Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/52s32LuCbiecj7MxjjGOQiR1anU.roa
File: 52s32LuCbiecj7MxjjGOQiR1anU.roa (raw, json)
Hash identifier: 19Y+ml159iP0vPWOciylMlTm8m0AMJQzNShauMpcZac=
Subject key identifier: E7:6B:37:D8:BB:82:6E:27:9C:8F:B3:31:8E:31:8E:42:24:75:6A:75
Certificate issuer: /CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Certificate serial: 142AA542
Authority key identifier: 04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/52s32LuCbiecj7MxjjGOQiR1anU.roa
Signing time: Sat 01 Jan 2022 04:51:13 +0000
ROA not before: Sat 01 Jan 2022 04:51:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.219.118.0/24 maxlen: 24
2001:67c:788::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338339138 (0x142aa542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Validity
Not Before: Jan 1 04:51:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e76b37d8bb826e279c8fb3318e318e4224756a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:9e:3c:82:2e:63:ac:4d:8f:65:f5:e1:83:
c6:5c:43:f3:ea:c6:a6:71:a9:1c:d3:94:e9:d7:f5:
f1:5b:2d:23:df:f2:fe:5b:90:8b:ef:dc:5b:e0:45:
0e:0e:27:a4:d9:65:62:a1:95:fe:31:8a:47:72:a9:
e8:23:48:0c:28:e7:c8:73:83:8a:93:d5:c2:c3:5f:
71:67:2f:da:c0:7b:e1:54:e9:70:8c:05:4e:5f:d8:
5d:82:3b:9d:f4:c4:c5:70:be:8b:45:c8:81:24:d9:
cd:ac:c1:41:ac:35:a5:71:92:0a:60:19:33:41:f7:
8d:a1:41:80:09:e1:c1:ba:15:ef:49:df:9d:3d:84:
c0:79:fa:f8:df:c3:f0:d4:55:0b:c5:e0:89:5a:26:
29:d2:32:6b:a0:b2:b5:82:24:17:06:33:8e:63:4c:
8c:57:c3:88:32:a0:58:96:6d:dc:21:c4:68:3a:1d:
2c:8c:5d:18:c7:22:34:30:69:8e:d9:c8:9f:97:92:
40:b1:13:12:ed:9d:2f:3f:11:a5:9a:e5:d5:e6:68:
dd:24:05:40:77:45:41:12:58:a9:a6:b8:56:c1:6c:
92:b8:b0:84:6a:fc:95:3a:ee:a5:d4:8c:6d:fd:cc:
b5:46:3a:1c:7c:40:6c:e4:92:af:32:4e:8f:87:ce:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6B:37:D8:BB:82:6E:27:9C:8F:B3:31:8E:31:8E:42:24:75:6A:75
X509v3 Authority Key Identifier:
keyid:04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/52s32LuCbiecj7MxjjGOQiR1anU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.118.0/24
IPv6:
2001:67c:788::/48
Signature Algorithm: sha256WithRSAEncryption
83:51:2f:13:de:b5:12:06:5a:43:88:a8:b7:4b:52:ef:50:69:
6b:df:da:83:06:26:b7:05:68:c0:20:d1:e8:b9:e4:8e:dd:b1:
68:42:bf:c2:05:11:d1:a7:f8:5f:4c:e7:d7:dc:9a:26:5d:a5:
e1:a3:42:ea:1b:42:f0:2b:e1:c6:33:3b:9e:c9:73:be:c6:08:
53:e8:6e:4c:7d:e4:99:a6:76:ec:3f:90:96:fd:16:14:b8:fd:
f4:d5:4f:97:64:23:d9:08:3d:ef:60:a5:a2:58:02:90:2d:04:
d0:57:1f:ef:e4:0b:c5:72:16:be:14:d0:75:16:14:68:5e:31:
f4:f3:0b:ea:2f:53:84:ee:ba:c6:c9:8c:6f:18:e7:1a:19:74:
0b:50:44:04:a2:b8:c2:9a:88:e2:4b:f8:fc:c3:f7:18:19:83:
88:ef:38:6e:44:c1:a2:dc:ed:9a:64:70:91:bf:eb:4b:47:f8:
2d:ef:7e:c6:c0:eb:fc:05:03:e0:86:fd:4e:54:3d:54:4b:07:
ee:d5:c9:a8:d8:fc:ac:68:f5:75:e1:fe:5b:64:d5:8c:c7:b9:
5a:91:5c:19:6e:ea:10:76:56:91:21:14:f4:70:a4:94:2c:f7:
29:64:23:a0:12:31:ee:27:62:d9:77:13:ed:91:d3:09:5f:5d:
16:0d:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:28 2025 by rpki-client