Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/BR8A5tkartY4kBNt56F-GrLkdmE.roa
File: BR8A5tkartY4kBNt56F-GrLkdmE.roa (raw, json)
Hash identifier: yrkKzbxGc1C6vQgKM6czgb11pgCHneWp7Ucs3ISZzLE=
Subject key identifier: 05:1F:00:E6:D9:1A:AE:D6:38:90:13:6D:E7:A1:7E:1A:B2:E4:76:61
Certificate issuer: /CN=4383c38e193ecde277cac8f09da4187faebda616
Certificate serial: 018ABE3287B5C1E0A1F68E9BEEB7666F3B7F
Authority key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/BR8A5tkartY4kBNt56F-GrLkdmE.roa
Signing time: Fri 22 Sep 2023 18:41:37 +0000
ROA not before: Fri 22 Sep 2023 18:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211376
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:be:32:87:b5:c1:e0:a1:f6:8e:9b:ee:b7:66:6f:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4383c38e193ecde277cac8f09da4187faebda616
Validity
Not Before: Sep 22 18:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=051f00e6d91aaed63890136de7a17e1ab2e47661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:56:44:b8:c6:20:fa:e4:77:4c:a6:83:80:
7b:1f:a0:d6:cb:b8:a3:f3:99:2c:d6:94:3f:db:b3:
08:44:ce:1a:c2:fd:99:7b:34:60:b4:f6:22:9d:1e:
55:fc:da:b7:29:14:c6:d8:76:c1:f6:42:29:ee:92:
58:cc:3e:f0:77:14:ba:0d:62:43:9f:06:0f:92:1c:
5a:e6:4f:ed:7c:10:de:a3:23:b9:ae:38:c0:ef:92:
59:72:10:df:0b:25:b3:8e:30:6a:19:30:55:c4:18:
ef:45:fc:a3:44:cd:77:60:96:80:82:56:eb:06:df:
34:62:04:b1:f4:35:b9:01:68:5e:0f:d4:c6:42:b3:
38:04:bc:73:7f:3f:40:7f:2a:e7:bd:b0:39:16:42:
29:3d:f9:ca:a0:e7:11:d1:a3:b6:d3:ea:27:cd:30:
25:80:6b:bc:f9:4a:10:f3:dc:3b:9c:85:6f:42:33:
7a:6c:b7:18:71:9b:75:8d:d1:61:de:84:bb:f3:ed:
c1:60:ce:d2:d0:b9:81:78:7e:55:98:3c:09:d7:74:
3a:aa:e2:51:16:6d:c3:86:4b:09:fc:9c:d2:80:3b:
d5:b5:e4:3c:05:97:b1:19:04:5e:cf:7e:55:52:08:
83:fd:d1:bf:a4:cc:ce:25:5d:bc:29:d8:23:30:48:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1F:00:E6:D9:1A:AE:D6:38:90:13:6D:E7:A1:7E:1A:B2:E4:76:61
X509v3 Authority Key Identifier:
keyid:43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/BR8A5tkartY4kBNt56F-GrLkdmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7d:1e:c5:85:5b:80:0d:04:d9:4e:47:27:90:c4:2c:65:ef:
05:50:3d:90:2e:88:3d:7d:3d:1f:83:b3:aa:e0:35:8a:75:69:
1b:fc:34:48:42:9b:1b:8d:53:e6:21:c9:42:80:fe:84:04:d9:
ff:e2:da:53:4f:d0:bf:17:8d:49:80:99:98:33:a2:15:30:6d:
56:b1:7a:f2:48:43:19:bf:27:91:cc:16:84:b5:35:87:db:98:
1a:2d:b7:26:80:36:46:b0:14:a5:46:a7:07:e3:7d:bf:12:61:
83:91:46:f5:c0:a3:49:79:da:ca:a3:22:c6:3c:fb:ea:03:68:
7a:79:36:ae:d5:20:b3:2e:4b:d5:a6:29:ba:97:26:f0:21:70:
47:4a:73:c7:7b:9a:f4:e9:18:54:d2:f9:ed:62:f9:fe:6f:28:
cd:c7:de:d7:b2:42:4b:c2:98:22:56:a0:1d:4d:0b:4e:bc:13:
fa:e3:0c:0f:59:11:8b:4a:d0:63:6a:07:dd:0a:d1:3f:81:33:
f9:23:55:23:8d:ca:2a:2b:8a:a1:60:39:e5:41:bf:fa:38:77:
24:de:8a:01:58:35:c5:8b:79:8d:9b:b9:f0:60:45:69:c9:c6:
ff:fe:0a:7a:95:d4:87:59:15:9e:aa:1b:ae:54:63:53:94:dd:
84:87:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:21:22 2025 by rpki-client