Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/gZ5SKhiHCweeDuDRZFB_xSTSsHM.roa
File: gZ5SKhiHCweeDuDRZFB_xSTSsHM.roa (raw, json)
Hash identifier: NJLtTQQ8D43bI8JN9pedM6yKTiohJU7XgkzeAFGIWfU=
Subject key identifier: 81:9E:52:2A:18:87:0B:07:9E:0E:E0:D1:64:50:7F:C5:24:D2:B0:73
Certificate issuer: /CN=3a86b7a734abe4eb73f4c966af66beda7459b75f
Certificate serial: 386015EF
Authority key identifier: 3A:86:B7:A7:34:AB:E4:EB:73:F4:C9:66:AF:66:BE:DA:74:59:B7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/gZ5SKhiHCweeDuDRZFB_xSTSsHM.roa
Signing time: Sat 01 Jan 2022 04:57:31 +0000
ROA not before: Sat 01 Jan 2022 04:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2595
IP address blocks: 193.43.137.0/24 maxlen: 24
2001:848::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945821167 (0x386015ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a86b7a734abe4eb73f4c966af66beda7459b75f
Validity
Not Before: Jan 1 04:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=819e522a18870b079e0ee0d164507fc524d2b073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:15:5a:b2:8c:2c:c7:2b:ad:23:3e:82:a3:
a2:ef:66:21:76:fa:e4:ee:f0:01:33:0e:37:eb:61:
2e:4f:b8:a3:b0:c9:fc:7c:7c:bc:b7:fb:0d:09:8b:
6d:0e:89:2f:04:99:72:31:3d:cb:93:62:3c:50:75:
ed:65:95:80:9e:d3:71:1b:9b:fd:76:b8:97:bf:72:
4a:b9:b5:6f:87:59:ac:29:fd:a3:3b:21:90:ba:52:
fc:a2:87:72:0f:02:42:60:62:ab:9c:46:c0:b4:9a:
eb:2c:20:09:a7:d7:9c:82:96:c8:83:96:da:86:c4:
a5:a3:fa:7c:ab:2f:67:9f:ff:7c:ce:af:a0:77:3c:
08:94:d0:8b:a6:cd:4b:22:fa:00:0e:85:29:cd:29:
b2:82:e1:43:cd:09:79:c9:0f:4b:ac:ab:46:2a:a3:
73:97:92:75:d7:92:2e:ef:e4:a4:93:8a:51:59:5b:
5b:ab:57:94:42:8a:9c:fb:0c:04:bb:91:92:dd:c0:
c2:a0:73:ca:f9:d7:39:fd:19:3d:32:11:86:35:35:
97:e5:e6:c7:17:96:82:5f:8d:5d:5a:18:7d:02:c4:
4e:7a:17:94:ff:7b:c8:f2:c9:5a:41:94:51:fa:f5:
e6:6f:87:15:0a:c7:39:87:90:2e:19:6d:31:f2:c3:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9E:52:2A:18:87:0B:07:9E:0E:E0:D1:64:50:7F:C5:24:D2:B0:73
X509v3 Authority Key Identifier:
keyid:3A:86:B7:A7:34:AB:E4:EB:73:F4:C9:66:AF:66:BE:DA:74:59:B7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/gZ5SKhiHCweeDuDRZFB_xSTSsHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.137.0/24
IPv6:
2001:848::/32
Signature Algorithm: sha256WithRSAEncryption
60:58:0b:23:cc:c1:86:eb:dc:91:eb:7c:e6:6d:69:d9:c2:86:
ee:2b:b2:c0:a8:65:8e:4c:8b:9b:c4:b4:6a:63:ce:34:53:d7:
9b:10:74:04:34:6a:05:b4:89:cc:71:6f:56:d9:49:21:95:f2:
91:cc:6c:fc:7a:b6:31:47:55:1a:16:a7:a5:12:50:e7:ff:1f:
1d:8e:31:df:06:a9:ac:4d:b5:a0:ec:25:33:85:20:1f:49:7e:
6a:79:d5:07:af:aa:d0:a4:5f:ea:6c:b4:45:08:e7:ed:85:6a:
89:c0:7a:f2:84:f5:fd:e1:c1:0c:8a:56:5b:d9:fd:9c:4a:9f:
38:8f:56:e1:a1:04:b9:d1:98:3d:bd:4c:72:38:33:a7:21:6f:
36:f1:cc:f0:99:8b:06:f7:b4:37:5e:8b:e0:b8:a3:91:59:c1:
e2:a5:25:43:9e:37:db:18:53:1f:43:56:3c:e9:89:aa:13:c0:
f5:30:45:7c:a0:8b:44:32:44:db:f0:0e:05:2f:69:62:a2:d3:
26:f2:55:86:50:70:86:b4:da:0e:f1:fb:40:37:8f:e9:66:3b:
a9:0c:2c:c3:ca:ff:31:bd:56:15:77:e2:ab:a0:42:cd:8b:78:
ab:17:a1:c9:b2:d2:aa:48:40:9b:49:e2:42:9c:6b:da:77:84:
b5:8d:92:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:32 2025 by rpki-client