Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/kV4ekwX5PAB1Tv4_WLuqlgXljkc.roa
File: kV4ekwX5PAB1Tv4_WLuqlgXljkc.roa (raw, json)
Hash identifier: 7e4a2O68q1UjKy2MS1IotCT7sgtV7WonRr0AlBaQ0qU=
Subject key identifier: 91:5E:1E:93:05:F9:3C:00:75:4E:FE:3F:58:BB:AA:96:05:E5:8E:47
Certificate issuer: /CN=6cbf88a9c36cf62bdd3303ef1d4d75113c66a55b
Certificate serial: 018571FA39C68493B076E9C65FA074398A72
Authority key identifier: 6C:BF:88:A9:C3:6C:F6:2B:DD:33:03:EF:1D:4D:75:11:3C:66:A5:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bL-IqcNs9ivdMwPvHU11ETxmpVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/kV4ekwX5PAB1Tv4_WLuqlgXljkc.roa
Signing time: Mon 02 Jan 2023 10:15:02 +0000
ROA not before: Mon 02 Jan 2023 10:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 193.104.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:39:c6:84:93:b0:76:e9:c6:5f:a0:74:39:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbf88a9c36cf62bdd3303ef1d4d75113c66a55b
Validity
Not Before: Jan 2 10:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=915e1e9305f93c00754efe3f58bbaa9605e58e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:86:37:91:20:02:55:b3:0b:4a:d3:81:13:
00:62:25:5a:61:e3:b9:e1:89:bc:30:5a:5d:67:ff:
14:cf:01:ce:e2:41:b8:1e:4c:ce:f6:ec:fa:db:1a:
ea:91:01:94:52:51:ac:ab:56:61:80:37:40:c7:7a:
15:23:d0:4c:49:01:22:00:85:d6:81:c6:db:3b:c3:
fa:98:89:cd:b4:8a:f1:7e:ba:27:9f:fc:cf:bf:84:
41:eb:05:09:7b:e2:e0:87:1c:ee:35:a3:7e:39:a9:
47:72:d7:5e:fa:8b:4a:c7:13:4c:a3:64:e1:86:b0:
bb:0a:28:05:ce:98:a4:84:f0:b3:4a:eb:f3:be:fb:
85:40:2a:5c:7b:3a:5e:b1:69:75:a2:a5:8b:41:26:
47:dc:9d:66:97:be:29:a2:f3:14:68:5a:6d:2f:32:
f4:13:b2:b0:56:20:69:42:de:0a:e4:e9:14:75:ad:
92:e8:e1:46:cf:31:94:c5:88:78:bb:94:9d:a9:ce:
e4:1f:68:d6:37:c5:e8:d3:d2:4f:25:7b:9e:d7:d1:
2b:56:4e:34:3f:db:9f:ae:7c:e1:1e:99:f9:af:ce:
d0:d7:d7:c7:7c:a6:b1:2a:59:e4:26:a8:89:2e:72:
15:35:db:67:ee:8e:58:2e:80:27:b2:f8:82:e0:e9:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:1E:93:05:F9:3C:00:75:4E:FE:3F:58:BB:AA:96:05:E5:8E:47
X509v3 Authority Key Identifier:
keyid:6C:BF:88:A9:C3:6C:F6:2B:DD:33:03:EF:1D:4D:75:11:3C:66:A5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bL-IqcNs9ivdMwPvHU11ETxmpVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/kV4ekwX5PAB1Tv4_WLuqlgXljkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/bL-IqcNs9ivdMwPvHU11ETxmpVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.96.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c1:39:0b:f1:ff:d7:50:64:d2:15:fc:39:c8:32:99:6d:3e:
d1:a7:ac:e4:74:b9:12:a9:7e:19:f5:be:39:aa:2f:ac:3b:a2:
6b:48:3f:25:c6:70:53:0a:c1:84:b8:d5:a2:07:90:f7:b3:c4:
bf:a1:47:cd:85:e9:5d:9d:0e:ae:96:ee:85:f6:0c:d0:61:c6:
0f:3f:7f:da:cf:2c:0d:64:06:c6:80:6e:8c:8c:79:2f:ae:d0:
75:07:b9:f0:9b:4f:c4:db:ff:33:e0:b1:2e:04:91:5c:42:61:
c3:d6:2f:af:87:10:88:50:5c:60:78:4e:8a:c1:1b:ae:59:c3:
44:3a:ab:3e:c8:fb:52:03:ab:22:17:16:3e:b5:69:4c:12:1c:
ee:7d:09:61:70:da:0c:41:60:52:6c:b2:68:f5:e4:1d:58:04:
87:fb:e8:dd:28:22:f5:dc:ef:d6:44:b7:94:a2:a4:9f:db:ad:
fb:d4:2a:70:22:66:fa:f0:98:9d:0c:23:cb:c0:02:95:b7:af:
50:de:05:1a:4c:c7:db:40:11:fc:82:8a:c3:77:2c:df:32:1e:
55:2a:21:37:e6:d4:ee:e0:47:64:45:bb:51:47:61:f7:71:c1:
b3:67:e9:e0:5f:1c:09:e9:49:9b:0d:c3:26:ef:49:20:84:ca:
18:e4:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:40 2025 by rpki-client