Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/stH1rtxWk08oFQSR5od5mitXms4.roa
File: stH1rtxWk08oFQSR5od5mitXms4.roa (raw, json)
Hash identifier: EJujyjE826OITTi0BR4FaVjOCTyd1DplEzbLM8wH+IU=
Subject key identifier: B2:D1:F5:AE:DC:56:93:4F:28:15:04:91:E6:87:79:9A:2B:57:9A:CE
Certificate issuer: /CN=a5a7926eb6dc461bfe67dfc8d302899390ebf492
Certificate serial: 0188303D76995688349FAA8C5FD209B62998
Authority key identifier: A5:A7:92:6E:B6:DC:46:1B:FE:67:DF:C8:D3:02:89:93:90:EB:F4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/stH1rtxWk08oFQSR5od5mitXms4.roa
Signing time: Thu 18 May 2023 19:01:54 +0000
ROA not before: Thu 18 May 2023 19:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 83.138.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:3d:76:99:56:88:34:9f:aa:8c:5f:d2:09:b6:29:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a7926eb6dc461bfe67dfc8d302899390ebf492
Validity
Not Before: May 18 19:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2d1f5aedc56934f28150491e687799a2b579ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:85:9f:cc:f1:f3:7d:70:e4:48:42:e2:95:
e6:e3:ce:c7:4e:a1:9a:9f:dc:55:70:c1:3f:36:15:
91:22:ee:5e:4e:c2:3c:fe:74:c4:cc:ba:ef:df:ba:
c7:20:6c:ea:1b:fb:3b:b3:d8:63:9c:f8:fc:d7:13:
94:2a:56:58:9f:2d:5a:69:34:04:19:29:03:18:13:
c9:1a:17:a5:c1:2b:7d:d8:47:36:46:13:4f:73:90:
85:73:a1:49:81:7c:d1:08:75:14:58:ce:92:ce:08:
7f:0c:dc:ad:53:43:65:2b:78:24:5d:74:ef:1f:ea:
51:52:00:63:b6:7b:7c:38:d1:e7:8a:a8:8e:36:83:
4f:3b:86:e3:83:d3:36:93:c3:ab:05:47:89:16:7c:
80:8f:9e:23:b0:44:57:e1:96:63:9d:ac:6c:30:70:
b7:02:2e:45:79:c0:28:e2:bc:57:9d:ae:f5:5a:a2:
23:9c:74:65:80:ae:14:5d:06:6f:aa:1a:f7:d7:f4:
c2:60:be:a7:a0:cf:81:ce:e9:97:3a:f5:cb:26:74:
2b:68:7d:30:88:cf:5e:18:9a:cd:b7:db:83:0d:b5:
fb:79:18:68:00:75:60:3f:da:8d:29:2c:69:e5:f7:
17:d8:12:db:df:fc:7c:50:66:d9:2a:4c:43:80:ff:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D1:F5:AE:DC:56:93:4F:28:15:04:91:E6:87:79:9A:2B:57:9A:CE
X509v3 Authority Key Identifier:
keyid:A5:A7:92:6E:B6:DC:46:1B:FE:67:DF:C8:D3:02:89:93:90:EB:F4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/stH1rtxWk08oFQSR5od5mitXms4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d5:b0:d7:13:05:61:ac:1b:c5:b7:ea:d9:82:99:c0:f9:fd:
5a:fd:ac:dd:64:fe:bd:38:3b:e1:d9:ca:7e:57:8d:6b:86:b6:
a9:7b:85:17:34:ab:93:7b:ff:e8:37:79:bd:df:b2:c3:65:2a:
05:e7:b6:2c:2d:b3:3d:a6:a2:be:5c:82:36:5f:b5:80:1b:47:
c8:af:4b:62:c1:ed:6a:7d:81:59:38:6a:78:0b:99:b5:f2:26:
cd:04:85:ac:05:f4:93:a6:5e:b3:ca:04:84:b3:f5:f1:71:87:
a3:54:35:ba:f9:e4:7d:05:9f:5e:50:f3:b1:f9:81:d4:e8:b0:
e4:fc:03:67:99:1d:f0:10:bc:4d:67:a0:e2:a1:f8:31:9b:63:
1b:0d:c6:40:0e:4f:d1:56:a4:70:0f:ac:69:02:12:02:e3:e0:
54:65:f9:95:29:4c:16:ff:20:4d:d5:4b:ca:da:9f:b9:3c:0e:
f9:25:76:20:15:e3:65:b8:15:34:3e:da:e2:f3:9c:5e:4e:2b:
c9:f8:29:4c:e5:e4:29:f7:f7:96:c2:95:4c:4a:e2:c8:26:84:
94:7f:b2:6b:09:b0:17:d0:2c:6b:a3:3b:eb:f6:fb:bd:9a:a7:
0e:52:ed:6d:ff:51:fd:ec:b7:65:d8:7e:98:3f:37:15:18:89:
df:1f:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:17 2025 by rpki-client