Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/xsJCNsf7JGoraKvpf4rwdThbTZk.roa
File: xsJCNsf7JGoraKvpf4rwdThbTZk.roa (raw, json)
Hash identifier: q7zG2attD033VJ0RkiK6QjL9LFmFfFBD+NPmWlFrhrs=
Subject key identifier: C6:C2:42:36:C7:FB:24:6A:2B:68:AB:E9:7F:8A:F0:75:38:5B:4D:99
Certificate issuer: /CN=83a7c80bd26fcd29b9055dfde6833adb052454bf
Certificate serial: F5CB
Authority key identifier: 83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6fIC9JvzSm5BV395oM62wUkVL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/xsJCNsf7JGoraKvpf4rwdThbTZk.roa
Signing time: Mon 28 Feb 2022 13:21:35 +0000
ROA not before: Mon 28 Feb 2022 13:21:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42849
IP address blocks: 193.200.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62923 (0xf5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a7c80bd26fcd29b9055dfde6833adb052454bf
Validity
Not Before: Feb 28 13:21:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6c24236c7fb246a2b68abe97f8af075385b4d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:ad:de:e3:c3:44:b7:a9:04:80:36:b7:46:
2e:9f:f3:68:51:02:65:8f:f9:da:24:e6:e4:c0:f6:
f0:d5:85:b3:4a:9c:b5:c9:02:fe:30:be:0f:f8:fc:
fb:92:85:1c:a1:77:72:4f:9d:b4:d4:89:54:55:1b:
f7:be:d3:66:85:e3:44:78:05:07:a5:52:f4:35:a8:
2c:ea:87:cd:ff:89:2a:61:8f:b6:06:63:4b:f8:6d:
24:63:84:21:c6:fc:c9:c5:2f:d7:c5:e0:0f:4c:20:
2d:2e:51:7c:7b:15:7f:dc:5e:cd:9b:24:65:f1:93:
8c:28:ae:83:df:0c:44:39:bd:90:95:bb:21:0a:3c:
85:ff:96:ab:8e:75:19:2f:d0:d1:16:32:fb:bd:61:
01:41:78:d4:a7:ef:a0:ca:53:42:af:f0:57:f6:40:
c8:99:a3:05:f3:19:3c:00:5c:b1:17:f6:6b:76:f3:
b7:d2:a5:83:cc:7f:02:c3:37:ee:c6:44:fb:16:45:
ee:ed:e5:6d:c6:66:57:5d:18:8b:88:dc:de:cf:a4:
6e:6d:79:71:d7:96:33:07:8c:42:8c:e4:48:5d:8f:
d8:7a:fc:ae:01:3e:fc:95:51:db:ee:af:f1:cd:5f:
f8:f0:bf:03:59:2e:c5:e1:3a:e5:7b:f4:50:62:4e:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:42:36:C7:FB:24:6A:2B:68:AB:E9:7F:8A:F0:75:38:5B:4D:99
X509v3 Authority Key Identifier:
keyid:83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6fIC9JvzSm5BV395oM62wUkVL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/xsJCNsf7JGoraKvpf4rwdThbTZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/g6fIC9JvzSm5BV395oM62wUkVL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.131.0/24
Signature Algorithm: sha256WithRSAEncryption
32:af:8a:b3:c6:9b:e6:1d:6b:1b:c1:ca:1e:a6:c7:e8:ab:65:
f3:38:04:5c:e8:42:b8:fa:6b:3e:4e:81:d4:e9:95:bb:7d:9d:
99:ec:60:c7:a6:14:a6:28:f3:a2:01:e6:34:9e:31:94:28:dd:
42:1e:18:4f:d4:b4:56:a6:ad:d1:03:21:6b:ec:99:47:a6:b6:
ce:56:fd:79:2b:27:a4:ed:0a:09:37:27:9a:31:41:45:d6:52:
4a:26:98:23:cc:d0:4a:ea:1c:62:fa:f9:e8:f8:49:1d:21:1e:
75:25:4d:02:2c:3f:dd:77:2a:0d:10:a1:2e:41:ef:43:02:59:
90:36:8e:64:57:cb:55:27:93:dc:e9:ff:0d:11:05:14:2d:43:
1f:7e:28:07:74:86:ec:fa:35:79:00:f2:85:73:00:57:2e:d6:
29:8b:ea:16:25:36:6c:41:8a:8a:93:f7:d2:42:b9:d5:36:a8:
9a:28:c0:f0:75:86:2e:2a:6d:ea:a6:dc:15:ff:56:69:b7:10:
10:e9:a0:78:a7:fe:d5:0a:fc:fe:68:cc:80:08:f3:10:f0:53:
f8:cc:3e:b3:7e:04:85:a2:7f:df:9f:11:92:86:4d:bb:54:dc:
60:a0:3d:cb:40:f7:77:5c:9c:43:f8:b3:80:8c:32:4d:98:cc:
98:b0:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:21 2025 by rpki-client