Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/B3YcPPOjikZ6OGL-Y6nX2wuGjYU.roa
File: B3YcPPOjikZ6OGL-Y6nX2wuGjYU.roa (raw, json)
Hash identifier: Tb5qv6/nuxPctX1mn5k1OKQ6AqrZwxk9nTso76/d+08=
Subject key identifier: 07:76:1C:3C:F3:A3:8A:46:7A:38:62:FE:63:A9:D7:DB:0B:86:8D:85
Certificate issuer: /CN=c68362992a9d4b91336955eaef63d5e4d6bd8a30
Certificate serial: 0181F45581960DB713811EAFCD5E8A283A1E
Authority key identifier: C6:83:62:99:2A:9D:4B:91:33:69:55:EA:EF:63:D5:E4:D6:BD:8A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoNimSqdS5EzaVXq72PV5Na9ijA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/B3YcPPOjikZ6OGL-Y6nX2wuGjYU.roa
Signing time: Tue 12 Jul 2022 21:34:13 +0000
ROA not before: Tue 12 Jul 2022 21:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 193.243.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:55:81:96:0d:b7:13:81:1e:af:cd:5e:8a:28:3a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68362992a9d4b91336955eaef63d5e4d6bd8a30
Validity
Not Before: Jul 12 21:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07761c3cf3a38a467a3862fe63a9d7db0b868d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:ab:da:ca:99:3c:0b:ef:46:33:56:64:10:
83:4f:95:27:4d:81:e0:f1:4f:54:39:e3:4f:0e:59:
1e:63:f3:02:db:a0:ec:00:b1:91:12:42:da:7f:d2:
8e:94:ce:32:4f:cb:5d:1a:67:93:de:a0:ff:4b:55:
9b:5e:e3:d7:79:d9:a7:b2:02:c8:1d:05:f1:d4:12:
4a:7b:29:75:e6:6e:e8:5d:63:4f:b0:c1:03:64:05:
29:44:57:33:4b:49:d9:cd:fd:30:74:2f:f8:58:80:
a2:35:1b:87:0b:ae:7d:65:d0:6f:8b:97:1d:e3:e7:
e1:65:dc:1c:aa:16:fc:77:15:96:03:ad:e7:a8:e9:
38:24:1f:63:a5:41:88:dd:15:0f:59:ea:eb:29:4d:
f7:89:23:b3:a7:a7:96:cc:49:5e:22:d9:d9:e6:a2:
00:03:fe:64:40:b9:59:d1:24:16:b0:88:70:db:cc:
cb:58:e2:72:3e:88:68:ef:39:ba:e4:75:90:05:26:
3c:e1:11:20:d1:c0:38:11:76:66:fc:1f:df:3b:40:
92:ff:bc:c2:d1:3f:ee:40:e3:1c:07:cc:53:fc:d0:
00:c0:6e:62:88:28:87:b8:6b:b1:8e:5e:95:54:a0:
71:f2:9f:e6:48:0d:02:07:27:51:45:48:01:cc:31:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:1C:3C:F3:A3:8A:46:7A:38:62:FE:63:A9:D7:DB:0B:86:8D:85
X509v3 Authority Key Identifier:
keyid:C6:83:62:99:2A:9D:4B:91:33:69:55:EA:EF:63:D5:E4:D6:BD:8A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoNimSqdS5EzaVXq72PV5Na9ijA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/B3YcPPOjikZ6OGL-Y6nX2wuGjYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/xoNimSqdS5EzaVXq72PV5Na9ijA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.191.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ba:3e:31:e8:ca:28:a9:1b:f0:9a:04:fb:8b:3d:2d:30:78:
0b:b9:48:52:e4:a1:85:89:88:72:76:6e:f6:89:f9:78:04:a1:
6a:05:9d:91:bf:d7:f0:ac:12:f1:65:63:72:12:d5:78:ba:24:
d4:30:97:b8:9a:27:71:0e:4f:8b:64:f1:b5:84:72:2e:58:c9:
5e:69:7c:bf:c6:06:b1:ee:ec:1b:82:9d:9b:e4:04:d8:f9:07:
c0:2e:8f:a5:e8:68:47:15:f1:ec:88:9a:d6:40:bb:60:d4:b2:
d0:ed:5f:3a:17:45:8b:71:a3:bb:e6:be:ae:47:f6:c0:49:71:
ca:39:14:2b:88:dd:cc:53:0a:65:16:ef:69:cb:91:8b:92:92:
75:6a:50:b3:d0:5d:e2:4f:56:d5:12:03:bc:84:db:33:df:dc:
dc:f9:ca:ad:07:fb:8e:a5:5b:ff:a7:81:69:f9:dd:65:06:85:
75:a4:d8:87:d6:ea:18:60:08:c1:cb:91:37:eb:cd:5c:53:06:
c6:04:fb:91:c1:da:6c:47:30:e1:db:0a:4b:d3:00:9a:9f:77:
e1:f6:db:d2:06:2c:6c:14:2f:83:3f:99:d2:b2:a6:1d:e9:cf:
85:6b:a8:cd:7b:2a:be:b4:9d:0a:dc:77:5d:af:48:6d:43:a5:
76:d9:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:13 2025 by rpki-client