Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/eV0cen4SALEFaB0YIhBhBGLUAe8.roa
File: eV0cen4SALEFaB0YIhBhBGLUAe8.roa (raw, json)
Hash identifier: BbY/tgyMSoC74M7jCUzqs9mXYlCOcvoQmFfvt8D+6KE=
Subject key identifier: 79:5D:1C:7A:7E:12:00:B1:05:68:1D:18:22:10:61:04:62:D4:01:EF
Certificate issuer: /CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Certificate serial: 01856FCB906E58B23390C58B100A19AA13E1
Authority key identifier: 4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/eV0cen4SALEFaB0YIhBhBGLUAe8.roa
Signing time: Mon 02 Jan 2023 00:04:49 +0000
ROA not before: Mon 02 Jan 2023 00:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8930
IP address blocks: 193.47.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:90:6e:58:b2:33:90:c5:8b:10:0a:19:aa:13:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Validity
Not Before: Jan 2 00:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=795d1c7a7e1200b105681d182210610462d401ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:c3:76:ad:40:01:40:0a:81:d9:00:0d:65:
92:b3:95:b6:31:74:25:bf:e9:43:a4:e0:ef:4a:1f:
03:5c:82:76:b4:0c:42:63:91:31:46:1d:94:42:27:
40:fb:20:6a:57:ea:9e:c9:f0:9d:13:9f:90:aa:51:
d1:2e:ea:be:86:c5:39:3e:4b:8f:f3:36:61:f6:69:
d1:63:ea:65:48:d3:80:5a:4e:99:90:8d:37:97:91:
20:40:81:b3:57:96:db:11:a6:8e:d6:f0:a3:49:25:
5d:85:5c:8d:c2:44:84:e4:4d:33:7e:a7:f0:f9:1f:
7d:a3:11:4c:a6:70:36:33:f1:ad:2a:90:de:51:8f:
73:4f:83:35:de:be:21:ee:94:d7:be:93:7d:0a:52:
fa:c3:44:ca:31:c2:11:a5:5f:fb:69:14:0b:0c:b3:
90:48:64:a4:62:66:6f:11:1c:5e:ce:b5:7e:b6:c3:
54:71:39:90:a4:a4:2b:c7:33:b4:f2:b9:57:4e:5c:
b5:97:26:9c:4a:a6:3b:a0:29:a0:b0:e1:96:bc:b6:
fc:95:0b:f7:6d:62:75:e7:a7:6b:37:60:ea:ee:e3:
7d:8d:f4:3b:ec:d1:77:4b:0e:6f:64:92:68:8b:49:
51:96:70:0a:20:94:08:09:63:66:25:45:68:51:ba:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5D:1C:7A:7E:12:00:B1:05:68:1D:18:22:10:61:04:62:D4:01:EF
X509v3 Authority Key Identifier:
keyid:4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/eV0cen4SALEFaB0YIhBhBGLUAe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.101.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:4d:2f:da:c6:ee:46:42:da:45:3f:8e:99:33:ad:13:a9:04:
10:1a:21:f8:a9:8e:9d:97:5a:e8:f7:94:3a:3e:d0:4a:e3:d7:
54:65:82:ad:3c:1c:21:3e:12:bf:92:93:c3:1e:2f:a4:c5:7b:
b2:b0:52:74:b1:b4:b9:a4:0c:84:db:ec:6b:10:4a:b7:63:7c:
99:85:1f:a4:f5:5c:cd:1d:88:1d:24:c1:e4:3b:bb:57:1c:31:
e1:48:ee:31:43:35:84:17:ce:ff:86:75:80:b6:48:0e:9d:56:
97:d4:74:1a:d1:44:65:c3:96:36:79:b8:49:b0:67:61:18:4c:
ef:76:9a:a1:f4:e1:4e:8f:ff:df:57:d9:1b:a7:60:82:10:c6:
ce:f2:e0:51:eb:ba:ef:5d:11:cb:f4:d0:c3:26:50:48:1c:c2:
a9:91:31:5e:01:6b:e3:aa:f5:40:db:79:e8:ae:30:58:57:84:
24:a8:05:39:4c:b4:0e:e1:3d:fe:29:e0:ba:8d:c1:1e:fd:75:
ac:63:f4:0a:44:e1:a8:4f:90:30:0a:8d:65:33:16:8a:7b:08:
96:92:ac:44:a0:19:38:d8:7a:2e:94:83:de:a7:4d:42:da:49:
bb:ec:2e:28:62:f4:62:35:8b:e3:02:40:9a:f3:01:d2:db:4b:
c9:1f:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:05 2025 by rpki-client