Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/5qN2lScdvIytQlRzog6ubwNJCww.roa
File: 5qN2lScdvIytQlRzog6ubwNJCww.roa (raw, json)
Hash identifier: D516pZuoQnUYuh1SQwd7xuB9YvrzGiMQTTrbpgAtodU=
Subject key identifier: E6:A3:76:95:27:1D:BC:8C:AD:42:54:73:A2:0E:AE:6F:03:49:0B:0C
Certificate issuer: /CN=92fb287165cd308f0287de984d21b2163cd0312c
Certificate serial: 01857227EA4E1FB48C6213C6F5637B323B20
Authority key identifier: 92:FB:28:71:65:CD:30:8F:02:87:DE:98:4D:21:B2:16:3C:D0:31:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvsocWXNMI8Ch96YTSGyFjzQMSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/5qN2lScdvIytQlRzog6ubwNJCww.roa
Signing time: Mon 02 Jan 2023 11:04:56 +0000
ROA not before: Mon 02 Jan 2023 11:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61006
IP address blocks: 193.161.248.0/22 maxlen: 22
194.187.0.0/20 maxlen: 20
193.161.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:ea:4e:1f:b4:8c:62:13:c6:f5:63:7b:32:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb287165cd308f0287de984d21b2163cd0312c
Validity
Not Before: Jan 2 11:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6a37695271dbc8cad425473a20eae6f03490b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ec:61:a0:1b:d9:4c:b4:08:c7:e0:ee:4f:b6:
1e:89:00:15:c5:e0:2b:8b:03:ca:6b:17:54:8f:b6:
74:55:32:9f:c7:7b:9d:7d:1e:4e:8a:18:a4:71:5b:
9b:f7:63:01:34:ca:bc:4d:6a:c6:43:e4:a9:8f:bc:
21:c6:25:8e:c5:39:a7:fb:7b:10:07:1c:70:a6:a0:
b5:a0:37:92:af:6e:73:1a:a5:f0:21:80:7e:a6:1a:
75:31:76:5f:44:1a:06:df:eb:b4:80:02:4f:1d:1b:
5d:3c:17:6f:c4:5b:6d:b8:9b:04:bf:3c:f9:41:e0:
5b:c0:06:de:b5:61:9d:d3:e5:4b:f2:af:2a:68:25:
9f:a5:82:03:b2:d3:27:79:08:22:9e:60:c5:27:db:
16:00:4a:69:7f:c0:a6:b7:61:8d:3b:6c:58:ba:7f:
34:8d:36:d6:79:89:71:7f:36:b5:90:7e:de:89:63:
04:b0:89:9f:ee:d0:1c:b7:86:70:2d:9c:6e:32:2a:
1b:b3:55:4d:f6:2d:f2:b3:b6:c5:94:c9:bb:f0:ba:
48:0c:d9:16:2a:28:1a:25:fc:ba:59:d7:d4:e6:ad:
19:80:a5:e7:a9:54:7e:38:4d:26:f0:e0:4e:e5:39:
41:9f:f8:d9:e2:dc:15:90:da:4d:7f:57:ef:af:3d:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:76:95:27:1D:BC:8C:AD:42:54:73:A2:0E:AE:6F:03:49:0B:0C
X509v3 Authority Key Identifier:
keyid:92:FB:28:71:65:CD:30:8F:02:87:DE:98:4D:21:B2:16:3C:D0:31:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvsocWXNMI8Ch96YTSGyFjzQMSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/5qN2lScdvIytQlRzog6ubwNJCww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/kvsocWXNMI8Ch96YTSGyFjzQMSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.88.0/21
193.161.248.0/22
194.187.0.0/20
Signature Algorithm: sha256WithRSAEncryption
48:28:e0:49:9a:90:5b:42:7c:2e:4e:a4:07:e2:64:a0:04:94:
c3:71:10:79:a0:54:9b:c4:26:4f:fa:a7:6e:94:3a:d4:61:99:
06:e3:1c:67:da:0c:93:5b:64:3e:40:39:71:af:f1:63:8c:41:
67:92:38:2d:ee:24:de:4b:d4:02:3a:f2:30:67:d2:e1:40:2e:
22:80:18:8a:72:54:bb:82:19:0f:7c:b8:51:80:4b:d2:3f:11:
ea:59:42:6a:ab:ad:f4:bf:a3:dd:c4:45:fe:2f:87:7b:23:93:
af:eb:af:ab:ea:e3:75:c7:ff:58:7b:3a:6d:45:0b:55:42:a9:
74:09:a4:ed:c0:07:58:13:f1:89:1d:48:42:48:67:45:06:bc:
52:6e:57:c4:83:66:b8:97:08:bf:c0:3a:ef:1a:09:d5:e1:5d:
bd:b0:7c:ae:e9:11:01:ad:b3:40:f0:49:fe:00:d4:c6:f7:72:
76:f2:7b:07:58:62:f3:d0:f8:8d:c1:c1:30:c1:45:16:91:9b:
0d:3e:77:98:a1:53:12:fd:7d:39:5f:e2:08:a0:89:a3:b2:06:
e2:6a:77:6d:0b:1c:ff:bb:fa:84:56:9f:2d:c8:15:c6:bc:11:
64:bd:ef:a1:40:46:33:91:f3:89:43:f8:5d:50:6c:d6:2e:0b:
fe:65:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:04 2025 by rpki-client