Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/kPy615fu9-z1R1Ud1mm8-NSHscE.roa
File: kPy615fu9-z1R1Ud1mm8-NSHscE.roa (raw, json)
Hash identifier: k/+rASIVXiIc5rjNteoF7bQBgLWSu9muNkH4oCd1E1U=
Subject key identifier: 90:FC:BA:D7:97:EE:F7:EC:F5:47:55:1D:D6:69:BC:F8:D4:87:B1:C1
Certificate issuer: /CN=c712041bc389ca87c960f3d13e73d5eafc01c152
Certificate serial: 018805C977E99CD1584DC6426FB58A613C60
Authority key identifier: C7:12:04:1B:C3:89:CA:87:C9:60:F3:D1:3E:73:D5:EA:FC:01:C1:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxIEG8OJyofJYPPRPnPV6vwBwVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/kPy615fu9-z1R1Ud1mm8-NSHscE.roa
Signing time: Wed 10 May 2023 13:11:09 +0000
ROA not before: Wed 10 May 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 193.35.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c9:77:e9:9c:d1:58:4d:c6:42:6f:b5:8a:61:3c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c712041bc389ca87c960f3d13e73d5eafc01c152
Validity
Not Before: May 10 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90fcbad797eef7ecf547551dd669bcf8d487b1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:45:8e:05:5a:0d:ad:67:c4:ee:26:94:d2:
4a:09:88:4c:e9:90:a9:e4:99:d5:e9:e6:8a:bc:a2:
6e:65:10:4a:2f:fc:1e:07:ad:fe:eb:b5:2f:1c:db:
db:16:44:7c:26:b0:17:25:aa:b2:18:af:04:4f:2d:
d8:62:85:a9:a3:0b:95:1f:3e:fc:f9:f6:98:7d:63:
dd:8a:50:5d:1c:4c:82:90:57:1b:2a:0b:a3:54:4b:
3b:65:8b:bd:25:3a:e7:16:3b:f6:df:f8:ef:0b:92:
7a:38:99:ca:be:73:9e:dc:56:23:a1:d5:1f:67:9f:
3b:42:05:96:3b:a2:43:73:67:b6:b2:88:3c:4d:60:
dd:f1:0b:fc:84:fb:e5:8b:f2:79:fa:72:f2:c3:f1:
27:34:9a:60:ff:1a:eb:15:c3:69:2a:f3:aa:c8:12:
7a:a5:40:08:d2:20:48:2a:93:f4:ef:a3:31:c1:ea:
67:ad:e9:18:69:05:7d:7c:0b:60:27:7f:12:ad:ae:
a1:6c:3e:c7:a7:ef:20:de:a8:b0:89:c8:1b:dc:e9:
6a:e0:ad:d0:ed:80:3e:2b:0f:40:c0:11:09:3a:1c:
d6:22:70:68:0d:f3:f7:4b:31:32:fc:e5:3c:f2:25:
d6:98:4e:bf:b9:04:b7:03:73:7e:7c:56:27:6f:9e:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FC:BA:D7:97:EE:F7:EC:F5:47:55:1D:D6:69:BC:F8:D4:87:B1:C1
X509v3 Authority Key Identifier:
keyid:C7:12:04:1B:C3:89:CA:87:C9:60:F3:D1:3E:73:D5:EA:FC:01:C1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxIEG8OJyofJYPPRPnPV6vwBwVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/kPy615fu9-z1R1Ud1mm8-NSHscE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/xxIEG8OJyofJYPPRPnPV6vwBwVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:84:ea:8e:6a:3c:ed:4a:97:88:c3:23:dd:69:87:16:ff:a7:
9a:43:1f:7c:c4:ac:96:0b:06:03:60:73:e4:df:9f:20:27:63:
be:84:2e:02:84:8d:fe:40:fb:51:5f:32:f3:11:ac:d8:9a:ab:
af:4a:31:92:e3:7f:ad:a1:d4:70:45:f9:cd:4b:15:bc:6a:ca:
83:82:ed:f1:65:0b:93:87:81:09:c0:f3:de:d0:cf:b8:e2:17:
55:8d:db:cb:9e:50:4f:f0:ad:6f:47:20:34:09:db:53:d3:9d:
06:29:34:ac:b8:8c:cd:bb:bb:6c:b2:69:52:78:3b:3e:55:ba:
ae:6a:8f:d4:ad:28:32:b1:b9:d9:34:1e:95:89:5a:f5:6d:70:
a8:d6:9b:ee:28:c9:75:25:60:a8:a4:74:b9:71:f0:c9:0f:ec:
f3:76:05:d3:d7:9f:df:ec:0b:3f:cd:48:cf:6a:b0:e3:12:ae:
14:ee:b2:81:7f:18:dd:cd:a6:16:fd:69:20:5f:a2:06:e3:a7:
b0:d1:c0:42:82:d0:4b:8a:2b:33:3e:0a:80:2b:a5:4b:97:14:
ea:48:04:80:9d:17:f2:7f:f5:5d:30:6c:e2:e8:b2:ad:ee:79:
ea:09:64:4f:6c:c7:3e:b4:01:46:4c:0c:ec:d7:3a:84:c1:99:
67:1a:32:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:03 2025 by rpki-client