Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/ASzORbrYTbHbMqjNmRyXLZAw62A.roa
File: ASzORbrYTbHbMqjNmRyXLZAw62A.roa (raw, json)
Hash identifier: k9R6YgPFE+6vgJu5foK+IqQQBEFqe3edc5vXPd46d3g=
Subject key identifier: 01:2C:CE:45:BA:D8:4D:B1:DB:32:A8:CD:99:1C:97:2D:90:30:EB:60
Certificate issuer: /CN=338781c482bef1cf60c5ada2a51b2fdc6a255ea6
Certificate serial: 018571FA0C06181019313313758A752D3455
Authority key identifier: 33:87:81:C4:82:BE:F1:CF:60:C5:AD:A2:A5:1B:2F:DC:6A:25:5E:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4eBxIK-8c9gxa2ipRsv3GolXqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/ASzORbrYTbHbMqjNmRyXLZAw62A.roa
Signing time: Mon 02 Jan 2023 10:14:50 +0000
ROA not before: Mon 02 Jan 2023 10:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 194.247.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:0c:06:18:10:19:31:33:13:75:8a:75:2d:34:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338781c482bef1cf60c5ada2a51b2fdc6a255ea6
Validity
Not Before: Jan 2 10:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=012cce45bad84db1db32a8cd991c972d9030eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:64:f3:7f:19:7f:69:cc:2b:44:fb:21:f9:
7f:f1:bf:35:6b:93:fb:5f:33:11:4b:c0:f3:14:de:
12:fc:92:27:5c:61:3c:ab:99:2c:33:f5:4e:bd:b5:
6e:54:e1:00:40:ff:52:5d:71:ef:a5:2c:71:da:61:
d3:08:66:3c:ba:35:16:44:28:a5:5b:04:ab:0e:83:
8e:2d:84:a8:d8:67:88:70:63:e8:37:21:c1:a5:1a:
c5:5b:f3:34:48:8d:a6:06:c0:9c:9a:fc:40:9f:1b:
0b:68:19:62:a7:20:9e:80:4c:7c:54:8b:db:74:d0:
61:47:7a:ae:f2:87:7d:48:9a:cd:a6:c2:92:9a:dd:
2d:48:2c:a3:1a:95:24:8e:88:cd:7f:d6:18:fb:67:
bb:e0:c7:9e:3c:fb:97:d6:59:5a:1e:73:01:2f:bb:
21:fb:a9:55:90:97:ea:95:55:d5:54:da:44:15:0e:
0f:6a:2d:f2:69:df:7d:78:9b:d7:0f:a6:84:43:b9:
90:31:1f:41:11:b7:99:f8:9d:7e:16:ee:6f:05:7f:
56:c4:7c:b4:d7:b5:ce:47:6f:82:26:0d:27:8d:de:
ff:54:f6:14:70:18:df:03:b5:6e:78:73:47:7f:3b:
9a:ef:bc:68:c4:37:fe:2f:bc:9f:d6:8d:cc:80:ed:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:CE:45:BA:D8:4D:B1:DB:32:A8:CD:99:1C:97:2D:90:30:EB:60
X509v3 Authority Key Identifier:
keyid:33:87:81:C4:82:BE:F1:CF:60:C5:AD:A2:A5:1B:2F:DC:6A:25:5E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4eBxIK-8c9gxa2ipRsv3GolXqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/ASzORbrYTbHbMqjNmRyXLZAw62A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/M4eBxIK-8c9gxa2ipRsv3GolXqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b6:a6:de:30:58:8b:d8:7e:d4:4f:8a:d5:8d:a4:a7:81:af:
e0:3f:ce:71:38:c3:97:59:8f:a6:e3:49:51:d8:df:11:8f:ce:
46:ad:38:b0:68:78:b2:41:ae:73:c2:0d:df:90:3c:a7:64:ca:
4b:e3:d8:38:c4:a1:da:fc:75:d2:01:83:de:6b:3d:49:b8:9b:
1d:8f:7c:b8:23:0d:c2:d9:1a:6b:e4:e7:da:26:20:e8:99:1e:
41:fb:d2:c8:4f:2d:4a:2e:40:e8:7c:04:57:41:bb:b4:7d:f1:
76:bc:1f:a5:00:40:b1:32:e9:65:db:8a:a1:5d:76:20:13:da:
8c:00:b0:85:25:ca:8c:86:52:a8:4c:1c:9c:36:c6:94:91:1f:
6f:7d:5e:58:0f:33:62:67:e3:fc:1d:65:4b:5f:f7:4f:ab:ab:
07:69:92:9e:b6:ce:38:ca:0f:0d:28:f6:fd:8b:56:6e:36:7b:
4c:64:64:20:ba:8f:c7:09:44:7f:2f:e2:9f:de:41:ca:96:45:
ae:46:cd:06:30:46:cd:23:6e:48:9e:f3:99:c2:df:b0:4b:a8:
7b:4a:b9:39:d9:6f:88:91:76:8e:14:ac:a3:e9:76:24:bf:da:
ee:2e:e0:ef:db:b4:19:0f:e7:59:79:9c:a6:da:55:68:ba:8d:
c1:ad:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:15:35 2025 by rpki-client