Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/1-SGd0QebZ7wjzVzFff0cO_s1emw.roa
File: 1-SGd0QebZ7wjzVzFff0cO_s1emw.roa (raw, json)
Hash identifier: pHmhG52KS2bOyIN78FmxAOo6hmYOzQP1lYerb4DoY8s=
Subject key identifier: F9:21:9D:D1:07:9B:67:BC:23:CD:5C:C5:7D:FD:1C:3B:FB:35:7A:6C
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 018611DEA6BF88058FB23369E5A48100966D
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/1-SGd0QebZ7wjzVzFff0cO_s1emw.roa
Signing time: Thu 02 Feb 2023 11:24:09 +0000
ROA not before: Thu 02 Feb 2023 11:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6718
IP address blocks: 193.93.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:de:a6:bf:88:05:8f:b2:33:69:e5:a4:81:00:96:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Feb 2 11:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9219dd1079b67bc23cd5cc57dfd1c3bfb357a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:55:c4:c1:f5:31:af:b2:9e:a3:cb:71:5f:40:
c0:2e:a9:b3:03:b1:1a:87:e5:91:71:78:ef:96:f1:
84:e8:af:09:9d:d7:89:ca:8d:bc:60:2c:bc:13:07:
dc:6e:b7:b7:f4:28:16:77:2f:f8:45:d2:fb:2b:e1:
52:4a:a9:50:8c:ab:65:8c:f3:e9:76:8a:e6:b0:c3:
00:2c:6a:92:e4:d5:65:01:39:65:e0:ab:ca:da:15:
cd:36:e1:92:9d:03:8c:46:7b:a1:c8:73:2e:68:98:
dd:bc:2e:b6:0f:4a:71:88:26:e3:06:bf:8d:6f:6c:
03:bf:d4:e1:05:41:c1:1b:66:93:30:e3:1d:65:23:
12:c7:46:ec:07:b9:62:56:ed:6f:dc:0c:32:82:19:
15:78:b0:fd:fe:b4:46:66:55:ae:9c:10:3e:8c:5d:
b0:d8:a5:e3:25:3d:8a:75:2b:da:a0:8b:60:08:ac:
fd:e9:46:61:b9:a3:df:f6:bf:25:b3:b8:91:e8:7d:
91:96:af:f5:c2:cc:e0:19:bb:8d:a9:d5:54:24:19:
e8:c7:41:c5:1d:41:2a:4e:ca:49:aa:52:15:5c:a1:
86:54:6e:c0:cc:d9:58:2b:35:de:e6:45:94:18:57:
28:3a:0e:18:37:a1:0d:fd:61:9a:15:85:58:30:a6:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:9D:D1:07:9B:67:BC:23:CD:5C:C5:7D:FD:1C:3B:FB:35:7A:6C
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/1-SGd0QebZ7wjzVzFff0cO_s1emw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.142.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:83:01:13:b4:0e:60:15:06:3a:2a:c5:4a:fe:e3:ec:5b:75:
25:c2:cd:be:a5:e9:df:a1:32:6f:d5:27:3a:fb:e2:b4:c7:e6:
cd:d5:b7:ea:b9:47:00:f7:9c:3a:c1:f1:74:8e:8e:8e:13:89:
43:5c:d2:7f:5c:7e:b7:e0:7a:b2:b4:79:f0:a8:e5:ab:fd:04:
40:84:4f:65:5a:62:0d:aa:99:e3:9a:ed:3c:86:1b:c3:60:9a:
09:54:f7:a0:cc:ac:3e:74:e9:eb:19:9b:8e:ee:d4:b2:c7:40:
54:85:ec:f1:40:0f:25:ba:d9:98:a8:d3:0b:6a:a2:1d:b0:bb:
bb:82:b5:57:8f:fa:d2:78:0c:f8:2c:79:30:d6:8a:1d:9f:ff:
aa:e0:1e:fd:0c:be:c5:6d:d2:5f:48:c8:a1:a6:52:7e:9e:40:
d8:c9:22:7d:af:7a:d0:0f:f2:77:7d:59:ac:28:ab:45:46:f6:
7f:11:cc:b6:35:32:fe:55:4c:8f:e5:ca:55:f5:22:4c:db:eb:
36:97:60:ea:71:e7:be:3d:85:ab:d8:9c:2d:ef:5c:79:40:54:
e4:93:75:17:c9:7d:4f:28:1f:dd:54:1a:24:92:62:5d:6e:f3:
cb:9b:57:70:88:36:fe:b4:cd:bd:11:48:a0:15:a3:87:2e:b8:
f4:72:e5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:13 2025 by rpki-client