Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/72cbbf-84b1-41a8-9489-649ab2d16e29/1/2kQxudyUquKP1PvfNmF20SgazeE.roa
File: 2kQxudyUquKP1PvfNmF20SgazeE.roa (raw, json)
Hash identifier: eVs9jqQT6mSYGngPsPKto62UCzlJWn6tEj1TMqSw9G8=
Subject key identifier: DA:44:31:B9:DC:94:AA:E2:8F:D4:FB:DF:36:61:76:D1:28:1A:CD:E1
Certificate issuer: /CN=4bb679f9acbe9e9858f685f260cb31601209b3ca
Certificate serial: 01856EAFB5833C59E476699340409E8CA25B
Authority key identifier: 4B:B6:79:F9:AC:BE:9E:98:58:F6:85:F2:60:CB:31:60:12:09:B3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7Z5-ay-nphY9oXyYMsxYBIJs8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/72cbbf-84b1-41a8-9489-649ab2d16e29/1/2kQxudyUquKP1PvfNmF20SgazeE.roa
Signing time: Sun 01 Jan 2023 18:54:47 +0000
ROA not before: Sun 01 Jan 2023 18:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60226
IP address blocks: 193.57.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:b5:83:3c:59:e4:76:69:93:40:40:9e:8c:a2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bb679f9acbe9e9858f685f260cb31601209b3ca
Validity
Not Before: Jan 1 18:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da4431b9dc94aae28fd4fbdf366176d1281acde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:d5:6c:b9:66:a3:e6:91:d2:c5:f4:75:2b:
72:94:79:5b:e9:ba:da:04:cc:20:52:fd:6e:89:b6:
26:9c:34:f3:3d:7d:9b:c0:23:1f:90:c6:59:ef:82:
89:48:c1:c1:de:ae:dc:10:0c:9e:c0:24:a3:ad:4c:
3d:d3:8e:fc:b5:12:94:17:e4:05:eb:76:e1:8d:3c:
36:2e:33:76:71:ad:00:c0:a8:6e:fd:53:13:51:94:
4f:4d:12:b2:b4:e9:83:c1:24:bb:fe:62:39:af:e8:
e2:31:be:8a:9a:1b:24:ca:f1:7a:da:dc:66:18:88:
0e:bb:4e:92:6e:52:75:c7:de:cd:27:59:eb:bf:dd:
03:66:d4:39:21:6f:19:ea:35:fb:b2:a7:42:21:5c:
fd:58:76:cd:5b:ca:9d:02:bb:8d:b9:01:4c:f4:2a:
ef:d3:a4:ca:85:e5:bf:f8:e4:8b:f4:c5:a0:71:67:
db:05:6f:1d:19:ef:6e:09:f9:fe:b6:7c:c7:7f:16:
24:a2:c3:9f:9e:1e:9c:3a:58:4b:cb:b3:f1:29:c7:
1e:76:70:78:77:7f:aa:70:80:f5:2d:14:63:82:21:
9c:71:90:af:7d:48:b2:f7:7d:8b:db:92:4f:5b:8b:
93:28:f3:e9:e9:30:8f:b6:04:ec:51:ec:1a:af:fd:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:44:31:B9:DC:94:AA:E2:8F:D4:FB:DF:36:61:76:D1:28:1A:CD:E1
X509v3 Authority Key Identifier:
keyid:4B:B6:79:F9:AC:BE:9E:98:58:F6:85:F2:60:CB:31:60:12:09:B3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7Z5-ay-nphY9oXyYMsxYBIJs8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/72cbbf-84b1-41a8-9489-649ab2d16e29/1/2kQxudyUquKP1PvfNmF20SgazeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/72cbbf-84b1-41a8-9489-649ab2d16e29/1/S7Z5-ay-nphY9oXyYMsxYBIJs8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bc:ef:11:c1:bf:ac:3e:e5:c6:8f:1c:4d:ab:0b:86:01:03:
f1:fa:de:ab:c4:38:2f:3e:5c:99:40:0a:40:8a:0b:52:e4:4e:
b5:ea:64:45:9c:a9:c7:a1:88:1b:36:3d:cb:64:dc:73:dc:c9:
40:86:03:18:3e:34:3e:c1:a2:ce:3b:38:44:27:e3:8f:89:22:
d5:3c:61:40:00:e2:17:94:06:8d:45:e0:1a:80:27:13:5a:7b:
3d:96:21:03:70:05:77:da:1e:65:91:e6:1e:e6:56:48:45:02:
79:22:78:6b:69:98:3c:94:a4:20:17:94:95:bf:7f:cc:35:03:
2c:30:1d:0d:53:27:20:93:99:79:1d:d5:9b:ea:26:eb:34:43:
d3:cb:99:21:5c:34:d2:7a:f4:b0:7d:6f:42:26:6d:e1:23:13:
0d:cc:21:0d:1b:eb:e8:37:04:a3:b5:0b:57:a0:7b:4f:01:53:
43:8e:6e:f0:7a:47:db:fe:f7:9f:da:01:80:d0:56:ce:a5:f1:
24:d3:a8:bb:02:df:77:ad:d2:ea:76:c3:be:5f:f8:b2:aa:2a:
34:d9:21:c2:72:15:c3:66:b4:c7:99:76:1e:86:52:d4:8a:8b:
d1:61:87:8c:ec:bb:9a:7c:fa:2e:d2:51:7e:31:94:15:90:d9:
a4:87:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:13 2025 by rpki-client