Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/Adrbs5NlhRUNV2cisyNwo-BCgig.roa
File: Adrbs5NlhRUNV2cisyNwo-BCgig.roa (raw, json)
Hash identifier: JRCSzf27iDiymKtOrQAggmVQVUm0Qmo2Jy69WSaHvcg=
Subject key identifier: 01:DA:DB:B3:93:65:85:15:0D:57:67:22:B3:23:70:A3:E0:42:82:28
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 01944218A52A4384CD0B7C07361B9668EDBB
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/Adrbs5NlhRUNV2cisyNwo-BCgig.roa
Signing time: Tue 07 Jan 2025 18:48:18 +0000
ROA not before: Tue 07 Jan 2025 18:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 193.150.70.0/24 maxlen: 24
193.218.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:18:a5:2a:43:84:cd:0b:7c:07:36:1b:96:68:ed:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 7 18:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01dadbb3936585150d576722b32370a3e0428228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2b:ab:44:9f:a0:1f:dc:f8:44:a7:93:e5:6c:
5d:79:a0:7b:ce:7d:29:3f:45:a8:c8:73:81:d8:1b:
b4:c6:30:b3:d5:7d:0b:16:36:6b:20:e4:9e:44:06:
58:34:7a:2b:a3:d3:f8:f2:5c:d9:11:f3:73:0d:7f:
3c:5e:fb:b6:f2:7e:48:d6:58:94:23:c9:83:a0:76:
1e:16:ef:42:e3:05:f8:dd:1d:83:45:2a:fb:73:ce:
99:7f:e8:65:b8:58:df:58:3e:08:b1:8f:e5:f0:84:
81:1b:4d:41:12:fe:ec:45:03:ba:bf:58:77:4d:d3:
15:2f:fe:35:0a:e2:7e:38:66:90:4b:9d:a7:cb:a1:
15:26:62:0f:78:f7:59:3f:3d:9c:21:41:c3:a7:0c:
1c:82:7d:cd:83:77:19:ae:47:93:cf:24:79:48:d3:
c9:13:dc:1e:97:2a:80:65:c6:73:9a:49:9d:2a:c3:
b3:2c:55:2c:11:02:b2:72:aa:ce:aa:da:73:fe:c9:
14:93:2a:e1:07:e0:a0:21:bd:a8:83:d0:03:86:20:
38:40:8b:55:5c:14:5d:7d:42:ed:89:77:b5:8f:03:
89:c6:f0:38:94:63:3f:58:4d:8c:de:87:6b:6e:ce:
19:9e:e9:7f:ff:f1:dd:ea:0f:56:ac:43:e7:1d:34:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:DB:B3:93:65:85:15:0D:57:67:22:B3:23:70:A3:E0:42:82:28
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/Adrbs5NlhRUNV2cisyNwo-BCgig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.70.0/24
193.218.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b0:ea:59:7b:25:4e:33:87:99:4a:6b:b8:e7:3f:cc:85:0a:
16:6f:ce:d3:f6:aa:ee:7a:3d:d9:a6:50:28:1d:cf:71:80:73:
8c:f9:8f:8f:3a:39:66:40:02:8e:a8:cc:8d:72:0a:cc:b7:05:
b2:3e:5d:0c:46:75:9a:81:30:87:ac:9e:bc:47:d4:f1:cd:82:
f1:73:d2:9f:59:51:0d:9d:81:94:61:cf:05:ee:55:c1:8a:c6:
67:f5:22:71:02:c4:8f:ac:ee:0f:16:d1:4c:e4:27:07:46:05:
17:e4:63:e1:5f:c7:34:cc:ee:7f:49:f3:7c:cb:dd:3c:1d:c4:
47:e4:86:37:66:2c:c6:52:a0:63:8d:58:a7:1c:5f:54:c8:4d:
15:6d:0c:af:81:aa:5a:a7:08:e5:a2:74:af:9a:f1:71:ed:bc:
b4:75:5a:91:28:18:13:a5:a8:68:b5:f4:c3:5b:ba:b4:24:dd:
c3:be:1a:ae:08:6d:e5:7e:e1:56:d2:17:ab:50:a9:3a:f3:05:
16:02:33:b4:22:8b:04:91:fb:a9:83:c0:ca:50:28:2b:dc:ca:
19:ef:28:4d:fa:db:fc:68:f2:c6:5d:b3:5e:52:52:3a:0d:21:
81:ba:b3:7f:b3:13:4c:cc:cf:23:8f:bf:4d:ad:05:b4:30:76:
04:90:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:40 2025 by rpki-client