Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/s_XQ2oZGqTeg4z79lLpRliRa8S8.roa
File: s_XQ2oZGqTeg4z79lLpRliRa8S8.roa (raw, json)
Hash identifier: WqcNm62CIVKgoAeRNSrJqR7ymiJcZbEnJwRND3Ayh8U=
Subject key identifier: B3:F5:D0:DA:86:46:A9:37:A0:E3:3E:FD:94:BA:51:96:24:5A:F1:2F
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 018CC348AC5649C9338BE4D9C267F12DFB9A
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/s_XQ2oZGqTeg4z79lLpRliRa8S8.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210690
IP address blocks: 193.255.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ac:56:49:c9:33:8b:e4:d9:c2:67:f1:2d:fb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3f5d0da8646a937a0e33efd94ba5196245af12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:0e:17:a0:c1:7e:2b:d5:b6:14:48:91:ba:
83:40:c5:d1:19:81:c8:cd:fe:63:8d:24:88:df:4b:
46:ca:0b:39:1f:3a:9c:97:ce:de:7d:34:04:ee:19:
6d:75:07:7a:ae:0d:04:45:23:bd:9f:93:fe:86:98:
5c:c0:2c:f2:a0:9d:91:bd:05:6d:3e:17:4e:27:78:
4a:7b:ff:c6:03:4f:e5:32:d8:66:64:01:07:0a:99:
5d:ee:78:94:87:4c:e4:05:34:2d:d8:a3:09:7d:b9:
2e:e6:8a:e4:f8:9c:a8:14:62:19:44:24:5c:68:1b:
18:a0:c1:6b:ee:53:06:f2:b5:5f:ce:db:55:2e:7d:
bb:e1:a5:92:2d:45:63:bf:a3:dc:64:e1:48:2c:b4:
2e:a5:b2:20:6f:02:d1:3f:a6:7d:95:68:7b:a0:cf:
1e:e4:72:82:91:40:d9:70:58:41:5e:d3:d8:97:5e:
15:b4:4e:eb:6d:62:3e:3e:91:9c:7a:30:ec:60:d0:
af:45:00:3b:1d:49:6c:89:8b:e7:67:4d:ae:67:d6:
93:fb:ff:74:d2:6a:08:8e:4f:48:2d:ef:4d:19:b2:
cc:94:79:e5:8e:4c:df:73:a9:bd:05:9a:23:2a:a8:
73:a3:81:2b:a0:4e:92:e0:af:7e:86:4b:de:5a:ff:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F5:D0:DA:86:46:A9:37:A0:E3:3E:FD:94:BA:51:96:24:5A:F1:2F
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/s_XQ2oZGqTeg4z79lLpRliRa8S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:73:5f:1d:5b:17:fe:09:be:36:3d:23:9f:b4:00:01:a3:f6:
f5:c0:1b:af:6b:cc:c0:b4:56:e7:16:a3:5c:05:7f:f2:29:a3:
25:de:db:11:5c:e9:37:7f:d6:b6:d3:b1:1f:3b:19:0b:3c:1c:
b0:c5:89:50:49:ff:c1:fb:48:6b:60:87:5d:1f:66:e9:9b:83:
e1:b9:3f:13:6f:3d:2d:d3:4d:25:8b:8c:08:ed:6e:91:4f:a6:
0a:c1:2e:a9:b0:6a:5b:f0:1b:e4:2f:0b:24:a6:d7:06:4d:8f:
b7:9e:5b:bc:c0:3a:21:99:de:2a:1f:15:b9:b7:20:7b:f3:1e:
45:fe:0f:06:e9:2a:30:56:2d:a3:0c:24:15:db:c7:ed:bc:d6:
53:e7:06:78:4d:20:62:b6:5a:d2:99:24:18:df:62:53:a4:d4:
3e:25:a1:af:7f:68:c2:04:4c:d5:19:96:d2:82:c2:9b:ae:b6:
54:a7:8b:1d:d9:ad:2c:5e:6d:5b:d6:e2:85:e3:c7:7a:5f:3f:
e9:d4:e5:0e:f2:9e:1e:d3:05:38:0e:55:f0:2f:ca:0f:c5:2d:
76:85:a7:2f:fc:61:a8:1f:ef:70:09:5e:09:31:70:b6:b1:50:
53:69:5d:ab:33:5e:10:13:cc:ed:8d:16:e7:7e:c5:ef:9e:68:
fd:52:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:01:23 2025 by rpki-client