Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/adveI7VbaLOJ6rndNSUoblbP3kY.roa
File: adveI7VbaLOJ6rndNSUoblbP3kY.roa (raw, json)
Hash identifier: cow1U0golnocOsHmGTvt6QMB2aBQCWoR4RlfUFHDSc4=
Subject key identifier: 69:DB:DE:23:B5:5B:68:B3:89:EA:B9:DD:35:25:28:6E:56:CF:DE:46
Certificate issuer: /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial: 08079ECF
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/adveI7VbaLOJ6rndNSUoblbP3kY.roa
Signing time: Sat 01 Jan 2022 03:55:32 +0000
ROA not before: Sat 01 Jan 2022 03:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 193.111.78.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134717135 (0x8079ecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Validity
Not Before: Jan 1 03:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69dbde23b55b68b389eab9dd3525286e56cfde46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:b7:c9:8f:3b:fe:4b:86:b4:b0:b8:cd:fd:
ee:45:ed:dd:31:52:21:b7:d4:0a:bd:98:be:dc:2e:
84:ea:66:5e:fe:3a:f8:bc:b3:a8:ba:d8:67:d6:81:
d0:6d:fe:fc:7a:c1:e3:cd:69:71:e3:4b:5c:ad:7a:
4b:be:3a:61:2e:80:0e:a2:bc:d0:08:04:44:74:9b:
91:b1:6e:a2:00:3b:fa:5c:e7:da:80:17:05:90:fe:
3b:41:6e:4d:6d:fc:ad:e4:d2:a9:63:9b:10:d4:d8:
bd:b6:92:8b:b1:b5:a3:7d:87:dd:e4:5e:17:98:ff:
a2:27:33:ec:55:18:80:72:86:7f:4c:23:f1:84:d1:
d7:5e:c5:75:74:45:50:b3:00:a5:24:58:84:fd:b9:
9c:17:94:aa:ac:3d:41:c0:8d:0b:2d:66:fb:8e:7e:
1a:b2:ec:95:24:f8:fb:98:64:96:84:2c:60:f5:d0:
76:fd:2f:6a:09:1b:c4:7e:4f:48:1f:cf:df:6e:0e:
46:91:b4:3b:a1:d8:cf:86:c6:3a:81:36:3a:c4:aa:
80:62:9a:ce:cb:a9:4e:23:78:c0:dd:3f:64:fa:0e:
d6:92:14:f3:7d:5e:34:ba:c5:80:84:9a:90:55:fc:
d0:e9:bd:67:b4:0b:79:f3:97:49:54:98:9e:db:76:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DB:DE:23:B5:5B:68:B3:89:EA:B9:DD:35:25:28:6E:56:CF:DE:46
X509v3 Authority Key Identifier:
keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/adveI7VbaLOJ6rndNSUoblbP3kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.6.0/24
193.111.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:10:6f:c5:7a:01:95:6c:93:5c:ed:df:1f:f0:a7:a1:ea:31:
93:82:49:77:70:08:84:e3:ee:1e:96:28:22:94:91:9a:33:8e:
ce:48:12:8b:f9:28:23:10:04:5f:85:74:11:ba:af:44:db:88:
fb:7d:5c:60:f8:ac:b5:8e:2f:eb:2c:f2:67:9a:fe:8e:7c:cc:
6f:d0:34:11:0c:e2:c0:f1:91:66:5f:6c:ab:63:53:4a:71:34:
ee:e4:01:eb:d6:78:7d:48:00:11:39:2e:b2:2e:b1:79:63:f1:
8e:ed:6c:ba:ee:f2:66:88:79:f2:0d:97:3d:0b:a6:89:06:9e:
f8:02:2e:5c:f7:0d:8b:41:3f:b2:85:2e:76:15:2c:83:1d:14:
ff:3d:7f:3c:e8:6a:8a:28:dc:a5:cd:3d:58:fe:52:b9:16:ab:
bd:bf:6c:d8:80:c0:08:29:7f:02:8d:0f:47:2b:fa:0d:c8:21:
9d:16:3c:e7:13:5a:2e:6d:57:0f:34:01:fc:08:ac:6b:72:e7:
06:21:9a:04:22:6d:42:39:65:a1:cd:e5:59:65:fa:eb:62:73:
53:c7:1a:db:cc:93:c1:b4:59:36:63:d5:ff:ee:8d:d2:28:fe:
a1:d2:ab:99:b5:a5:91:52:10:be:60:25:39:23:fd:a2:03:ed:
81:76:5a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:39 2025 by rpki-client