Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/INQ6MS2KFU-PYVskW0KoY4woU_4.roa
File: INQ6MS2KFU-PYVskW0KoY4woU_4.roa (raw, json)
Hash identifier: Z6GX6KUVSR7TTzK8LloyOlNGsT0SEqd+S0vTwsvBrNE=
Subject key identifier: 20:D4:3A:31:2D:8A:15:4F:8F:61:5B:24:5B:42:A8:63:8C:28:53:FE
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 018615D50E5CDBFE76CBCB74B94887683C2B
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/INQ6MS2KFU-PYVskW0KoY4woU_4.roa
Signing time: Fri 03 Feb 2023 05:52:09 +0000
ROA not before: Fri 03 Feb 2023 05:52:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.246.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:15:d5:0e:5c:db:fe:76:cb:cb:74:b9:48:87:68:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Feb 3 05:52:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d43a312d8a154f8f615b245b42a8638c2853fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:09:e3:6b:b4:67:e7:8a:d1:5f:58:9e:64:69:
bb:5b:c5:8b:99:57:55:c4:11:d0:66:38:5e:62:fb:
16:c3:e8:f6:69:18:74:0d:b7:c0:72:4e:64:60:f7:
35:fb:8d:b0:f5:51:ec:f0:ea:5c:75:f6:ed:b3:48:
79:5f:a1:e3:5e:cf:d6:80:31:77:76:71:56:88:7a:
fa:e8:d8:ab:86:a5:7f:be:9b:5c:52:fb:49:d0:2c:
03:b3:6e:a3:6a:80:76:ea:af:45:26:6d:1e:db:0a:
56:71:bb:1e:d9:8c:04:cb:84:95:00:82:e1:87:6a:
74:83:2b:85:46:4c:06:88:6a:68:0a:2b:b1:8f:20:
a8:66:32:fe:0a:6d:11:74:92:60:cd:ac:c8:1d:b1:
5b:f8:4a:6b:21:d1:3d:90:d5:a6:77:97:b6:ea:93:
ef:7e:d5:c6:34:1d:49:26:b2:2d:42:3b:25:d0:c7:
7c:41:10:ea:8b:d1:92:72:55:15:8a:fb:fd:9d:ab:
f4:88:4d:ba:ba:04:0f:05:cc:b2:c6:2c:ba:8b:ad:
30:bd:73:f1:f8:f0:88:f4:d7:c2:6c:c3:33:76:21:
65:af:e2:23:9d:d9:f2:73:20:a7:7f:51:35:55:2f:
88:e6:7f:69:9f:08:e0:62:f9:c9:17:45:c9:ee:05:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:3A:31:2D:8A:15:4F:8F:61:5B:24:5B:42:A8:63:8C:28:53:FE
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/INQ6MS2KFU-PYVskW0KoY4woU_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:cc:53:57:56:7e:0e:fc:63:64:43:50:60:9b:09:7f:66:d8:
0e:03:c8:80:87:c1:8a:08:f3:52:37:9b:55:76:c3:92:42:f9:
9f:e9:96:e0:65:87:6c:cb:37:ef:71:be:77:bf:0e:26:33:72:
9c:57:c6:ed:d6:b7:1d:22:5d:e9:28:20:2a:1e:bd:2c:f8:fd:
b8:7d:e2:52:b4:a2:56:c7:76:ce:f7:d9:77:ef:64:11:ba:d6:
36:b6:e0:11:73:1a:ff:02:5f:90:20:c0:8e:d5:29:9d:fd:a6:
4a:a5:8e:2c:46:7e:34:89:94:1a:f7:0b:3c:23:f2:9b:48:bb:
a5:13:81:6e:26:a2:53:48:b6:a6:f7:32:2f:bd:13:c0:11:87:
b3:39:7a:ab:03:10:52:ec:a2:b9:56:ef:9a:69:e3:be:bd:e7:
79:9a:9c:11:83:2c:e8:17:88:06:68:94:39:ac:c6:08:26:8d:
9e:66:81:32:0e:dc:7e:9e:48:5e:ea:2f:7c:b7:da:88:bd:ca:
f1:8b:a4:ee:95:81:39:9f:8b:ee:d3:0f:83:d9:c0:79:66:b7:
11:5e:1a:82:b3:fc:dd:fd:f9:14:49:a2:b5:1e:1d:2d:0f:27:
1b:70:e7:a8:17:a2:b0:91:14:36:e0:07:91:42:83:d4:1b:88:
30:5e:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:06 2025 by rpki-client