Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/_z6IHsIBGmkIlVyTPrmoK8bLKE8.roa
File: _z6IHsIBGmkIlVyTPrmoK8bLKE8.roa (raw, json)
Hash identifier: mtQ67Ff1k0kfp91bCKIVzmjAg9yptFHsLft4qCytaNk=
Subject key identifier: FF:3E:88:1E:C2:01:1A:69:08:95:5C:93:3E:B9:A8:2B:C6:CB:28:4F
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 01685E99
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/_z6IHsIBGmkIlVyTPrmoK8bLKE8.roa
Signing time: Sat 01 Jan 2022 04:57:57 +0000
ROA not before: Sat 01 Jan 2022 04:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35308
IP address blocks: 193.151.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23617177 (0x1685e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: Jan 1 04:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff3e881ec2011a6908955c933eb9a82bc6cb284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:21:a6:f8:82:7f:56:cb:37:71:5b:71:25:
a9:ec:2c:c8:1e:d4:68:68:c4:e8:99:ba:e6:3d:f4:
87:f0:8c:5c:03:e6:85:b7:83:d6:c3:5a:d2:8c:45:
b9:1f:c7:b3:86:38:ec:61:2b:cd:e8:66:07:ee:59:
9c:6e:04:6b:62:4c:cc:ea:c0:f4:d2:7f:cc:56:59:
be:7d:41:9c:bf:e8:db:bf:dd:e8:c5:ef:3d:8d:db:
5a:ac:cc:20:36:c3:c1:99:a0:09:82:bf:22:75:02:
7d:18:6f:06:9b:e0:10:71:d9:67:92:95:52:4f:bc:
ef:7f:e3:00:a3:28:b7:50:e4:0d:82:b1:92:24:d5:
31:b9:42:ed:fd:44:56:ef:3c:03:7f:bf:e6:96:8d:
ba:bd:30:04:00:ff:9a:cc:5d:12:21:df:9d:c7:b4:
7a:49:1a:1a:54:cc:e9:de:06:b2:f0:8a:87:16:16:
3c:62:ca:cd:47:bb:1f:d3:94:06:1d:38:13:29:7c:
a6:dc:f7:2b:99:f4:7d:0e:fe:6b:8f:da:1d:50:df:
f0:d1:df:6a:1a:d9:f7:3e:25:27:6e:ef:1b:03:14:
10:16:4d:64:f5:e3:75:e4:70:6e:61:62:b6:6d:5d:
9f:ba:28:86:bc:0d:93:cb:29:00:a2:1f:0d:6f:95:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3E:88:1E:C2:01:1A:69:08:95:5C:93:3E:B9:A8:2B:C6:CB:28:4F
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/_z6IHsIBGmkIlVyTPrmoK8bLKE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.167.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1a:5b:c2:c5:b4:7b:2e:90:25:fe:09:14:36:aa:02:12:9f:
7f:b5:03:be:5c:ea:9c:e8:3c:71:93:c8:2b:dd:72:72:51:fd:
86:4d:ed:fa:3e:bd:52:e9:e1:ba:69:a2:d8:64:23:92:b9:70:
a2:74:96:a0:27:42:76:3e:64:db:81:09:c4:01:fb:83:f6:ac:
4a:4b:3b:1d:a9:84:cd:ad:f8:32:48:cf:fa:6e:50:2a:43:aa:
f2:bf:8c:6a:23:cf:1a:7d:d6:74:2b:e4:73:12:54:65:ff:8c:
60:be:cc:ef:4b:c8:31:f0:52:8e:f4:d7:4c:73:d0:03:47:e8:
bd:83:6d:30:21:54:79:0d:e6:9e:bb:96:5f:4e:7e:1c:c7:c5:
7c:d8:eb:91:60:ca:9b:41:29:92:b1:b9:78:cf:4e:14:d1:18:
3d:52:6d:e1:c2:85:dc:ff:6d:10:61:aa:b4:e2:01:6a:27:cb:
56:f7:56:ba:16:c8:c5:8c:7b:44:82:3b:c4:55:d3:a9:84:cf:
b5:1e:85:5e:c6:4b:a1:f6:04:4a:f6:a6:ec:97:38:13:9e:81:
96:79:05:b2:a4:3a:d4:4d:b7:cb:23:99:69:b5:91:77:ec:6d:
42:8e:57:72:89:0f:bd:2d:69:2a:c2:ba:75:25:94:81:c4:37:
16:68:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:54:28 2025 by rpki-client