Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/OU1mZrtPjWGsSyJMhh_rowYPagM.roa
File: OU1mZrtPjWGsSyJMhh_rowYPagM.roa (raw, json)
Hash identifier: qzvQY8zQcOpHdw49Xswxp27Ga5ZULqKF95zCAtVY/iM=
Subject key identifier: 39:4D:66:66:BB:4F:8D:61:AC:4B:22:4C:86:1F:EB:A3:06:0F:6A:03
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01837D357164D785D775D3D1F18FF302B8A3
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/OU1mZrtPjWGsSyJMhh_rowYPagM.roa
Signing time: Tue 27 Sep 2022 04:29:57 +0000
ROA not before: Tue 27 Sep 2022 04:29:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 193.176.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:35:71:64:d7:85:d7:75:d3:d1:f1:8f:f3:02:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 27 04:29:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=394d6666bb4f8d61ac4b224c861feba3060f6a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4a:a0:ba:a4:07:96:99:25:00:31:ee:79:84:
3e:5c:37:21:8f:fd:3f:38:d4:fe:e2:a9:84:5e:95:
2b:15:f7:92:98:45:4c:b7:2d:86:58:b7:ee:97:ec:
eb:c1:ee:18:bc:24:03:58:13:59:45:24:be:05:6c:
0b:84:9f:c5:01:dd:da:2d:d2:82:f4:86:b6:eb:4e:
07:d4:de:12:c9:70:f8:18:fc:d2:ce:bf:94:c7:e1:
19:ba:6c:93:1a:22:ef:06:b6:4f:4a:b1:1f:62:90:
d4:eb:17:0c:91:97:5f:a6:7a:dd:51:59:4d:3d:12:
39:a3:be:b4:fa:cf:94:6c:60:af:ea:2e:dc:1b:18:
e2:5b:6a:31:4c:57:bb:d3:a6:e7:55:b3:dc:0c:a3:
76:e3:29:e2:41:7f:fe:69:9c:50:8c:19:6a:05:6c:
57:f1:7b:5e:33:e0:d8:b6:cd:d7:71:83:66:e3:91:
c9:5c:cb:fc:54:9d:c2:9c:77:de:16:ab:fe:90:a1:
56:f6:a1:44:4c:10:4c:76:5c:9d:e8:09:0f:0e:89:
4b:65:91:28:16:5d:02:ac:cb:b7:96:38:87:5c:e9:
5b:70:99:5b:e5:90:5f:e8:27:8b:2c:ae:1b:a1:6e:
cb:da:5f:ca:d5:f1:b8:1a:4c:a6:9c:0a:3a:dc:f1:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4D:66:66:BB:4F:8D:61:AC:4B:22:4C:86:1F:EB:A3:06:0F:6A:03
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/OU1mZrtPjWGsSyJMhh_rowYPagM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7f:ea:7f:f7:84:bc:a7:7b:33:d9:4d:62:c6:4e:11:05:01:
49:df:68:79:6a:85:a9:de:93:1c:55:3b:a4:04:b0:5b:45:b7:
55:24:31:8d:8e:69:cc:9a:95:db:4f:79:c1:ed:50:4c:ee:1e:
f4:63:0b:53:ba:8f:3d:d9:75:e0:8e:3c:ae:06:3c:db:96:51:
5a:74:55:4d:b2:95:30:f1:aa:a8:96:06:8a:f5:93:e8:d3:dd:
df:8b:fd:86:f6:a8:e1:3e:ae:58:fb:de:0d:03:21:94:0c:a4:
ed:c4:07:07:fe:73:1c:76:53:74:b5:bc:46:be:f6:1e:ac:13:
d3:e4:34:02:77:b5:b6:91:53:e9:6a:21:4a:ad:5a:59:e1:08:
87:47:46:6a:86:80:26:88:c7:52:65:a0:7c:04:e0:02:36:1d:
9c:60:5b:50:5c:84:71:98:48:ab:32:aa:a9:68:63:e0:d7:1f:
fd:fb:ce:cb:fa:8b:7e:ef:96:11:ae:e5:d7:52:9c:58:fa:92:
04:15:92:db:91:bd:57:e1:52:f7:c0:bd:e1:f9:32:ec:de:f5:
3c:27:68:21:2e:7b:d3:f2:17:1b:bc:11:00:d3:12:8b:3e:6c:
5e:ec:36:bf:9f:8c:38:16:62:a7:2d:3a:ff:2f:97:bc:38:db:
d1:12:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:44 2025 by rpki-client