Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/jCGPrsfu_kkLCWd9SLSh8k9RCDY.roa
File: jCGPrsfu_kkLCWd9SLSh8k9RCDY.roa (raw, json)
Hash identifier: nJWJVfdnaxgnwtEwCA2dV6/d7vihHjQfau3NCe9AO80=
Subject key identifier: 8C:21:8F:AE:C7:EE:FE:49:0B:09:67:7D:48:B4:A1:F2:4F:51:08:36
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0194B5DA3F6A69B298384A8F76180E51B6C5
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/jCGPrsfu_kkLCWd9SLSh8k9RCDY.roa
Signing time: Thu 30 Jan 2025 06:16:06 +0000
ROA not before: Thu 30 Jan 2025 06:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 193.135.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:da:3f:6a:69:b2:98:38:4a:8f:76:18:0e:51:b6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 30 06:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c218faec7eefe490b09677d48b4a1f24f510836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:b7:90:ad:22:2d:4e:fa:59:d6:4c:02:ba:
37:03:e7:51:1d:f2:b0:e6:73:1e:20:56:3b:73:db:
4e:47:f2:52:eb:b8:21:b3:70:fd:d2:45:43:d3:f6:
6d:69:3f:b9:c6:33:7f:6f:10:79:25:f3:2e:2f:01:
72:af:87:92:df:c2:11:10:c4:3d:0a:7e:2d:c1:b8:
54:59:df:85:d0:29:b5:ab:06:9b:13:6e:4b:d8:18:
1d:10:f4:15:05:a8:90:96:1a:11:f9:ce:3b:83:26:
87:e5:d3:c1:bd:cf:da:b0:4f:a9:e7:44:76:d2:72:
9b:55:98:b7:c1:41:84:fc:66:0c:a1:df:e7:93:00:
78:7b:c3:90:a3:f9:28:6f:30:0a:3c:9e:5f:59:aa:
76:5f:8e:dd:c8:36:05:47:6e:d5:a2:61:ff:8c:97:
e4:8d:8b:2e:4f:b8:fb:26:6d:1c:3e:54:08:6a:15:
71:04:97:85:d5:4b:c4:ee:3e:3c:53:1f:62:b3:e2:
d7:61:18:5c:4c:82:1f:87:b1:2c:0b:0f:4f:91:62:
ce:25:a0:3d:8a:eb:f2:81:a1:d4:e8:46:86:2a:c6:
3b:d7:ee:e8:6b:0a:a4:ac:35:15:21:1f:6d:35:6d:
75:76:cf:3b:44:39:5d:49:da:63:f4:73:5a:f1:9b:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:8F:AE:C7:EE:FE:49:0B:09:67:7D:48:B4:A1:F2:4F:51:08:36
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/jCGPrsfu_kkLCWd9SLSh8k9RCDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.151.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f4:8e:30:65:3a:24:e7:c0:a7:f2:b6:b2:2a:cb:b4:16:b9:
c3:96:1f:f0:a4:87:01:22:59:a9:6b:f8:35:fe:98:de:17:12:
fa:69:f9:a2:5a:e8:0d:9d:87:db:5b:00:f7:58:0d:a4:c4:9c:
77:e7:68:ba:dc:12:b1:2e:56:1c:84:20:9c:3e:9c:2e:b8:71:
79:5d:67:06:65:96:af:b7:21:de:28:3d:0d:e8:c1:73:25:0c:
a9:1e:69:c8:59:ef:4f:2d:26:a8:74:89:5b:8e:90:c0:47:a8:
5c:bc:de:8a:2f:6c:5c:bf:5e:68:39:5a:e1:0a:96:35:08:b1:
84:39:b8:c0:81:9b:3e:7e:a6:07:60:ec:1c:87:0d:a0:c6:75:
a1:0a:e5:d6:fd:3a:a1:a2:9f:a0:9d:57:42:2a:f8:a2:4c:3a:
1c:85:ab:fc:fb:ba:f1:5f:e9:7d:b0:da:35:2e:84:e1:db:46:
36:ba:c2:62:eb:bc:de:63:62:55:07:15:41:12:f6:45:25:85:
1c:76:f4:59:48:9d:10:da:8a:8f:4a:66:fd:c4:bd:eb:15:22:
d1:ae:c9:64:c2:c7:42:a2:ef:c2:b6:9a:81:1b:06:5f:72:cd:
c6:7e:33:c1:4f:44:72:d6:a6:15:c3:7f:66:d6:a6:cb:a0:c0:
60:a7:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:19 2025 by rpki-client