Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/G-DkljlLYlDMBSL-Y4cCu3GlVs0.roa
File: G-DkljlLYlDMBSL-Y4cCu3GlVs0.roa (raw, json)
Hash identifier: bW6J+oIhOjbxfBCOPRnxVopFnMEULtPUhvGVWyPV7OE=
Subject key identifier: 1B:E0:E4:96:39:4B:62:50:CC:05:22:FE:63:87:02:BB:71:A5:56:CD
Certificate issuer: /CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Certificate serial: 02BB3570
Authority key identifier: 31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/G-DkljlLYlDMBSL-Y4cCu3GlVs0.roa
Signing time: Sat 01 Jan 2022 05:54:45 +0000
ROA not before: Sat 01 Jan 2022 05:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207456
IP address blocks: 193.23.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45823344 (0x2bb3570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Validity
Not Before: Jan 1 05:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1be0e496394b6250cc0522fe638702bb71a556cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:ff:c1:cf:4c:9a:8d:5c:c6:5f:50:05:db:
e4:89:f1:3f:7f:42:c4:ab:25:0c:ab:9b:eb:ae:ce:
3f:51:75:96:7d:f3:56:af:05:c6:d7:50:8e:51:fa:
87:67:59:f7:cc:fa:e6:59:eb:08:eb:84:55:e6:70:
6c:a8:de:43:6c:ec:21:73:70:ac:5f:ef:5f:f1:c9:
fb:b1:c1:21:82:8c:97:e9:fc:33:dc:25:cd:b6:77:
f2:45:95:79:fe:f6:88:b8:d6:a3:2a:09:fb:14:b5:
bc:87:97:2e:cb:da:c0:41:32:4f:57:5a:9d:75:be:
18:04:41:2d:6d:cf:d3:cb:82:2c:6d:f8:07:71:fa:
3d:db:4a:4e:eb:92:b7:c7:05:37:43:ec:a9:94:f3:
a9:f2:4b:53:c6:24:77:fd:cd:46:4f:48:8c:4c:ba:
a5:d0:27:6b:dc:30:ff:b9:cd:94:5f:a1:28:eb:99:
bf:33:6c:38:a3:17:1c:a2:29:4e:57:78:80:26:3d:
e1:3d:99:49:6a:f4:b4:4e:36:fd:5b:40:e3:1b:41:
52:ef:6b:32:2f:9c:78:b8:3a:9b:0d:f7:89:c1:db:
33:c7:b3:f3:0d:8e:fa:85:25:03:76:07:56:21:4f:
72:a0:ea:e3:d2:5d:0d:e9:23:8f:a2:9a:d5:27:06:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:E4:96:39:4B:62:50:CC:05:22:FE:63:87:02:BB:71:A5:56:CD
X509v3 Authority Key Identifier:
keyid:31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/G-DkljlLYlDMBSL-Y4cCu3GlVs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/MYvRHaD6nJSeLkqHfF2U4U_9fbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:37:a3:cc:c3:cf:c8:c2:e8:2c:b4:7b:fb:fa:41:78:dd:4f:
37:90:ad:d1:25:d1:d6:27:92:d1:8e:d6:cf:5d:ab:2e:b6:83:
51:a4:84:98:e8:6e:72:9b:e0:47:a8:91:b9:b8:15:7c:b0:fb:
6c:99:0b:7a:59:5b:9c:da:fb:87:2a:26:32:7a:d9:de:bd:47:
4f:ac:53:1a:00:2c:77:56:80:87:1d:4f:72:45:32:86:02:f2:
c6:eb:20:47:20:9c:9f:aa:72:fa:1b:78:d1:e8:6f:51:5e:f7:
a5:0b:da:c3:4d:95:70:64:bd:a1:c9:55:9e:12:e0:a9:22:14:
7b:17:2d:d2:bc:8b:b2:23:7d:05:44:22:f3:47:4f:c6:aa:7e:
46:0d:e0:c5:ba:0e:d2:c9:f8:78:67:8e:a8:4f:7f:ea:9f:b5:
54:7f:d3:b9:32:68:e1:6f:9d:63:1c:00:e5:aa:d5:51:eb:e6:
c7:3c:b3:54:9a:ce:8f:9d:82:bf:22:43:bd:e9:71:d8:e5:16:
86:7a:02:71:c9:a2:96:c8:4c:0e:75:2e:8a:59:cd:1d:b2:d1:
f5:41:f5:de:0e:e3:7e:67:58:44:c1:21:0f:3c:87:01:cc:66:
1e:7d:1c:38:08:7d:27:35:fb:7c:dd:f1:93:c1:65:01:29:ee:
1b:05:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:44 2025 by rpki-client