Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/BJ61qn1i2EaBzqiSz_a4zwdrvEA.roa
File: BJ61qn1i2EaBzqiSz_a4zwdrvEA.roa (raw, json)
Hash identifier: 4YVpYODE5Y5xaBSbkmi5Nj8cyu6vuTo/h9TtUcjMrDg=
Subject key identifier: 04:9E:B5:AA:7D:62:D8:46:81:CE:A8:92:CF:F6:B8:CF:07:6B:BC:40
Certificate issuer: /CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Certificate serial: 0182465A5C6A63341E3975ED701D7B386DAD
Authority key identifier: 53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/BJ61qn1i2EaBzqiSz_a4zwdrvEA.roa
Signing time: Thu 28 Jul 2022 19:48:23 +0000
ROA not before: Thu 28 Jul 2022 19:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2027
IP address blocks: 193.58.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:46:5a:5c:6a:63:34:1e:39:75:ed:70:1d:7b:38:6d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Validity
Not Before: Jul 28 19:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=049eb5aa7d62d84681cea892cff6b8cf076bbc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:04:56:18:ab:87:ab:72:da:c9:7b:18:c7:
d5:59:44:df:6c:a8:07:bd:f1:8f:03:b5:e3:fb:c5:
c4:0a:66:f6:74:5e:dc:44:3f:c5:7c:28:a2:fe:6b:
8c:d2:3e:22:9f:4b:2e:4c:ef:11:d0:23:1c:b3:5a:
ca:07:a3:df:2c:70:73:35:9f:a3:2f:36:f0:03:24:
ac:36:d0:77:77:b3:9e:37:0c:99:ec:1c:ae:66:91:
6e:32:bd:70:c9:33:b3:de:73:8a:dd:e5:72:fe:17:
a0:b7:a0:86:34:16:cd:7d:49:e5:1e:dd:5b:72:eb:
e8:1f:e0:e8:e9:81:05:ab:25:f8:f0:d1:de:2c:27:
a1:14:ef:62:36:b3:fc:3c:b4:b0:88:b6:97:bd:94:
67:a6:65:db:de:02:bf:78:32:c3:27:b0:b1:b6:73:
0c:62:42:db:5e:8c:3c:7d:9e:e3:86:09:0a:1d:75:
d1:fc:e7:27:bb:db:71:cf:00:b8:32:00:06:18:55:
bf:3c:72:3f:e6:78:ab:d6:77:c1:d1:12:12:c4:58:
a1:bf:c1:97:0c:af:57:96:bd:19:e7:75:f3:04:27:
57:0f:03:f5:99:b1:96:97:53:58:0a:14:54:0c:10:
59:d3:fa:e4:5f:53:bc:68:c0:72:d1:a3:9f:ff:8d:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:B5:AA:7D:62:D8:46:81:CE:A8:92:CF:F6:B8:CF:07:6B:BC:40
X509v3 Authority Key Identifier:
keyid:53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/BJ61qn1i2EaBzqiSz_a4zwdrvEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/U3GSzI_PUugejQUwRm_pmlaq89E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:71:31:8d:e4:62:14:3f:35:b5:52:15:88:9a:56:48:4e:d8:
35:a4:42:c6:31:d1:26:d0:27:48:ed:08:2f:ed:38:c8:2c:21:
ce:4f:9d:85:48:83:bf:7d:b3:b0:58:6d:78:05:b4:5d:52:29:
43:4e:a8:8b:d6:bd:21:5f:3c:66:ba:c8:4e:1c:24:a3:f9:30:
b5:3a:da:a7:cb:44:07:4b:c6:d1:51:e5:02:c9:d8:3f:02:1e:
30:4c:f5:ec:9f:9e:9e:2a:71:2d:86:ea:bc:94:c4:fe:6f:ad:
e2:3a:08:9f:45:9c:d3:48:c2:e4:d6:14:79:19:b7:bc:4b:3b:
1d:93:3b:95:ba:cd:10:42:b1:7d:b9:b8:be:6d:89:57:91:50:
ad:f2:53:98:be:61:64:fb:a4:2b:ce:1d:62:c7:2d:f2:89:5d:
88:4d:44:39:84:60:2f:ec:f2:aa:00:d6:e5:f0:96:0d:18:d6:
5d:63:53:a8:3c:23:2d:19:6d:da:85:ff:d7:58:0a:67:a0:7f:
87:5c:eb:b0:c1:dc:27:74:f3:74:38:5f:b1:98:27:84:5a:de:
40:57:90:eb:7c:6a:79:b7:2a:2a:80:e6:45:3c:d3:56:78:b5:
f0:84:7d:63:b2:fb:df:0e:25:95:de:40:f5:ef:95:6c:f7:22:
b5:15:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:20 2025 by rpki-client