Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/N_nVyzhFi4bKC6WHRf5Ur9gmPI4.roa
File: N_nVyzhFi4bKC6WHRf5Ur9gmPI4.roa (raw, json)
Hash identifier: dgQZDoatLJopkCGBjaOMRe4g8+7d+/cceEXR+Crq8IA=
Subject key identifier: 37:F9:D5:CB:38:45:8B:86:CA:0B:A5:87:45:FE:54:AF:D8:26:3C:8E
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 048CDAC9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/N_nVyzhFi4bKC6WHRf5Ur9gmPI4.roa
Signing time: Mon 17 Jan 2022 10:01:55 +0000
ROA not before: Mon 17 Jan 2022 10:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54252
IP address blocks: 193.109.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76339913 (0x48cdac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 17 10:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37f9d5cb38458b86ca0ba58745fe54afd8263c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:85:3d:97:38:a6:ec:14:32:29:e7:fd:fc:
d8:08:9b:8a:c2:66:1f:f1:35:79:43:3e:e4:94:37:
f7:82:85:35:c8:82:0c:6a:fc:dc:47:5a:66:83:fa:
a4:a3:10:8d:38:fe:74:3c:bc:29:6a:be:ec:d7:9b:
e1:33:fa:3b:e6:22:21:db:09:ff:22:e6:7d:35:aa:
c2:e6:38:77:5f:2c:dd:43:da:3c:7d:1e:88:a9:11:
69:ac:ee:59:9c:94:b4:25:57:f3:d5:d9:54:d5:1d:
20:bc:b2:30:cc:8c:65:8d:d1:44:eb:62:0d:a2:2a:
a8:12:71:2a:eb:9c:0d:d4:54:2e:7f:31:bb:02:71:
1e:3a:12:8e:33:26:89:33:bb:99:3f:2d:dd:3f:81:
96:1d:50:bf:94:fc:ad:a4:16:94:d1:ad:58:35:30:
da:74:8c:f9:98:8e:12:c1:2b:3f:58:8d:29:d7:4d:
1d:cb:98:db:2a:b8:98:85:5f:38:bb:58:fd:df:6c:
8a:06:1f:b8:40:e3:a0:80:0c:3e:c0:e4:49:fb:1a:
f7:c5:e9:3c:b4:c7:4e:c7:04:07:32:ac:7d:37:12:
e2:72:b2:b5:69:d2:ee:6f:d2:ab:6e:2f:4d:46:eb:
92:c6:fc:f9:64:ba:92:f1:f5:15:17:5e:a3:96:8f:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F9:D5:CB:38:45:8B:86:CA:0B:A5:87:45:FE:54:AF:D8:26:3C:8E
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/N_nVyzhFi4bKC6WHRf5Ur9gmPI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:33:64:38:1a:1d:8d:d7:5b:f3:9a:2f:f3:9f:bf:7b:c5:63:
9e:0f:71:e0:28:c8:59:72:ed:9c:9a:e3:59:08:33:9c:8d:26:
43:73:86:7a:b0:18:bc:7c:58:c4:98:16:e2:25:c9:73:02:97:
c5:5a:a7:e5:6f:ba:1f:11:82:60:ca:db:eb:6f:94:3c:8a:18:
3d:29:76:fa:58:c6:d0:c9:a4:22:0c:cd:ab:27:91:72:7c:07:
07:ad:81:d5:6d:85:64:d8:f6:d7:75:89:3e:6d:ab:c4:8d:c8:
af:c2:d7:9f:f5:7c:b5:6b:f0:19:d7:59:16:c2:e0:90:a9:1d:
30:6f:bd:c6:af:27:51:a6:be:a9:3b:43:6a:db:fc:46:47:c4:
b7:11:f8:08:09:4c:48:5b:69:07:92:bb:d8:18:47:4f:49:4a:
23:36:12:ba:f1:2c:18:cb:cd:16:c4:1d:ef:52:38:65:4e:68:
00:7d:12:90:cb:7f:a0:d1:71:3e:86:d9:14:1b:a7:1e:54:ae:
95:08:f2:d9:d9:a6:d3:66:c5:20:21:ff:82:9d:7e:f2:5f:3a:
fb:77:c2:73:21:53:6c:9e:14:eb:41:15:1c:fe:ec:a9:3d:16:
65:a0:37:19:12:45:b0:51:9b:50:bb:a9:92:1f:be:86:c6:90:
74:91:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:18 2025 by rpki-client