Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/bsISVX5IIE2z86bjp39g76JQl5Q.roa
File: bsISVX5IIE2z86bjp39g76JQl5Q.roa (raw, json)
Hash identifier: VP+KxG1fy8uWwy4ANpW38y8CheD6R1RTqOAhsEloj7o=
Subject key identifier: 6E:C2:12:55:7E:48:20:4D:B3:F3:A6:E3:A7:7F:60:EF:A2:50:97:94
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019364AD774237CBBA55982154B89E549677
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/bsISVX5IIE2z86bjp39g76JQl5Q.roa
Signing time: Mon 25 Nov 2024 18:55:10 +0000
ROA not before: Mon 25 Nov 2024 18:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 213.18.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:ad:77:42:37:cb:ba:55:98:21:54:b8:9e:54:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Nov 25 18:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ec212557e48204db3f3a6e3a77f60efa2509794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:c1:7a:69:7f:49:b5:2a:bb:18:2c:72:17:
0e:11:6e:3e:78:25:d9:10:8a:1d:d4:9e:66:14:03:
8e:11:22:81:f1:5f:e7:7a:d6:2e:27:e2:c5:06:75:
af:06:88:57:3e:42:c3:4f:53:60:2f:2b:b5:c2:8d:
4a:bd:a0:c3:0a:3f:35:27:e0:b2:4a:e2:f5:53:d4:
0b:64:57:00:3f:2e:f5:ec:ff:e8:0a:98:28:8b:5d:
1c:5d:08:da:71:95:a1:b4:5b:f2:10:7e:d2:88:38:
a8:e4:37:9a:3f:6c:ef:e2:7b:b6:04:92:7d:1d:69:
26:43:31:b9:d2:2b:9f:4d:d4:e0:f8:3d:72:5e:1c:
c8:bb:c4:55:3a:69:3a:c8:2e:b2:9c:50:76:9a:a9:
3d:db:63:7d:4e:43:c3:c2:72:1c:0a:05:56:16:50:
bb:b3:59:0d:28:46:75:c8:b4:48:0c:30:c8:8a:e2:
30:bf:7b:d9:5b:23:89:ed:ed:8e:44:b3:b3:11:26:
77:47:4c:03:f2:36:3b:ec:55:f4:8e:0f:f7:4d:6f:
7d:e6:34:47:37:57:d8:e1:ab:61:80:c7:6e:04:2f:
50:5e:d1:c6:c9:00:8d:8d:0a:7f:cf:44:cf:2d:5e:
84:16:d5:92:8d:a6:e4:9b:c6:5d:de:ed:09:ed:46:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C2:12:55:7E:48:20:4D:B3:F3:A6:E3:A7:7F:60:EF:A2:50:97:94
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/bsISVX5IIE2z86bjp39g76JQl5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.192.0/22
Signature Algorithm: sha256WithRSAEncryption
28:55:0e:f0:39:ed:e1:e4:a9:e6:21:4a:b8:69:4e:bb:27:e3:
45:b0:a0:1d:28:f8:2d:b9:db:a7:a5:ed:64:9c:2c:ae:77:97:
5a:74:bd:89:c1:3b:f4:5e:ac:a7:ae:e0:c0:c6:0d:c4:54:10:
a6:b6:9b:41:36:c4:eb:59:4b:c7:a6:8f:06:bc:e4:7b:6e:39:
36:29:3b:1a:8a:aa:6f:43:57:30:33:87:11:70:93:47:d2:85:
0f:21:f7:37:df:81:9d:33:54:2c:c0:dd:98:21:eb:7c:cd:3b:
e8:44:af:3a:27:72:6b:7b:a6:88:ea:53:3c:97:86:d0:ca:4c:
99:30:04:d7:c8:b9:3b:9e:12:9b:53:9d:f6:8f:0d:3c:2b:74:
53:e5:5b:f7:6a:b6:35:53:ac:c5:78:7f:72:3e:84:18:27:60:
ef:85:cc:e8:f4:5e:f1:7e:00:d0:50:e6:f9:62:39:8a:9c:0e:
65:30:62:8d:12:1c:22:70:15:a6:7f:13:3e:45:f6:24:a5:08:
5f:ae:52:fc:44:4f:41:98:ff:04:02:10:41:e0:78:59:df:cf:
76:b8:95:33:7d:03:b9:55:a3:e2:c2:84:b0:fc:c8:b3:04:cf:
fc:37:89:ef:5f:55:df:4e:14:f5:cf:ef:09:9e:0a:da:f4:63:
54:bb:be:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:10 2025 by rpki-client