Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/tsHPL4oZTv-P_KEvbAwC3XllDys.roa
File: tsHPL4oZTv-P_KEvbAwC3XllDys.roa (raw, json)
Hash identifier: FsKX6349oGOYqm6jFxJ/sJL2MCkxj4xONJpB9FBn9HM=
Subject key identifier: B6:C1:CF:2F:8A:19:4E:FF:8F:FC:A1:2F:6C:0C:02:DD:79:65:0F:2B
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 0184A14184C3104D7CB449A902C452A55150
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/tsHPL4oZTv-P_KEvbAwC3XllDys.roa
Signing time: Tue 22 Nov 2022 21:32:16 +0000
ROA not before: Tue 22 Nov 2022 21:32:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212517
IP address blocks: 193.53.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a1:41:84:c3:10:4d:7c:b4:49:a9:02:c4:52:a5:51:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Nov 22 21:32:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6c1cf2f8a194eff8ffca12f6c0c02dd79650f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:57:89:6c:b9:f1:cf:3f:30:61:48:3c:3c:
f1:d9:1b:9b:0e:4a:a7:34:96:d6:4a:cb:92:5b:3a:
7a:6a:f6:c7:65:33:23:89:a4:77:86:23:87:48:d8:
70:23:fe:14:81:c9:68:24:81:6c:d4:b1:42:34:4f:
b8:f2:d7:bb:75:e2:c4:30:40:66:4b:1b:48:14:fc:
d9:ae:12:55:1b:8a:cf:28:f1:79:c0:a3:c6:9a:b4:
0b:9f:f7:87:2c:17:52:53:af:bc:99:6d:21:61:50:
61:a7:cc:48:86:2c:48:5a:10:b9:53:bd:7d:5d:4b:
15:84:f8:55:ca:3b:7b:6c:aa:17:f1:e8:15:3e:ee:
bd:64:cf:e1:57:f0:07:f9:cf:07:6f:4c:00:4a:6a:
8b:68:94:8c:5b:3a:b8:21:3f:47:72:ed:11:49:4b:
fd:e8:f7:cd:87:9e:9f:a3:e7:45:10:22:27:f2:e5:
74:15:de:c8:60:94:45:14:b4:9c:93:f3:a9:9c:10:
ce:d1:02:ba:00:3c:29:92:f9:b1:2e:ca:be:20:33:
f5:ea:1a:a9:0d:cb:dd:26:d6:3b:a2:0b:26:cd:89:
ef:78:44:a1:e0:9c:e7:78:b6:63:c6:ad:78:83:e5:
23:8a:47:d9:17:31:a5:c9:1d:1b:ed:dc:d1:50:3f:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C1:CF:2F:8A:19:4E:FF:8F:FC:A1:2F:6C:0C:02:DD:79:65:0F:2B
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/tsHPL4oZTv-P_KEvbAwC3XllDys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.81.0/24
Signature Algorithm: sha256WithRSAEncryption
06:46:85:d9:a6:09:bd:b8:af:06:cb:c0:2d:a7:9c:4c:8f:f1:
f8:36:f5:39:08:5b:c7:ab:d0:0f:62:1c:3a:0a:ff:b4:e2:da:
eb:cd:47:66:90:8f:e5:fa:b0:74:92:32:46:6a:83:7c:86:5c:
29:1b:f4:76:d1:27:cb:aa:fc:96:b4:1e:10:52:74:67:59:0b:
89:00:dc:3e:fe:62:79:90:95:b4:56:c3:b7:a3:e7:ae:8c:57:
d6:cc:72:a2:93:ba:35:54:fc:05:64:e4:86:11:e8:2e:9f:77:
6a:2a:c6:81:54:93:5f:2a:ac:a8:1b:82:12:f3:ac:b9:cf:61:
e1:8f:55:60:3a:3d:5d:35:1e:9d:9f:ad:00:e5:dd:78:2c:5a:
01:f5:42:a5:d5:96:c9:1a:50:44:9b:05:eb:ec:51:7c:db:fe:
8c:00:55:29:f2:b4:f5:74:36:43:c9:ce:73:b4:ef:cd:87:c9:
f1:c3:5b:eb:86:e9:41:5f:da:6a:80:db:fe:d5:c5:14:39:37:
ad:6c:b3:8b:a2:70:3d:30:40:6b:2e:d1:2e:4d:7d:25:f5:c6:
e4:e3:dd:2c:15:83:1a:b5:d1:e7:75:e5:b8:01:5c:b0:b8:43:
95:04:df:e7:fb:3c:56:d1:ce:47:45:ca:2d:0d:49:e9:da:fb:
68:35:df:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:03 2025 by rpki-client