Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/dqpKa0grqz9-e3cMHkrr9FHoLdA.roa
File: dqpKa0grqz9-e3cMHkrr9FHoLdA.roa (raw, json)
Hash identifier: 5Kj1qvR/GzrKiOFG4tNFg15GIJ6OYKUqSzvsqEYaFPA=
Subject key identifier: 76:AA:4A:6B:48:2B:AB:3F:7E:7B:77:0C:1E:4A:EB:F4:51:E8:2D:D0
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 0186028E08785569A4EA386284755A8A3461
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/dqpKa0grqz9-e3cMHkrr9FHoLdA.roa
Signing time: Mon 30 Jan 2023 12:01:48 +0000
ROA not before: Mon 30 Jan 2023 12:01:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.246.103.0/24 maxlen: 24
193.246.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:8e:08:78:55:69:a4:ea:38:62:84:75:5a:8a:34:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Jan 30 12:01:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76aa4a6b482bab3f7e7b770c1e4aebf451e82dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:d5:1f:83:a5:01:af:68:7f:e6:13:d6:bc:
69:14:9a:1d:50:56:61:99:de:bc:96:84:06:6e:40:
8d:54:45:7f:71:f5:2f:71:53:04:3c:87:c2:bf:51:
d4:50:4a:f4:22:8b:5c:8f:80:92:d5:cc:28:85:3a:
ee:8a:b6:e5:84:34:1c:80:7b:1d:74:ae:9b:8c:de:
45:14:0f:75:92:20:92:c8:74:ce:52:aa:ce:fb:02:
72:ae:ab:5e:0c:5d:9f:c5:e3:25:e2:d8:e8:7a:2c:
ba:e2:d7:cd:f2:d7:a7:74:8d:97:17:9e:c5:3b:1c:
3f:32:a2:d7:6f:27:04:36:ab:f8:83:7e:c2:3b:f6:
cf:41:5a:f1:5e:61:5c:6f:27:7a:b4:29:1d:d6:56:
3f:dc:6a:fd:7b:80:09:67:5d:8a:24:0c:9a:ef:1e:
9d:a1:8b:e3:14:13:7d:eb:8d:e3:d9:59:9e:5d:5f:
3d:77:2c:28:d0:42:f7:0b:be:f2:ad:4f:ee:bb:66:
cd:65:06:47:c1:d6:37:4c:e2:25:63:b4:7f:e0:47:
e6:49:4f:7b:b3:7c:2b:31:49:b1:c0:2d:b8:2a:c1:
e4:6c:70:fe:b9:bc:c2:be:92:76:56:b0:56:ba:de:
c7:69:76:4b:99:2e:1c:c5:43:4e:ad:a3:e3:5d:a2:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:4A:6B:48:2B:AB:3F:7E:7B:77:0C:1E:4A:EB:F4:51:E8:2D:D0
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/dqpKa0grqz9-e3cMHkrr9FHoLdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.5.0/24
193.246.103.0/24
Signature Algorithm: sha256WithRSAEncryption
76:06:a3:1d:81:a3:d6:a6:8d:fc:30:3b:1c:0a:93:89:15:4a:
b9:30:95:73:a9:70:b0:70:17:c7:2b:aa:c3:92:68:84:cf:61:
ad:e8:95:a1:ae:61:3f:43:2f:b5:38:f2:ad:e9:4f:69:c4:3b:
08:67:2e:95:ea:fa:7d:e9:e1:83:2d:42:97:d1:91:37:74:e6:
51:27:de:54:35:c7:a3:34:a3:6a:86:f8:de:ca:fa:f5:5e:35:
39:24:22:d7:86:e0:2f:4b:66:30:86:20:56:4b:c5:21:dd:00:
b2:f0:3d:6a:bf:63:4f:82:3b:25:7e:be:0d:9c:81:a6:83:48:
a8:fb:f6:5c:b7:32:11:a4:04:ce:e1:bc:eb:99:3c:05:a6:76:
04:14:45:a7:6b:53:13:02:d2:71:65:32:87:04:bc:48:3f:83:
99:42:d7:ec:36:92:f9:96:eb:e9:2d:f1:ca:2f:73:e6:d9:15:
73:98:fb:55:60:9d:8c:71:15:e1:23:b8:9d:b5:9d:b8:df:32:
82:01:72:19:21:eb:9d:82:cb:91:d2:e7:dd:b5:05:7a:76:2e:
19:f3:72:3e:89:db:84:6f:31:a2:74:84:61:ac:4f:b1:bb:26:
dc:f3:39:e2:28:e6:d7:4b:b7:f7:8a:88:49:70:89:3b:e7:90:
35:25:0e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:01 2025 by rpki-client