Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/hZXyRYc6EDJZA5fCGxiViXHtQm0.roa
File: hZXyRYc6EDJZA5fCGxiViXHtQm0.roa (raw, json)
Hash identifier: S4NWkC1Yc0I7mYGtYcdmGxZSRrIVtPWBEQb84AzILn8=
Subject key identifier: 85:95:F2:45:87:3A:10:32:59:03:97:C2:1B:18:95:89:71:ED:42:6D
Certificate issuer: /CN=01d075a4e5137f879563c58997ca7576b4059ede
Certificate serial: 0186C16AA0DCB17064E50432B687D14F7E85
Authority key identifier: 01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/hZXyRYc6EDJZA5fCGxiViXHtQm0.roa
Signing time: Wed 08 Mar 2023 13:30:35 +0000
ROA not before: Wed 08 Mar 2023 13:30:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3215
IP address blocks: 193.56.38.0/24 maxlen: 24
193.56.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:6a:a0:dc:b1:70:64:e5:04:32:b6:87:d1:4f:7e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d075a4e5137f879563c58997ca7576b4059ede
Validity
Not Before: Mar 8 13:30:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8595f245873a1032590397c21b18958971ed426d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:bf:4f:bc:68:3d:f7:28:67:81:24:96:fd:
3a:57:59:87:18:4d:e2:f4:63:18:9c:97:e4:dc:dc:
f0:ff:29:91:5d:dc:c1:e5:08:60:41:f7:cf:7b:f8:
4d:39:bb:83:df:ad:b7:fb:29:8f:a4:57:66:e3:ec:
5c:3b:95:d1:52:3e:ef:3f:9f:ae:d7:b4:77:41:a7:
06:f0:11:65:ea:dd:bb:2d:4b:94:00:b5:bb:f4:a8:
ea:d7:40:ad:d0:e6:9b:f7:bc:b7:ec:81:b5:4c:2c:
bc:5e:8c:3d:2b:0c:44:b3:56:f6:00:e9:f3:3b:0a:
e6:84:6d:7e:8e:4e:fe:bf:60:13:ff:66:f2:f5:c0:
a2:29:68:3e:08:ee:30:96:30:69:3d:3c:d6:93:fe:
4a:f4:bc:cc:88:7f:61:24:9a:1e:29:e7:32:b5:03:
28:c7:dc:c3:29:fc:3b:36:2d:9d:84:a9:3f:4c:fa:
45:83:9b:a3:48:1c:84:40:72:be:dd:3c:b6:13:e3:
aa:96:1c:23:af:03:b0:0c:24:1f:e7:92:5c:18:43:
49:ef:64:f4:d9:15:ab:14:4d:3e:3f:80:36:c9:54:
61:e2:34:d8:5a:58:90:dd:1f:65:14:98:2c:0c:2a:
21:10:a9:f6:b0:f2:48:be:9e:a6:a2:c7:c0:1e:1e:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:95:F2:45:87:3A:10:32:59:03:97:C2:1B:18:95:89:71:ED:42:6D
X509v3 Authority Key Identifier:
keyid:01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/hZXyRYc6EDJZA5fCGxiViXHtQm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/AdB1pOUTf4eVY8WJl8p1drQFnt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.38.0/24
193.56.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:02:6a:f1:10:99:54:ec:72:de:92:51:51:f6:a3:d6:46:81:
c1:b2:3f:78:5c:39:21:31:ef:ea:3f:a5:3c:e3:2c:6d:38:32:
