Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e37f95-91d9-44ca-81b5-15cf404dc925/1/LbK9dYdYzM0g6Qtehtb_iQ99pwk.roa
File: LbK9dYdYzM0g6Qtehtb_iQ99pwk.roa (raw, json)
Hash identifier: +uOpigQ9GCaPRETMU/8WxNUa2FpREScuovSvsr4wDLM=
Subject key identifier: 2D:B2:BD:75:87:58:CC:CD:20:E9:0B:5E:86:D6:FF:89:0F:7D:A7:09
Certificate issuer: /CN=9451b3262fd753ad8107c9ca127a92f0d0375877
Certificate serial: 0367CA7C
Authority key identifier: 94:51:B3:26:2F:D7:53:AD:81:07:C9:CA:12:7A:92:F0:D0:37:58:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFGzJi_XU62BB8nKEnqS8NA3WHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e37f95-91d9-44ca-81b5-15cf404dc925/1/LbK9dYdYzM0g6Qtehtb_iQ99pwk.roa
Signing time: Sat 01 Jan 2022 10:55:47 +0000
ROA not before: Sat 01 Jan 2022 10:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 193.53.174.0/24 maxlen: 24
193.53.185.0/24 maxlen: 24
193.53.186.0/24 maxlen: 24
193.53.190.0/24 maxlen: 24
193.53.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57133692 (0x367ca7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9451b3262fd753ad8107c9ca127a92f0d0375877
Validity
Not Before: Jan 1 10:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db2bd758758cccd20e90b5e86d6ff890f7da709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:29:6c:57:ad:b9:f5:9a:70:3b:f7:0c:b1:
eb:06:4f:81:d4:d8:c4:66:c3:a1:02:9f:17:6e:63:
18:db:d6:03:b5:42:6f:36:92:89:e5:78:62:c9:29:
f6:70:da:06:4d:23:13:6a:a4:52:91:bd:0c:c4:4f:
ba:fd:24:eb:48:ee:79:1f:82:a4:7e:19:13:aa:f4:
f5:c4:24:c1:26:de:81:fc:34:3f:da:5c:78:75:81:
fe:f9:9c:42:f6:08:c4:60:93:d5:73:cc:79:91:3c:
a1:42:04:db:50:47:dd:51:5d:ae:a4:82:f8:8b:24:
f7:d1:c6:5e:f7:c2:1b:41:84:41:e4:59:94:37:e7:
d0:ec:78:9a:29:3a:fb:8b:ea:2f:c3:e5:df:71:f1:
55:58:15:cc:9d:4a:71:a4:6d:14:d5:ad:8e:ba:b7:
12:5e:03:bc:d0:db:1f:8d:ef:45:6b:77:39:22:26:
06:5f:17:69:70:1e:32:a4:7e:f0:57:f9:2f:bc:8d:
04:9e:5e:d3:08:76:9a:18:54:a6:f6:a3:9a:7b:b6:
61:53:6f:57:2e:dc:24:c5:d7:a2:15:cc:41:53:ab:
0c:4d:b5:ae:da:03:4b:b6:b0:12:2c:35:67:9f:b3:
12:88:72:fa:73:03:02:d2:c1:ee:2a:3a:f5:41:24:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B2:BD:75:87:58:CC:CD:20:E9:0B:5E:86:D6:FF:89:0F:7D:A7:09
X509v3 Authority Key Identifier:
keyid:94:51:B3:26:2F:D7:53:AD:81:07:C9:CA:12:7A:92:F0:D0:37:58:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFGzJi_XU62BB8nKEnqS8NA3WHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e37f95-91d9-44ca-81b5-15cf404dc925/1/LbK9dYdYzM0g6Qtehtb_iQ99pwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e37f95-91d9-44ca-81b5-15cf404dc925/1/lFGzJi_XU62BB8nKEnqS8NA3WHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.174.0/24
193.53.185.0-193.53.186.255
193.53.188.0/24
193.53.190.0/24
Signature Algorithm: sha256WithRSAEncryption
94:23:d7:19:00:14:28:cc:e5:ec:1d:bd:a5:41:d6:07:8f:4e:
54:4c:d7:bd:05:03:00:2e:5f:77:98:8d:72:c5:21:27:d8:02:
6c:32:5b:ee:a7:a0:7b:8f:2f:51:ae:3b:87:a9:ef:59:cc:3d:
5f:42:5a:ca:9c:20:e3:6d:de:de:29:20:fb:d9:e6:bc:3f:77:
7f:86:5a:19:59:1e:b2:88:8b:79:08:e6:51:df:cf:74:fd:a0:
ac:79:58:09:84:b1:27:d4:d7:0b:c5:61:80:91:28:8d:b1:fd:
9f:97:eb:5b:d2:bf:d4:1c:81:6a:79:09:62:06:a9:a0:da:8f:
cc:81:2b:87:ad:dc:9d:b9:9f:d8:de:d4:97:b2:39:6b:d6:bd:
1a:72:f8:ee:5c:13:ca:b6:d9:6a:fd:6f:2e:86:dc:75:ad:aa:
83:a6:2e:c4:fa:48:04:dc:6b:da:a3:3e:7f:0f:1a:70:3c:84:
c8:3d:65:dc:be:0b:f0:3c:d9:7c:c1:48:8b:19:e8:df:c5:f9:
37:ac:1f:67:6e:a9:62:66:2e:ab:51:e1:2a:5d:10:b0:e4:f8:
0d:3a:38:47:10:0e:dd:cf:6d:0b:d2:28:91:11:33:76:a7:38:
d4:14:ae:da:d8:e7:40:d4:81:7d:38:91:33:4b:19:b1:7a:91:
5a:2c:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:55 2025 by rpki-client