Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/53Cd6ksm6jJ9RlO5imUtuWj1rJA.roa
File: 53Cd6ksm6jJ9RlO5imUtuWj1rJA.roa (raw, json)
Hash identifier: cQll3lCbJxJtoxzsBZdQMm8ZJ1gmBBCp3yO2flYfKKU=
Subject key identifier: E7:70:9D:EA:4B:26:EA:32:7D:46:53:B9:8A:65:2D:B9:68:F5:AC:90
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01941FFA9DE079F509308D7902E8BADF569E
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/53Cd6ksm6jJ9RlO5imUtuWj1rJA.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213772
IP address blocks: 193.187.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9d:e0:79:f5:09:30:8d:79:02:e8:ba:df:56:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7709dea4b26ea327d4653b98a652db968f5ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:9d:44:25:a9:cd:7c:ef:f2:8f:ce:0a:5d:
67:60:3f:be:06:7a:04:64:67:7a:d5:46:c9:e7:2e:
4c:4c:cc:f8:fb:d4:55:5e:81:28:ca:a0:80:bc:19:
8b:e4:c0:02:54:e8:6f:18:9e:37:62:13:9e:76:47:
1a:a9:ef:c8:9d:a5:15:38:a2:63:b9:de:0f:56:df:
68:d3:0e:52:98:58:ac:5e:2c:4d:53:38:c4:da:2f:
60:33:ac:84:d1:8f:e5:32:2c:32:3a:af:58:4e:bd:
2b:65:f5:67:04:37:96:c3:10:ea:3e:8e:7a:62:74:
73:dc:a1:ce:57:f8:9c:31:cf:58:c4:b0:b1:72:19:
a7:e6:93:9f:80:d6:b5:bc:79:ad:f0:98:e9:74:c7:
df:49:ef:dc:a6:9c:76:de:37:85:a4:fe:ae:41:2b:
62:54:1d:f6:18:44:05:a0:bd:73:21:dc:78:b2:5b:
27:b3:99:7a:0b:01:03:c1:81:36:9b:cc:ba:9a:6e:
f9:eb:3c:94:04:e2:0f:13:c3:88:b8:d7:c9:b1:e8:
39:18:3c:51:49:77:f7:7b:fb:b7:89:97:b4:e4:84:
4a:8a:66:0e:ed:78:11:ce:a9:45:5c:5b:3f:0d:14:
f2:bd:4f:df:ae:8f:65:56:24:1e:cc:fa:db:9a:9d:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:9D:EA:4B:26:EA:32:7D:46:53:B9:8A:65:2D:B9:68:F5:AC:90
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/53Cd6ksm6jJ9RlO5imUtuWj1rJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:41:15:0d:8f:a8:19:25:7f:37:a8:f9:5c:2e:21:64:c4:67:
d7:8d:08:34:d7:86:b4:d2:d0:be:d6:5e:64:c7:96:5d:b8:c6:
4f:fc:c4:de:e4:38:e8:8a:2a:a4:d8:c6:04:9f:9b:66:fc:4d:
fa:b4:d2:78:31:a1:f1:40:db:19:22:ba:ce:17:4d:78:09:81:
23:23:0f:04:e9:f8:f4:68:3f:5b:20:a1:73:6a:23:d9:9a:14:
e4:2b:1c:a7:6d:cb:1a:ee:b5:01:b7:f1:e3:91:e5:1d:89:0f:
31:9a:64:75:1a:82:83:a3:2f:ab:d1:18:9f:6f:42:e9:a7:60:
59:79:0a:8b:11:8d:f2:86:79:86:e9:48:55:55:e2:4d:c7:4d:
5d:32:61:a8:8b:68:54:58:ef:2d:0b:e3:ba:d2:bc:30:df:ec:
30:d4:4c:b3:dc:43:eb:83:fb:69:c1:26:9f:cd:be:0f:95:0a:
6d:d3:e7:39:84:fa:f6:a8:e6:f9:8e:aa:58:a5:09:f6:56:93:
e6:49:1c:28:f6:ae:58:47:8d:1d:2e:78:f8:4f:a5:46:57:2f:
fb:ca:e1:c9:dd:da:ac:30:10:7c:ab:7b:26:59:03:dd:29:a3:
b8:ec:78:d1:82:68:94:13:30:f3:6f:43:3a:16:05:82:cd:27:
4b:07:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:22:40 2025 by rpki-client