Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/w99N1pb65h1Aps5ziyCX52HgoC8.roa
File: w99N1pb65h1Aps5ziyCX52HgoC8.roa (raw, json)
Hash identifier: 4Yo0gpU22bMUPx3ZupptpPvK4QVrkF1GgYWyfFHwR0k=
Subject key identifier: C3:DF:4D:D6:96:FA:E6:1D:40:A6:CE:73:8B:20:97:E7:61:E0:A0:2F
Certificate issuer: /CN=fba0a564634f42e82cf38388991c9e7e40052a20
Certificate serial: 01877A9CB6592D946F59823E09C6EEF8D330
Authority key identifier: FB:A0:A5:64:63:4F:42:E8:2C:F3:83:88:99:1C:9E:7E:40:05:2A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6ClZGNPQugs84OImRyefkAFKiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/w99N1pb65h1Aps5ziyCX52HgoC8.roa
Signing time: Thu 13 Apr 2023 12:35:03 +0000
ROA not before: Thu 13 Apr 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.3.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:9c:b6:59:2d:94:6f:59:82:3e:09:c6:ee:f8:d3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0a564634f42e82cf38388991c9e7e40052a20
Validity
Not Before: Apr 13 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3df4dd696fae61d40a6ce738b2097e761e0a02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:f1:ec:e8:35:d6:6b:c6:f0:ab:21:dd:25:
7e:8a:0c:35:04:33:ac:42:a8:75:0b:22:b9:e8:98:
ae:aa:48:69:08:0c:79:2c:e0:10:e5:96:26:de:31:
dd:ea:63:c9:85:da:22:dd:d7:88:54:21:10:96:70:
5b:a4:19:4c:7c:d0:ad:d9:e9:92:64:79:d8:ff:1a:
0b:02:74:45:73:c8:f1:de:04:c3:e7:c7:59:8c:f6:
ed:1a:04:ca:3b:7f:34:96:de:fe:da:e7:62:24:65:
0e:2f:50:0b:05:54:12:09:cf:17:61:8d:c8:7c:5a:
59:e7:5e:86:e7:81:fe:6c:79:93:8a:b6:05:58:91:
dd:d0:72:c0:87:25:4b:af:d6:a2:41:a0:24:66:81:
b8:d6:ee:32:a2:45:1f:3d:36:6d:dc:76:83:c8:25:
d2:4c:6f:cf:e2:da:ad:5e:3a:64:a1:57:ae:f7:b9:
2a:ee:49:97:07:05:20:1c:1e:ff:55:09:22:4e:51:
25:37:7d:b3:94:83:ab:d4:3c:a1:a8:7e:a8:97:2f:
43:60:a4:99:6a:fd:3d:ab:45:32:e7:07:6c:12:fa:
35:88:6f:ec:d9:b8:61:8b:0c:a7:b5:1d:dd:21:47:
e5:cc:65:db:bb:2e:d4:82:d1:68:d0:ad:0a:01:00:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:4D:D6:96:FA:E6:1D:40:A6:CE:73:8B:20:97:E7:61:E0:A0:2F
X509v3 Authority Key Identifier:
keyid:FB:A0:A5:64:63:4F:42:E8:2C:F3:83:88:99:1C:9E:7E:40:05:2A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6ClZGNPQugs84OImRyefkAFKiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/w99N1pb65h1Aps5ziyCX52HgoC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/1-6ClZGNPQugs84OImRyefkAFKiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.175.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7c:96:26:75:3a:c0:b9:bc:89:f4:89:6a:15:3b:a2:37:97:
75:44:75:35:95:76:34:ba:cf:2b:f0:54:22:33:8a:da:7e:86:
88:3e:5b:eb:9a:2f:2e:0d:78:2b:6f:d7:29:3c:97:b3:76:89:
2d:30:a3:90:1d:0f:87:01:d7:5c:6f:c9:fa:0e:2d:00:17:e1:
81:6f:22:12:26:df:d0:09:fd:ab:ab:2b:e2:a1:fc:4d:b2:fd:
cf:a2:31:a5:ff:6e:c0:94:14:09:74:31:2d:ab:f5:89:98:02:
6f:e1:08:5f:59:86:e6:04:5f:eb:86:75:2b:ed:be:37:89:3d:
81:cf:af:15:83:f3:8b:3a:f8:d2:19:eb:e6:2a:31:ec:d1:35:
e1:9e:af:47:20:dc:97:f7:80:ba:78:52:85:1d:c5:3c:07:c9:
5e:a6:f9:fa:28:00:a6:71:ca:3f:16:b0:72:29:b0:5d:c9:9c:
14:6f:04:f4:2d:8a:08:19:cf:ad:87:70:7a:63:52:c4:65:5a:
2d:a3:e7:d2:9c:fa:ca:ca:05:f6:4f:0f:c1:e6:96:82:49:93:
7c:7d:3a:4b:88:92:a4:0e:4b:0b:52:30:ff:a6:52:14:66:96:
25:42:1c:f6:bc:29:c4:a0:85:22:a7:ac:a4:47:a8:6e:60:ff:
52:3c:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:33 2025 by rpki-client