Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/_cOpqdXJGIaJ8-JF55LW0bRUT5Y.roa
File: _cOpqdXJGIaJ8-JF55LW0bRUT5Y.roa (raw, json)
Hash identifier: GjklOiut9tXRvvaJu9iBZP0fPchNws+cMJmRmcpXt7g=
Subject key identifier: FD:C3:A9:A9:D5:C9:18:86:89:F3:E2:45:E7:92:D6:D1:B4:54:4F:96
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018570DE4EA6DE3A7ED9207D92FAA86458A2
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/_cOpqdXJGIaJ8-JF55LW0bRUT5Y.roa
Signing time: Mon 02 Jan 2023 05:04:55 +0000
ROA not before: Mon 02 Jan 2023 05:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212166
IP address blocks: 193.30.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:4e:a6:de:3a:7e:d9:20:7d:92:fa:a8:64:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 2 05:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdc3a9a9d5c9188689f3e245e792d6d1b4544f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:79:c8:fa:35:f0:da:7b:3f:5a:d6:42:42:
46:8c:b0:8e:88:4b:92:a4:15:8c:cd:d6:99:8d:da:
49:76:35:3c:d9:db:b0:46:a7:04:59:b7:76:d7:4f:
eb:eb:5b:38:13:e5:28:5a:88:f3:e9:8e:81:87:9c:
1c:df:e7:a1:ed:34:e5:40:fd:2d:43:fd:ba:38:02:
56:da:12:5a:55:e5:1b:0c:4c:bb:d6:db:e1:e0:bb:
9b:00:90:20:f5:d0:2d:a0:bb:f7:07:e7:ca:ba:46:
4d:ab:e6:61:96:4f:33:b1:e0:d0:b9:3b:7f:e1:69:
cc:62:12:9d:53:3b:54:23:f1:bf:bd:de:7f:b0:e2:
41:49:bc:5e:97:6d:5e:2d:fc:a0:1b:7b:c3:a4:87:
6c:c7:c3:d5:fb:ce:e2:f5:de:5e:74:15:20:be:42:
fb:9e:3e:df:7d:d8:df:0c:32:f9:5b:21:1f:3c:9a:
00:ef:c4:a8:14:de:28:e7:93:39:17:11:3a:fd:2d:
72:cf:02:cc:76:f0:31:50:44:26:ae:9f:6e:a9:2e:
17:e4:99:7d:30:15:4c:d8:cc:c8:86:7a:80:da:09:
b7:e9:24:eb:a4:ad:dd:52:3b:b5:ec:5e:25:3b:ba:
cc:78:e3:96:6e:59:26:7c:e0:3f:e6:9c:dd:aa:0f:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:A9:A9:D5:C9:18:86:89:F3:E2:45:E7:92:D6:D1:B4:54:4F:96
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/_cOpqdXJGIaJ8-JF55LW0bRUT5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.101.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3e:37:67:e6:08:73:90:af:f3:9e:5c:dc:87:74:21:ef:60:
b2:2f:3e:7f:ed:3e:7f:1a:e5:be:3e:fa:f2:4f:f4:c7:fe:d1:
ee:2f:2a:1b:01:19:88:c0:15:22:90:a1:ec:cd:a3:a7:6e:ff:
4a:d4:e4:16:9a:e0:2c:ab:d1:0b:56:35:aa:ca:3a:86:95:91:
40:41:72:ec:08:61:6e:8e:b9:93:67:00:f1:a7:ef:ee:e6:8e:
ec:70:93:dc:85:ea:41:ff:6e:d7:db:73:67:ad:ae:4d:82:aa:
e3:5c:6c:91:81:8b:a8:53:de:ff:b4:b9:6e:6d:92:02:52:31:
e5:d4:4b:05:3a:9b:d1:08:69:72:4a:9c:89:6f:d4:be:a6:ce:
27:36:9a:bc:32:10:4d:6b:b8:c9:4c:7f:96:09:e1:a0:d6:07:
b9:cc:8d:05:5c:99:8c:a5:99:fb:1b:d0:7a:48:87:86:34:19:
a4:52:71:b8:33:a3:bd:ae:67:48:1b:12:79:50:24:82:c6:6e:
c8:ea:3a:33:34:ac:52:0d:c2:58:9c:58:d6:85:39:9a:f6:93:
b3:19:14:75:fe:aa:6c:56:f5:ce:f5:c4:90:d8:d1:d9:19:ed:
2e:9d:5d:78:6c:b6:b4:e4:92:4c:da:7d:76:27:14:28:d9:1a:
6d:52:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:56 2025 by rpki-client