4a:4c:c9:cf:d1:c4:7e:f1:d2:00:bf:fb:85:04:51:f3:1f:53:
62:8c:28:31:c4:1a:c7:0b:5b:71:21:65:a1:71:b1:19:23:bf:
53:0e:86:df:d4:cc:7c:cb:98:09:83:df:4e:9f:cc:5e:75:41:
25:d5:90:9e:68:02:01:94:ff:cc:37:de:4e:03:a1:7b:11:77:
32:aa:ae:5e:0b:a4:cb:4f:30:f3:05:b1:2a:b1:31:d3:bc:de:
ec:67:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:02:27 2025 by rpki-client