Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/7D-chdyrvrQnPWucKYGX-xiXxlI.roa
File: 7D-chdyrvrQnPWucKYGX-xiXxlI.roa (raw, json)
Hash identifier: ZgH9PnDZiyFni6g5zi9MEuUM8Uq3DLHVdc5lYZ1+kd8=
Subject key identifier: EC:3F:9C:85:DC:AB:BE:B4:27:3D:6B:9C:29:81:97:FB:18:97:C6:52
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 01879E809DB6F1FE690EF23606D5B1AE9D95
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/7D-chdyrvrQnPWucKYGX-xiXxlI.roa
Signing time: Thu 20 Apr 2023 11:50:41 +0000
ROA not before: Thu 20 Apr 2023 11:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 193.56.173.0/24 maxlen: 24
193.56.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:80:9d:b6:f1:fe:69:0e:f2:36:06:d5:b1:ae:9d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Apr 20 11:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec3f9c85dcabbeb4273d6b9c298197fb1897c652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:58:04:e1:22:ae:8a:32:23:ee:cd:b9:91:
29:20:33:ca:bb:db:e1:d3:61:68:11:41:a7:24:af:
76:da:af:ed:a1:a0:61:30:4d:4d:4f:f1:08:6d:c1:
4e:6f:9f:60:6a:5b:0c:79:dd:13:0c:6c:55:e8:67:
1e:aa:a6:c7:9f:d5:78:42:a1:73:aa:d5:c2:ac:bc:
75:97:42:1c:86:f5:f5:c5:04:4c:d9:7d:7a:7a:17:
8a:c2:f3:b0:de:0b:f1:0a:2c:62:a6:ac:8c:2b:ce:
d6:45:71:6f:69:80:a7:a0:29:5f:65:b5:cf:0b:17:
07:c4:b1:e6:67:43:66:83:24:cd:94:41:a3:bd:d2:
d7:a4:de:02:e0:3a:a6:94:da:a6:49:d7:4e:2a:4a:
d1:f2:dd:ab:9c:fc:25:30:48:0a:00:6e:8a:eb:52:
4a:e7:12:af:9d:c8:8a:a3:64:5a:c6:c2:27:92:98:
da:55:6b:0d:53:79:36:dd:00:af:6e:ce:b6:84:d1:
9e:38:2b:98:e3:9c:ba:bd:fe:34:5e:17:16:06:fa:
09:90:6d:d7:d0:d8:b7:96:bf:31:16:e4:f8:db:d0:
c3:86:78:37:1f:76:f7:e4:d3:ef:ca:60:99:c1:a7:
bc:76:95:1e:27:f2:88:78:7e:de:3d:0d:23:d4:3e:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:9C:85:DC:AB:BE:B4:27:3D:6B:9C:29:81:97:FB:18:97:C6:52
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/7D-chdyrvrQnPWucKYGX-xiXxlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.126.0/24
193.56.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:13:fb:e2:6b:97:a1:7e:e2:58:ec:e3:ef:7b:d8:03:24:94:
c2:ed:22:78:52:fc:9d:c4:ae:22:72:d1:a3:5e:85:fa:5d:c3:
ce:66:73:05:11:61:66:08:47:63:46:3c:a3:70:10:cc:e0:a5:
76:43:a1:4d:5e:6e:59:e0:cd:dc:28:a8:ec:09:05:2b:2d:b7:
f6:00:b8:37:05:36:d3:01:e8:4d:86:87:25:e5:32:b0:3b:b0:
cd:4c:d2:bc:83:e8:3e:24:cb:bf:90:82:41:bf:ca:54:2b:ae:
7c:7a:40:57:0e:a1:e4:a1:8b:d1:37:61:59:e8:4d:c6:72:d5:
10:a7:78:2b:7d:fe:17:4f:d7:e4:a2:01:8f:76:18:18:3c:ef:
51:86:6d:63:ed:b8:5b:2f:a0:53:a9:a0:6b:83:0d:20:b8:21:
e2:31:f5:0a:ef:e2:51:fc:30:9f:cc:a4:55:2d:96:b9:a6:bf:
bb:d9:28:a0:d7:19:b1:22:48:b5:24:27:a5:e0:d6:11:22:c5:
5f:ea:60:b8:27:10:f3:89:1c:ab:6d:71:7f:5d:04:88:82:80:
1f:e6:1b:90:14:9b:6a:44:ec:cc:71:57:58:14:8a:9c:f8:ad:
d9:18:5c:7c:23:1d:8e:b1:98:08:97:29:e3:66:cb:92:26:90:
d1:64:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:10 2025 by rpki-client