Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/GTsykUQcVJt-laD5l0rH6h8Aw7U.roa
File: GTsykUQcVJt-laD5l0rH6h8Aw7U.roa (raw, json)
Hash identifier: nxRC29f+Qkd30pE3U4K4i725JUIcteaU+Vst8YTmhxs=
Subject key identifier: 19:3B:32:91:44:1C:54:9B:7E:95:A0:F9:97:4A:C7:EA:1F:00:C3:B5
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 01850649D976207C7B3F5A01FB0C454E3ADF
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/GTsykUQcVJt-laD5l0rH6h8Aw7U.roa
Signing time: Mon 12 Dec 2022 12:23:01 +0000
ROA not before: Mon 12 Dec 2022 12:23:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197071
IP address blocks: 193.56.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:49:d9:76:20:7c:7b:3f:5a:01:fb:0c:45:4e:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Dec 12 12:23:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=193b3291441c549b7e95a0f9974ac7ea1f00c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:d3:5a:6f:52:12:47:4c:44:fc:dc:fb:85:
ba:02:74:f9:21:36:c3:8c:88:d4:19:6c:3c:77:61:
f2:8e:fb:0c:d6:d5:83:11:a8:5c:2d:d1:ec:6a:26:
e7:c1:ff:79:79:f6:ea:c9:90:44:f4:e2:88:ba:5f:
9f:34:6f:d4:4a:04:b0:14:fb:b2:89:18:03:e6:c2:
bb:5f:97:51:b5:8b:63:5b:53:a9:36:be:ef:7a:1d:
c3:15:a8:2a:67:dd:78:59:57:5c:a1:e8:b5:b1:13:
12:1f:7d:dd:2e:02:63:d7:e7:20:ae:53:bb:8e:e6:
5b:02:c5:ae:57:71:c6:30:44:bf:32:69:eb:5c:99:
45:e5:4d:4c:c9:d9:6f:a2:63:8f:f0:22:a5:9e:cd:
0f:87:cc:bd:80:cc:da:52:86:3e:6a:7b:1a:82:47:
f4:af:4c:4a:e0:72:c8:d0:99:47:67:0a:06:26:0c:
8d:f7:5b:82:b3:b9:19:07:c0:8c:8d:66:dc:3b:d3:
91:8d:7a:40:b9:a3:32:9f:a7:f8:ce:05:a8:4d:6a:
05:85:7a:9c:d5:a9:91:42:a4:c5:c2:f7:d2:c9:10:
34:ec:4a:2a:c7:07:d0:44:35:f8:0b:57:94:0a:12:
61:3e:ec:27:70:87:cc:09:a5:91:bd:c3:8e:75:7a:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3B:32:91:44:1C:54:9B:7E:95:A0:F9:97:4A:C7:EA:1F:00:C3:B5
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/GTsykUQcVJt-laD5l0rH6h8Aw7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a9:b2:7b:a7:1d:a9:29:7e:d9:e2:f1:bb:70:18:40:92:aa:
3c:c9:21:7f:ee:22:a9:f3:9f:8a:dc:43:81:88:d1:c5:41:6c:
34:23:e9:25:e7:54:67:1c:97:9d:2e:83:74:71:3b:7b:1b:a3:
09:07:85:eb:fa:c8:aa:44:99:92:7f:9f:f6:33:d8:90:fb:c4:
98:20:b4:24:65:b8:c4:7f:9e:16:e7:a4:29:8b:eb:db:6f:c9:
6e:d7:20:15:3e:99:93:b5:40:1f:f2:19:5d:91:b9:c3:04:85:
a4:ca:40:c1:a5:38:7f:8a:f1:00:a2:dd:86:ab:23:b4:c9:9b:
ab:b5:97:cc:05:b3:5e:0d:9c:5f:90:b8:6c:a9:1a:ce:2d:16:
92:60:2e:fe:55:f7:76:7f:31:f4:df:e1:97:48:75:f7:50:ee:
f6:1f:05:75:c1:25:7d:06:43:bb:10:14:f6:05:ca:ff:0a:6b:
62:24:13:13:ec:88:7d:43:8a:ed:09:bf:36:83:02:29:5f:3a:
4f:21:5d:f9:22:ee:93:79:92:bb:32:22:9a:0d:7d:67:d1:aa:
7f:88:5f:30:2b:de:1c:67:b6:de:7b:67:bf:8d:97:42:f9:e9:
20:c2:10:20:25:78:e5:74:c1:c8:37:06:b6:06:99:75:47:98:
a1:3e:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:56:40 2025 by rpki-client