Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/K5YtJhcfSOn3OYW27LMLoVShAMM.roa
File: K5YtJhcfSOn3OYW27LMLoVShAMM.roa (raw, json)
Hash identifier: UBuKFIakC4v8EN+/P8YpsacUF37d/6UA3xeGJHAQMB8=
Subject key identifier: 2B:96:2D:26:17:1F:48:E9:F7:39:85:B6:EC:B3:0B:A1:54:A1:00:C3
Certificate issuer: /CN=6a5694cf43356ce41722733e80dfc38887f46554
Certificate serial: 0C8327
Authority key identifier: 6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/K5YtJhcfSOn3OYW27LMLoVShAMM.roa
Signing time: Wed 27 Apr 2022 07:27:50 +0000
ROA not before: Wed 27 Apr 2022 07:27:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197945
IP address blocks: 193.150.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820007 (0xc8327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5694cf43356ce41722733e80dfc38887f46554
Validity
Not Before: Apr 27 07:27:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b962d26171f48e9f73985b6ecb30ba154a100c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:8b:a5:14:87:cc:9b:be:3e:38:c5:cc:dc:
5d:40:24:81:7b:c9:d9:50:81:21:11:21:c6:df:c9:
be:4a:53:de:5e:0e:23:f6:9b:4f:b6:4c:e9:35:ec:
09:bf:68:29:42:82:69:f7:1f:71:05:c7:9a:28:57:
bd:c7:dc:d5:93:f3:b2:7c:cc:7f:d4:fa:d9:53:d6:
4c:1e:8e:72:6d:c0:ef:95:88:76:2a:b6:66:f6:02:
02:48:21:d4:fc:ee:35:46:4f:33:71:be:a8:7b:c0:
48:da:72:fe:97:86:8f:8a:62:a7:0e:88:a5:95:52:
a6:4a:d8:4a:6c:41:a5:74:83:27:a9:51:fc:07:c4:
99:3b:3c:fa:2e:4b:27:f7:c3:ce:29:3d:83:1b:7f:
90:a7:7b:84:e8:aa:26:5d:b6:54:a5:2e:81:82:23:
2a:2e:6a:61:c2:f3:04:3e:b0:34:1a:24:56:26:44:
0e:66:e6:ad:9c:f1:a4:0a:97:f9:bd:ae:3f:a5:aa:
89:54:57:66:d8:2a:53:c7:ec:fe:72:05:fd:f5:0f:
af:80:88:90:70:8c:03:ae:3e:e6:48:25:23:9c:9e:
b1:6a:e8:1d:d2:1d:d9:9e:19:92:f3:b3:3e:d5:63:
0f:eb:4e:42:ef:7f:02:7c:78:a9:5e:6c:1b:40:b0:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:2D:26:17:1F:48:E9:F7:39:85:B6:EC:B3:0B:A1:54:A1:00:C3
X509v3 Authority Key Identifier:
keyid:6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/K5YtJhcfSOn3OYW27LMLoVShAMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.88.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2a:71:7f:0c:f4:13:36:2f:2c:3f:17:40:61:0b:f9:a2:f0:
ef:be:c9:95:3c:17:22:a3:5e:d9:ed:4e:b8:e0:3e:61:d1:17:
96:87:3c:9d:c4:af:82:ce:c6:0b:19:54:82:5b:ba:36:ea:39:
f7:6b:9d:7d:6e:db:ba:ad:f6:ab:8a:81:61:02:91:e4:2a:ca:
d1:76:80:35:6f:b9:26:7f:62:b3:82:ed:5b:5a:e3:bb:68:83:
72:47:04:6a:73:f9:ec:bc:24:b4:75:b0:5b:ec:e0:cb:f0:06:
a1:98:6c:04:8a:e2:15:17:e7:52:6e:ad:2d:e5:4e:69:40:6b:
a6:b0:df:78:93:af:02:7d:3b:a1:e8:1d:5f:00:c9:a8:b0:ff:
e6:8c:69:aa:90:d7:d0:ad:d3:22:ae:ad:1f:4a:9e:58:91:c2:
bf:e1:68:cf:7d:92:6d:80:22:a4:1e:1a:f2:e0:87:62:05:f9:
01:b8:32:79:6a:77:e1:be:5b:2b:4d:71:78:5c:85:67:77:ec:
12:9a:d7:6d:db:a0:27:e2:5e:6d:55:1b:97:44:ab:89:04:f1:
d2:82:d5:e8:44:28:48:48:c7:8a:1d:d2:33:e7:6f:6c:16:48:
dc:3b:a2:bc:6c:48:1e:34:28:5c:fa:a3:96:8d:78:ac:38:e9:
41:ba:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:24:50 2025 by rpki-client