Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/8a7720-27a4-4a2b-a6ad-e28309e65ae7/1/276qW6kqlmMHrkxTSsRjYLyMl5Q.roa
File: 276qW6kqlmMHrkxTSsRjYLyMl5Q.roa (raw, json)
Hash identifier: IMkBzgHZ912yuZgw/lkAb8o9K1K2spgjIRP1r6bby78=
Subject key identifier: DB:BE:AA:5B:A9:2A:96:63:07:AE:4C:53:4A:C4:63:60:BC:8C:97:94
Certificate issuer: /CN=5d02898b4a7a4bf9aa5dff6d2210c35d695bf5a4
Certificate serial: 033DB503
Authority key identifier: 5D:02:89:8B:4A:7A:4B:F9:AA:5D:FF:6D:22:10:C3:5D:69:5B:F5:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQKJi0p6S_mqXf9tIhDDXWlb9aQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/8a7720-27a4-4a2b-a6ad-e28309e65ae7/1/276qW6kqlmMHrkxTSsRjYLyMl5Q.roa
Signing time: Mon 25 Apr 2022 10:13:05 +0000
ROA not before: Mon 25 Apr 2022 10:13:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48642
IP address blocks: 193.108.183.0/24 maxlen: 24
193.108.198.0/24 maxlen: 24
193.108.211.0/24 maxlen: 24
193.108.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54375683 (0x33db503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d02898b4a7a4bf9aa5dff6d2210c35d695bf5a4
Validity
Not Before: Apr 25 10:13:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbbeaa5ba92a966307ae4c534ac46360bc8c9794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:a0:30:d0:12:e0:98:cd:bf:06:a3:80:0c:
8b:c2:c5:5b:b8:43:5b:2f:74:a9:70:0f:31:01:fb:
9f:0b:18:e1:5a:c1:78:5c:fa:01:76:2b:72:61:33:
64:96:47:c9:39:58:fc:1f:29:e8:27:ac:37:b4:0b:
e0:eb:a6:b9:94:2f:9a:46:7c:85:e8:64:40:4d:05:
c3:bb:c6:46:44:7d:73:d8:e8:15:de:f2:ee:b7:20:
f0:a7:be:39:0c:97:7d:ef:e6:da:58:42:c6:65:bc:
ce:48:18:c5:18:da:eb:75:1b:19:8f:39:61:59:1f:
b8:11:0c:77:65:1f:3c:17:63:77:f1:47:6f:cc:37:
59:2b:9b:54:4e:a9:10:89:e1:47:b6:33:41:d9:46:
c2:13:91:2e:ac:a0:2c:e7:4f:01:f1:06:34:9a:18:
fd:09:37:86:fb:0d:13:21:dc:cf:2f:11:d3:13:93:
09:eb:97:fb:a7:cc:a0:78:8b:44:eb:a3:d0:c6:2e:
c2:e1:b5:92:be:7f:b1:2f:4d:3a:90:13:83:52:43:
0f:ed:d6:c9:a5:a4:69:0a:e6:1c:d5:a0:92:04:7a:
62:27:c0:a2:19:40:ce:9a:f9:18:9e:7b:03:6a:ec:
ae:73:9f:19:e4:e4:3c:63:af:4d:40:0c:a4:e5:d0:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BE:AA:5B:A9:2A:96:63:07:AE:4C:53:4A:C4:63:60:BC:8C:97:94
X509v3 Authority Key Identifier:
keyid:5D:02:89:8B:4A:7A:4B:F9:AA:5D:FF:6D:22:10:C3:5D:69:5B:F5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQKJi0p6S_mqXf9tIhDDXWlb9aQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/8a7720-27a4-4a2b-a6ad-e28309e65ae7/1/276qW6kqlmMHrkxTSsRjYLyMl5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/8a7720-27a4-4a2b-a6ad-e28309e65ae7/1/XQKJi0p6S_mqXf9tIhDDXWlb9aQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.183.0/24
193.108.198.0/24
193.108.208.0/24
193.108.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:89:ba:2e:bf:fd:9c:b1:41:79:4a:53:53:f1:ea:2e:a8:4a:
6a:6e:40:c8:51:f8:ef:da:e1:30:da:5c:a1:64:f3:a1:3d:e9:
c4:2f:a6:38:aa:ef:2d:ac:de:20:91:98:af:54:5c:69:33:8e:
7b:2e:16:56:ff:6c:7b:57:bc:8b:dd:2e:16:f6:50:f5:00:f5:
66:19:ce:5d:89:2b:09:fe:57:8f:f3:b4:2c:b2:bf:d8:71:3f:
5e:fc:de:d4:b9:dd:9a:3a:01:18:8c:0f:0c:90:4e:36:3c:6f:
9a:96:80:ef:50:62:52:2e:7e:be:79:13:4c:1e:4b:37:32:d6:
b7:fd:21:58:54:6e:72:05:fa:81:34:9b:37:dc:09:a1:4d:25:
5b:27:d4:d7:53:26:9d:00:4b:d7:c3:48:83:52:23:7e:81:93:
e3:90:f1:26:0a:d3:b4:0c:d7:31:45:7e:bf:eb:07:82:7f:2e:
c6:f4:fe:8c:c5:42:08:ee:04:6e:11:e9:10:01:f5:41:2d:05:
f4:2e:d3:4e:9f:50:f2:39:ac:67:88:c3:1e:9a:19:1a:f9:a4:
ca:79:30:0c:49:f4:b3:28:89:5d:24:40:a0:88:7d:a2:3e:dd:
93:d5:a9:0a:ad:84:54:4b:9b:2e:40:2e:2f:9c:75:f5:af:2a:
b7:44:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:06:06 2025 by rpki-client