Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/gLSXo5l9k5IPiIBug0r7tzX6FxY.roa
File: gLSXo5l9k5IPiIBug0r7tzX6FxY.roa (raw, json)
Hash identifier: x+GYcIsfuEJndDFaAuRTxF0W3ERTCU1ZUrpGYRyZBXk=
Subject key identifier: 80:B4:97:A3:99:7D:93:92:0F:88:80:6E:83:4A:FB:B7:35:FA:17:16
Certificate issuer: /CN=2631b29ac75ab548ba752b5f6251d97cb1c55e11
Certificate serial: 01856FF052311FB1D916B3EF3D8B437C5FE5
Authority key identifier: 26:31:B2:9A:C7:5A:B5:48:BA:75:2B:5F:62:51:D9:7C:B1:C5:5E:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjGymsdatUi6dStfYlHZfLHFXhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/gLSXo5l9k5IPiIBug0r7tzX6FxY.roa
Signing time: Mon 02 Jan 2023 00:44:58 +0000
ROA not before: Mon 02 Jan 2023 00:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 193.17.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:52:31:1f:b1:d9:16:b3:ef:3d:8b:43:7c:5f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631b29ac75ab548ba752b5f6251d97cb1c55e11
Validity
Not Before: Jan 2 00:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80b497a3997d93920f88806e834afbb735fa1716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:5b:a0:75:fd:83:cd:e9:86:46:b0:85:73:
66:81:02:4a:0b:a0:c6:fe:b4:25:a8:54:d0:7e:81:
0e:ac:f8:b1:50:1d:8b:e5:96:fb:73:5d:63:10:3c:
c6:30:7e:09:5d:0b:d2:33:75:df:9a:60:2b:98:1d:
75:2d:d1:26:9a:0e:71:f3:f4:87:21:90:ec:9f:e0:
d4:2d:33:ed:50:1e:a9:84:8d:b8:a7:cf:13:61:63:
ab:fa:87:80:19:76:d9:61:c7:91:44:1c:c1:39:c3:
dd:b5:23:37:1e:ef:48:af:64:7e:d4:13:84:73:dc:
7c:4e:92:89:64:fc:76:60:ff:06:56:8e:6b:a8:97:
d7:10:00:78:2c:84:25:7b:f3:21:b3:dc:ac:0d:d8:
0f:a2:7a:57:38:b4:21:94:8a:f4:22:01:6f:cc:ca:
c0:16:bb:54:37:ea:6d:06:bd:36:54:4d:ea:d8:f8:
60:96:5c:ef:f7:6b:21:83:da:bb:a4:92:3d:ee:6a:
05:60:f9:00:60:73:80:d7:72:31:48:ad:d7:77:b0:
76:a9:a1:ee:41:a8:82:69:20:e6:ab:a4:61:6a:ce:
ef:60:c4:54:13:24:b8:f4:49:6d:f5:19:fa:15:33:
0f:21:2a:c7:27:9a:3d:ca:17:d4:fa:7b:11:4f:5e:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B4:97:A3:99:7D:93:92:0F:88:80:6E:83:4A:FB:B7:35:FA:17:16
X509v3 Authority Key Identifier:
keyid:26:31:B2:9A:C7:5A:B5:48:BA:75:2B:5F:62:51:D9:7C:B1:C5:5E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjGymsdatUi6dStfYlHZfLHFXhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/gLSXo5l9k5IPiIBug0r7tzX6FxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/JjGymsdatUi6dStfYlHZfLHFXhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.91.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b4:88:12:fa:ae:1a:58:f1:8a:8b:11:9b:59:43:0b:61:f0:
c2:a3:c6:5a:50:eb:b8:54:e0:56:80:10:4e:c9:c0:b5:59:f7:
a1:1d:1e:4e:7b:b9:90:95:fa:e4:e6:76:3b:b4:9b:2e:f2:69:
d5:42:c2:c1:cc:c7:ed:a8:85:84:97:15:3c:c1:59:8b:42:70:
bd:ea:73:1c:00:78:a3:c2:74:19:f8:4a:10:2c:f4:06:f5:1a:
07:7a:8f:7a:be:9e:78:9e:de:96:9a:9a:64:ef:d1:42:1c:a4:
be:27:61:62:69:d7:26:c6:2d:69:ed:25:8e:1f:b0:60:d1:6f:
6c:b5:59:99:fd:8d:5c:9d:e0:2c:85:f6:c3:72:a0:a5:e5:60:
82:64:1d:30:21:90:3d:ea:f9:f3:47:6e:7a:86:ef:68:10:b1:
20:04:d7:17:09:05:55:a0:22:95:36:c5:f7:77:89:01:62:f7:
f1:d9:37:81:d1:31:c9:8f:65:b5:49:83:6f:a0:da:b5:93:a4:
ae:1e:ff:fd:d9:6a:5d:41:4b:af:6b:00:09:70:76:e4:6d:78:
15:ab:69:91:a6:14:8c:d8:dc:69:09:81:41:15:a7:58:92:4a:
de:64:08:97:75:57:1f:0f:b9:06:23:65:2a:9b:44:3c:4f:c4:
dc:61:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:33 2025 by rpki-client