Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/V-312oHk_IySpzSAft8nqg0rqHY.roa
File: V-312oHk_IySpzSAft8nqg0rqHY.roa (raw, json)
Hash identifier: ORY/hX4D1aAO4YoKKCl+Avs0GvAWYWn61B0eDK0uvUM=
Subject key identifier: 57:ED:F5:DA:81:E4:FC:8C:92:A7:34:80:7E:DF:27:AA:0D:2B:A8:76
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 018F8BA0885C9FEB6A3BE16C92E997B5ABA8
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/V-312oHk_IySpzSAft8nqg0rqHY.roa
Signing time: Sat 18 May 2024 12:15:04 +0000
ROA not before: Sat 18 May 2024 12:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 193.34.48.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8b:a0:88:5c:9f:eb:6a:3b:e1:6c:92:e9:97:b5:ab:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: May 18 12:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57edf5da81e4fc8c92a734807edf27aa0d2ba876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:a5:b4:12:fb:8e:15:a0:26:60:71:86:e2:
03:92:9f:1b:10:98:1a:6f:70:1e:94:37:85:49:15:
2c:52:91:ef:e3:8d:29:1d:3d:63:96:a1:c6:61:b0:
71:dd:3c:21:c9:83:0e:1b:bb:b9:95:78:9a:a9:4d:
09:ca:56:6e:8a:9e:8e:45:63:fb:bb:c4:6a:4d:c9:
a0:93:f4:6e:d4:55:30:d1:80:d6:b3:c1:60:88:12:
3a:5c:01:14:2a:89:8e:37:30:11:cc:e6:0b:c5:5b:
a1:fd:92:74:fe:92:28:50:89:f4:91:59:7d:e0:1f:
16:1a:bb:1a:d8:49:be:f9:69:c6:a7:06:21:51:59:
ea:45:1b:52:d6:9e:61:0c:66:63:9d:06:f8:42:bf:
e7:d6:27:da:2e:ad:e5:04:71:69:e2:97:04:bf:2d:
fd:4d:85:f6:9e:e7:cf:b8:ff:ad:c1:c6:22:21:9a:
0b:ab:01:b2:07:1e:50:9a:ec:e9:f1:ad:32:c0:7e:
ec:05:f4:27:c8:b7:39:fc:84:50:05:ab:b7:7c:0e:
4d:d3:d9:00:64:f3:70:28:5b:be:12:fb:1b:11:d5:
89:a9:da:da:77:35:d4:15:e4:99:95:88:a7:69:38:
3e:d8:4f:65:e4:6d:7b:81:50:db:05:2a:b1:96:d9:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:F5:DA:81:E4:FC:8C:92:A7:34:80:7E:DF:27:AA:0D:2B:A8:76
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/V-312oHk_IySpzSAft8nqg0rqHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0/24
193.34.51.0/24
195.13.62.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e9:64:32:6c:96:47:9e:ec:11:45:5d:57:12:86:1d:47:00:
e3:d1:a5:9d:a0:fe:42:0f:76:48:4e:1c:7a:c6:be:fa:65:d1:
ba:ce:7f:32:64:c2:a9:7c:82:a8:75:54:59:11:1a:13:ec:81:
dc:b2:20:4d:23:58:73:20:10:f3:0d:39:13:66:64:39:96:a6:
19:a6:0c:61:28:e2:b5:78:aa:c3:53:c8:6d:68:d7:03:a8:fa:
88:21:28:ac:fd:88:62:44:7f:64:31:2c:17:62:0f:18:d1:61:
82:63:41:1d:14:a1:06:e4:9d:f2:94:f1:b1:29:d1:e0:3a:9f:
8f:73:dd:8b:8a:20:09:43:74:f4:5a:6b:ad:14:04:98:f5:23:
6f:34:ed:ea:77:80:cc:82:1d:ac:d8:bf:02:6d:31:9b:3a:1b:
b5:d7:5a:26:16:b4:23:20:94:56:d3:17:07:89:6c:1b:02:a0:
ab:61:59:3d:e7:c6:cf:4e:61:0d:68:22:a1:4f:4a:a1:6e:0d:
c2:d1:ad:5c:be:3e:03:19:58:dc:e9:05:2b:f2:c4:05:63:20:
82:09:bf:ee:de:05:78:ce:00:e0:44:01:58:5c:a1:c7:a3:1b:
f2:fb:85:45:58:00:0e:12:0f:73:a0:11:d3:2e:88:b9:b8:95:
b0:f3:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:34:34 2025 by rpki-client