Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/lU8tIbbENKvbqNTq99UTpNLRn7U.roa
File: lU8tIbbENKvbqNTq99UTpNLRn7U.roa (raw, json)
Hash identifier: jL0WZ+0L+OrB3XlL29mNji0vqXFd8zF/y4ibKxxGXkI=
Subject key identifier: 95:4F:2D:21:B6:C4:34:AB:DB:A8:D4:EA:F7:D5:13:A4:D2:D1:9F:B5
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 2341DB
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/lU8tIbbENKvbqNTq99UTpNLRn7U.roa
Signing time: Fri 25 Mar 2022 13:54:48 +0000
ROA not before: Fri 25 Mar 2022 13:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3399
IP address blocks: 193.53.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310619 (0x2341db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 25 13:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=954f2d21b6c434abdba8d4eaf7d513a4d2d19fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:5e:9c:13:b7:72:85:c1:75:3b:7f:17:ec:
a4:00:c1:29:f6:98:51:50:35:3e:70:e8:67:a9:95:
fb:ab:36:39:4a:60:2b:d5:ab:8d:e3:e1:90:95:6f:
1b:60:df:be:fc:21:59:ff:6a:20:37:b4:06:ba:52:
91:ea:c4:2f:35:90:8c:f5:f6:73:05:c0:ae:4b:71:
21:00:dd:1c:36:52:90:3c:22:02:83:bc:59:91:49:
6c:fe:77:d8:3e:13:ae:04:d7:af:b5:98:a5:eb:f5:
03:dd:8e:02:ce:ca:00:4d:27:4d:a1:e3:fd:c9:71:
ae:63:24:1a:fe:b7:20:b0:65:5b:43:9a:90:2f:58:
3b:d6:13:e7:28:73:64:a0:a5:d3:78:93:a0:0c:4c:
ac:cf:ba:cd:c0:24:b7:5f:fc:f8:fa:d9:ba:bf:23:
47:89:19:d7:85:7e:f9:ae:2e:b2:6c:20:ed:ee:5d:
a8:0f:de:0e:b0:fd:14:ba:f0:da:47:d4:fd:f9:6a:
f6:cb:4c:0b:86:28:e8:86:c3:b2:5d:1b:a2:a7:2d:
59:01:28:6a:cd:8b:da:00:f1:72:15:d3:74:ee:8e:
b2:a0:63:aa:42:24:65:9b:b5:91:db:88:b1:10:60:
ea:7e:fb:82:cf:96:60:23:31:ee:60:33:e1:ff:59:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4F:2D:21:B6:C4:34:AB:DB:A8:D4:EA:F7:D5:13:A4:D2:D1:9F:B5
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/lU8tIbbENKvbqNTq99UTpNLRn7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:64:99:fc:da:11:98:cc:90:78:d4:39:b7:2b:02:b6:e8:90:
9a:11:ba:a5:c4:c3:8a:c4:3e:49:d5:eb:aa:21:f5:ef:f2:df:
13:2e:65:d1:9d:d9:f9:9e:ff:f9:23:ea:e4:b1:1e:a0:c5:2b:
83:4c:c4:a5:a8:12:2e:1e:14:6b:56:e0:af:7b:9f:66:54:5d:
47:2c:28:ee:17:66:ff:76:b9:f9:d6:e8:be:54:b6:aa:be:04:
cc:37:b6:90:c0:96:79:d0:e4:41:48:28:20:f1:58:77:4f:05:
9e:85:89:54:06:ac:0e:22:97:2f:43:00:8d:10:b2:8e:ab:ed:
10:31:d6:69:8b:7b:a4:6c:3f:0c:87:44:11:7a:e6:20:f2:05:
41:3c:6a:9f:18:30:13:b6:71:60:5e:f6:a3:cd:47:b0:5a:de:
cf:4b:28:fa:4f:26:4a:a7:bb:22:f8:b8:b3:41:00:14:c2:4a:
6c:aa:72:19:0d:9a:06:e7:78:c1:f8:be:69:5d:1f:5e:b9:9f:
60:57:27:c1:07:19:c1:61:2c:21:21:df:11:55:a6:c5:27:58:
9b:3a:de:25:82:bc:03:22:54:0d:ad:c2:67:e3:53:0e:aa:38:
81:f5:88:39:e4:81:81:25:ab:e9:13:13:4f:c3:4f:df:31:ce:
19:e5:03:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:08 2025 by rpki-client