e6:6f:a3:9d:4d:55:df:fb:04:ad:61:df:59:b8:34:7b:c2:55:
e2:62:c9:2d:ee:8e:2f:32:d9:68:26:24:95:49:29:40:99:98:
d5:d8:99:a9:bc:6f:88:5e:4a:ef:d6:e2:3e:12:1b:47:06:52:
dc:ed:67:8f:02:22:13:16:40:7e:b3:ca:e0:71:de:5b:b0:44:
77:dc:67:21:83:e5:93:ee:5e:cd:09:65:28:77:16:b6:70:c6:
42:6a:3f:a1:a5:bd:63:00:e0:2d:87:ff:1c:b5:e9:9b:90:fc:
0d:c6:b6:c3:26:6d:06:07:56:fa:2c:3e:18:4a:85:ee:55:3e:
68:df:2a:d8:51:5b:e8:71:4c:6c:39:18:fb:c4:27:98:a0:28:
f7:85:78:28:c9:44:e0:38:84:a6:eb:05:c8:ed:3f:12:22:ef:
08:63:37:25:8d:d6:ac:c6:1a:c8:b9:18:88:66:c8:9f:bf:04:
af:8d:09:5f:98:12:cf:a6:6b:bd:32:d3:65:3d:c4:fb:54:78:
b6:ec:f9:f2:33:51:d5:89:e4:9b:0a:b2:1f:33:87:8c:f4:49:
63:dc:d8:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYbBaqDcsXBk5QQytofRT36FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDA3NWE0ZTUxMzdmODc5NTYzYzU4OTk3Y2E3NTc2YjQw
NTllZGUwHhcNMjMwMzA4MTMzMDM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTk1ZjI0NTg3M2ExMDMyNTkwMzk3YzIxYjE4OTU4OTcxZWQ0MjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTC/T7xoPfcoZ4Eklv06V1mHGE3i
9GMYnJfk3Nzw/ymRXdzB5QhgQffPe/hNObuD3623+ymPpFdm4+xcO5XRUj7vP5+u
17R3QacG8BFl6t27LUuUALW79Kjq10Ct0Oab97y37IG1TCy8Xow9KwxEs1b2AOnz
OwrmhG1+jk7+v2AT/2by9cCiKWg+CO4wljBpPTzWk/5K9LzMiH9hJJoeKecytQMo
x9zDKfw7Ni2dhKk/TPpFg5ujSByEQHK+3Ty2E+OqlhwjrwOwDCQf55JcGENJ72T0
2RWrFE0+P4A2yVRh4jTYWliQ3R9lFJgsDCohEKn2sPJIvp6mosfAHh63nwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIWV8kWHOhAyWQOXwhsYlYlx7UJtMB8GA1UdIwQY
MBaAFAHQdaTlE3+HlWPFiZfKdXa0BZ7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRCMXBPVVRmNGVWWThXSmw4cDFkclFGbnQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jODFiODQtNWI5ZS00YWE4LWJhOTYt
MWU4OWJlYzQ0ZTEwLzEvaFpYeVJZYzZFREpaQTVmQ0d4aVZpWEh0UW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jODFiODQtNWI5ZS00YWE4LWJhOTYtMWU4OWJlYzQ0ZTEw
LzEvQWRCMXBPVVRmNGVWWThXSmw4cDFkclFGbnQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwTgmAwQA
wTgrMA0GCSqGSIb3DQEBCwUAA4IBAQALAmrxEJlU7HLeklFR9qPWRoHBsj94XDkh
Me/qP6U84yxtODLmb6OdTVXf+wStYd9ZuDR7wlXiYskt7o4vMtloJiSVSSlAmZjV
2JmpvG+IXkrv1uI+EhtHBlLc7WePAiITFkB+s8rgcd5bsER33Gchg+WT7l7NCWUo
dxa2cMZCaj+hpb1jAOAth/8ctembkPwNxrbDJm0GB1b6LD4YSoXuVT5o3yrYUVvo
cUxsORj7xCeYoCj3hXgoyUTgOISm6wXI7T8SIu8IYzcljdasxhrIuRiIZsifvwSv
jQlfmBLPpmu9MtNlPcT7VHi27PnyM1HVieSbCrIfM4eM9Elj3NhT
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:11 2025 by rpki-client