Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MyC-8-QdZO9nvuSIn6IQBHcszfw.roa
File: MyC-8-QdZO9nvuSIn6IQBHcszfw.roa (raw, json)
Hash identifier: 8ZhwxLn5PJgYqwvEfakE1R35XBzIboyU4duoTubNzyU=
Subject key identifier: 33:20:BE:F3:E4:1D:64:EF:67:BE:E4:88:9F:A2:10:04:77:2C:CD:FC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194B93996D55E2DE2B87ED6A9E6814B0DFA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MyC-8-QdZO9nvuSIn6IQBHcszfw.roa
Signing time: Thu 30 Jan 2025 21:59:06 +0000
ROA not before: Thu 30 Jan 2025 21:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 193.8.56.0/24 maxlen: 24
193.8.231.0/24 maxlen: 24
2a09:17c0:b19a::/48 maxlen: 48
2a09:17c7:fc3a::/48 maxlen: 48
2a0f:1200:d9::/48 maxlen: 48
2a0f:1207:fe5a::/48 maxlen: 48
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e200:25f::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c0:11c::/48 maxlen: 48
2a0f:e6c0:3af::/48 maxlen: 48
2a0f:e6c6:99::/48 maxlen: 48
2a0f:e7c7:fcd8::/48 maxlen: 48
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea47:fc1d::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a12:ecc0:3::/48 maxlen: 48
2a12:ecc0:4::/48 maxlen: 48
2a12:ecc0:66::/48 maxlen: 48
2a12:ecc0:188::/48 maxlen: 48
2a12:ecc0:316::/48 maxlen: 48
2a12:ecc0:34a::/48 maxlen: 48
2a13:18c6:44::/48 maxlen: 48
2a13:18c6:99::/48 maxlen: 48
2a13:8c82:2::/48 maxlen: 48
2a13:8c86:100::/48 maxlen: 48
2a13:8c86:140::/48 maxlen: 48
2a13:c900:22::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
2a13:c900:110::/48 maxlen: 48
2a13:e102:2::/48 maxlen: 48
2a13:e107:77::/48 maxlen: 48
2a13:e107:29b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:39:96:d5:5e:2d:e2:b8:7e:d6:a9:e6:81:4b:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 30 21:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3320bef3e41d64ef67bee4889fa21004772ccdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:de:fd:82:0b:ce:a4:51:35:8a:6b:77:c2:
64:8f:74:b0:32:24:e2:55:dc:bd:97:16:ab:01:60:
14:d7:94:a8:9e:c7:83:6e:2a:68:3f:95:c3:fc:34:
40:6c:7e:a4:fe:c8:56:fa:92:55:40:19:35:72:cd:
f2:5f:5e:e9:a5:93:2f:62:fd:c4:9a:b0:21:da:6a:
64:20:81:0c:61:27:bf:05:b5:fe:03:08:b1:11:0e:
8b:9e:f6:47:36:2c:91:14:71:f8:93:cf:80:c8:9f:
04:d4:fb:ad:53:f0:8e:86:42:83:66:53:30:60:cd:
0c:9c:2b:15:72:8d:57:87:4b:c1:6d:ae:18:2e:0a:
38:ee:bf:e2:f6:94:55:67:78:9c:24:83:a0:c8:71:
18:a6:04:a7:e4:8d:fb:2e:7f:a1:3c:96:38:f8:6c:
d4:c6:36:c8:e1:88:92:c9:7a:ef:5e:2c:02:a0:c8:
78:3b:66:dd:99:34:b0:4f:a6:a1:65:33:42:e4:d8:
05:f3:d7:5e:12:7c:51:89:a1:2c:c6:7e:80:06:ac:
81:8f:4f:50:92:7e:2e:4c:13:8d:88:39:b0:8d:0c:
36:2b:3a:f8:43:92:e5:6b:15:40:2a:fd:00:30:ee:
97:55:f4:c0:6a:ca:6c:91:1b:51:63:21:5f:fe:b7:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:BE:F3:E4:1D:64:EF:67:BE:E4:88:9F:A2:10:04:77:2C:CD:FC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MyC-8-QdZO9nvuSIn6IQBHcszfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.56.0/24
193.8.231.0/24
IPv6:
2a09:17c0:b19a::/48
2a09:17c7:fc3a::/48
2a0f:1200:d9::/48
2a0f:1207:fe5a::/48
2a0f:e1c0:3::/48
2a0f:e1c0:37a::/48
2a0f:e200:5::/48
2a0f:e200:25f::/48
2a0f:e207:fd38::/48
2a0f:e440::/29
2a0f:e6c0:11c::/48
2a0f:e6c0:3af::/48
2a0f:e6c6:99::/48
2a0f:e7c7:fcd8::/48
2a0f:ea40:8::/48
2a0f:ea47:fc1d::/48
2a0f:ea47:ff49::/48
2a12:ecc0:3::-2a12:ecc0:4:ffff:ffff:ffff:ffff:ffff
2a12:ecc0:66::/48
2a12:ecc0:188::/48
2a12:ecc0:316::/48
2a12:ecc0:34a::/48
2a13:18c6:44::/48
2a13:18c6:99::/48
2a13:8c82:2::/48
2a13:8c86:100::/48
2a13:8c86:140::/48
2a13:c900:22::/48
2a13:c900:66::/48
2a13:c900:110::/48
2a13:e102:2::/48
2a13:e107:77::/48
2a13:e107:29b::/48
Signature Algorithm: sha256WithRSAEncryption
71:77:4d:73:e2:ac:cc:36:87:2b:3e:b8:e5:b3:0b:e5:9d:5e:
38:70:df:4b:3d:4f:bb:47:63:15:6e:bd:b8:e5:3c:2e:68:23:
f1:23:c6:8f:ee:10:eb:51:30:3c:b8:0c:47:60:7a:c4:3c:2a:
47:28:0f:06:17:dc:00:8f:48:c9:b9:15:18:33:f0:16:10:d5:
39:ad:d9:c3:f4:8e:66:11:35:bc:76:a4:ea:6e:97:45:7d:8f:
bf:55:fa:07:be:aa:bb:70:70:e1:77:69:04:b4:36:81:8e:40:
f0:db:0a:98:d9:c5:c2:3b:20:66:a2:81:c4:b6:20:5a:cf:25:
05:8f:4a:c7:84:b9:ad:5a:80:3d:85:4b:0d:9c:90:fe:a0:93:
91:e9:c6:19:8a:c2:0c:c0:9e:80:6a:00:32:99:eb:0e:6a:7e:
9a:a0:6a:e7:ec:c8:ba:d8:28:fe:c3:12:38:27:24:d8:80:36:
50:7b:4b:bd:ed:f6:f8:49:da:08:7c:6c:6a:f7:41:60:e8:68:
48:ea:57:4d:63:a6:be:14:1c:67:5f:89:08:57:b2:bd:69:92:
8e:e3:b7:78:f4:f0:62:90:9a:ed:fd:8b:38:60:f5:f2:b6:64:
f8:27:14:1e:ec:be:04:7e:d2:3b:c4:0f:35:8e:28:1f:be:99:
16:e7:02:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:31 2025 by rpki-client