Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/keIeKvMj5GFcFpqn4YnewTjX5AI.roa
File: keIeKvMj5GFcFpqn4YnewTjX5AI.roa (raw, json)
Hash identifier: LybLvk7YVa5Nzz7hllr9jrHmTPWaVPacnhSof9pKAqc=
Subject key identifier: 91:E2:1E:2A:F3:23:E4:61:5C:16:9A:A7:E1:89:DE:C1:38:D7:E4:02
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 019427B5C1DD47AA6FA90A2CF170E808A712
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/keIeKvMj5GFcFpqn4YnewTjX5AI.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34878
IP address blocks: 193.196.32.0/20 maxlen: 20
2001:7c0:2310::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c1:dd:47:aa:6f:a9:0a:2c:f1:70:e8:08:a7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91e21e2af323e4615c169aa7e189dec138d7e402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:0e:01:4e:ad:6c:b5:a3:ec:79:10:98:6c:
e1:44:3a:40:d7:cb:ae:10:04:94:2d:e5:4c:e9:c2:
9e:5d:3d:d4:34:75:76:56:11:bb:3b:23:91:12:3d:
3b:b6:d3:35:9d:c6:be:5a:ed:89:cb:d8:c2:cf:27:
f1:ac:f3:23:da:a0:84:aa:4f:7c:cd:94:dd:5d:35:
9a:e4:a3:b1:14:84:19:9e:2a:b8:2e:c1:68:07:b1:
00:21:7b:de:81:d6:aa:c1:6a:3f:81:09:c8:ca:5d:
07:50:f6:5b:e3:0c:e1:49:6c:d4:0a:f6:3e:49:30:
6c:d2:96:48:f1:13:2f:d8:70:b6:02:53:1e:37:1c:
47:83:b1:69:f3:14:14:31:44:1a:bb:c6:56:fc:46:
4a:5e:57:39:44:9c:c9:0e:f9:06:aa:c5:62:ff:2b:
db:bf:f7:7a:6d:a6:6f:58:9a:5c:d7:30:03:a2:5b:
46:32:c1:83:b2:db:dc:22:f4:f4:16:79:9c:fd:3d:
b0:77:91:57:c8:f6:f6:bf:c2:6c:83:c4:b1:32:f3:
b0:04:5a:71:33:74:34:39:c2:cf:17:ef:10:04:d1:
2a:14:96:6b:09:19:a8:b9:ff:d7:95:23:a3:ec:6d:
b1:f3:3b:49:6e:16:2d:0a:f5:4e:bd:5d:96:4b:15:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:1E:2A:F3:23:E4:61:5C:16:9A:A7:E1:89:DE:C1:38:D7:E4:02
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/keIeKvMj5GFcFpqn4YnewTjX5AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.196.32.0/20
IPv6:
2001:7c0:2310::/44
Signature Algorithm: sha256WithRSAEncryption
8d:a3:65:9d:50:39:b0:fb:a7:d7:0d:43:90:96:1a:5b:6a:4c:
f0:95:63:1b:18:b6:68:6b:20:49:7f:a0:f3:af:93:24:c5:34:
ca:20:6c:e5:84:5c:31:13:fb:54:d2:d7:d0:a1:96:1e:57:14:
26:22:4b:b8:51:c5:4d:9c:6c:c2:42:fe:f3:d1:22:4f:3f:e0:
5f:a1:56:58:3b:59:76:e5:b0:b6:24:33:97:f0:63:fc:e1:d0:
e3:19:5a:dc:3e:46:02:9c:3c:29:b7:61:b1:79:02:d1:7a:bd:
47:62:31:8c:ab:b2:8f:38:be:dc:2e:25:3c:de:a9:19:31:28:
90:45:50:b4:52:32:87:5a:05:7f:99:75:ed:69:ed:4b:a5:9e:
f1:2a:a8:11:46:b9:8d:4d:3e:a5:c6:f0:61:25:83:03:1c:ae:
20:b7:f4:ec:10:a6:6c:ec:62:50:20:6e:e8:da:a4:ac:5a:be:
f3:31:2f:a3:48:60:07:0d:ff:88:40:35:24:48:93:59:c6:8f:
e8:a4:d2:66:77:9e:22:e0:13:fc:f2:c3:6d:97:8c:5c:74:4d:
19:12:f7:00:7e:bc:fe:94:13:81:1d:3a:1c:8b:ef:ae:25:59:
90:b7:a2:a2:8e:79:2c:02:77:fc:a5:a1:16:e4:63:78:8b:c3:
84:1e:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:12 2025 by rpki-client