Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/lOsiWTs20HJx8yifkHGL_Se0yQc.roa
File: lOsiWTs20HJx8yifkHGL_Se0yQc.roa (raw, json)
Hash identifier: U6FhSTpOJ2uw02lzzm3HfHqGnu/zDCIRUy23gr315rs=
Subject key identifier: 94:EB:22:59:3B:36:D0:72:71:F3:28:9F:90:71:8B:FD:27:B4:C9:07
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01856FF0414825A3FA58B678929A31E1169E
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/lOsiWTs20HJx8yifkHGL_Se0yQc.roa
Signing time: Mon 02 Jan 2023 00:44:54 +0000
ROA not before: Mon 02 Jan 2023 00:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12333
IP address blocks: 193.135.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:41:48:25:a3:fa:58:b6:78:92:9a:31:e1:16:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Jan 2 00:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94eb22593b36d07271f3289f90718bfd27b4c907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:a8:8a:41:fd:a0:70:c6:9a:4d:c8:86:8b:
88:36:aa:e8:70:ee:cb:ae:00:06:a1:55:74:2b:54:
79:4e:4b:e2:ca:66:25:c8:d6:eb:b2:07:95:44:54:
c5:ba:35:fd:79:08:b4:1f:59:89:c4:c6:3b:54:bd:
cf:da:bb:9f:c8:8c:0f:aa:71:ae:56:0c:10:c6:ee:
77:bd:48:df:37:e3:87:f4:8d:7c:62:82:b6:4e:8e:
b2:a6:37:58:97:8c:33:bf:45:bf:eb:40:20:05:f7:
07:ff:57:ed:fd:d3:1b:fd:6f:b8:60:01:6a:3c:f2:
ee:ca:e5:8b:03:ff:2c:2f:3e:4c:ec:ba:60:41:1d:
4c:c7:6d:86:f8:e4:49:f8:78:66:16:9e:86:88:c4:
41:10:a9:61:e9:bc:ea:f5:47:dd:be:df:c4:35:2f:
d5:df:fd:26:f3:74:05:f4:48:85:f6:50:7a:6c:8a:
4e:32:9a:3f:a6:1d:d1:60:e7:2d:9e:09:d9:aa:7e:
49:1c:fc:1a:5c:96:fc:0e:0c:14:e8:ec:f6:7a:59:
37:9d:2f:67:56:60:6b:d8:ca:f6:6e:21:f0:8f:60:
33:98:37:21:ed:77:8e:06:97:87:14:f0:46:17:1e:
9f:18:3e:ad:4f:88:1c:20:64:fb:40:5c:5f:65:80:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EB:22:59:3B:36:D0:72:71:F3:28:9F:90:71:8B:FD:27:B4:C9:07
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/lOsiWTs20HJx8yifkHGL_Se0yQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.166.0/23
Signature Algorithm: sha256WithRSAEncryption
35:14:0f:c0:68:f8:fb:f5:bd:13:15:a6:27:39:32:79:a0:f6:
b6:c4:9e:bf:1f:19:f0:d7:92:16:93:91:9c:8c:84:b3:c2:47:
b3:79:89:4d:c5:0c:27:5e:15:33:9f:70:75:1e:e2:da:59:75:
4c:37:dc:0d:51:dd:13:4e:bc:ff:25:15:dd:e8:d1:ef:69:7e:
b9:22:6d:fb:83:0c:f7:64:85:4c:68:03:e4:cc:2a:94:1b:f5:
c5:31:c0:60:63:1a:d2:04:79:e1:2b:8b:9f:50:50:ab:45:4b:
6b:68:5f:c5:62:6b:bf:e9:29:f5:4e:63:86:36:ea:00:3d:5b:
8c:8a:96:5f:03:9c:b0:ba:48:1e:62:63:6e:1c:29:e6:a9:bf:
cc:e6:bc:14:4d:41:e8:bc:cf:9d:3b:15:7d:54:a3:77:08:7c:
e7:8f:b2:cf:1f:03:6c:50:20:27:e1:97:2c:cb:0c:7f:d3:a4:
f2:09:b0:09:37:de:47:4e:8d:e8:b0:78:55:4e:58:49:5b:8f:
a8:6f:30:2d:b2:db:37:01:f0:37:8e:3b:92:9f:e5:14:c7:57:
2c:50:22:c8:ea:a8:77:1c:a6:00:ff:f7:9e:97:fc:b2:66:43:
f8:18:77:60:43:2d:ff:89:7b:17:13:c6:cd:0d:e5:19:29:5a:
cd:86:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:35:33 2025 by rpki-client