Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/vXwYjhWEGxmnsvR_-E_MQMew3KQ.roa
File: vXwYjhWEGxmnsvR_-E_MQMew3KQ.roa (raw, json)
Hash identifier: +amaB513T0z83ds4i24dDNr42MYCI1PejG6MOQwQ+9c=
Subject key identifier: BD:7C:18:8E:15:84:1B:19:A7:B2:F4:7F:F8:4F:CC:40:C7:B0:DC:A4
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 030A9D67
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/vXwYjhWEGxmnsvR_-E_MQMew3KQ.roa
Signing time: Sat 01 Jan 2022 11:59:26 +0000
ROA not before: Sat 01 Jan 2022 11:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212707
IP address blocks: 193.163.47.0/24 maxlen: 24
2a10:5bc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51027303 (0x30a9d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Jan 1 11:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd7c188e15841b19a7b2f47ff84fcc40c7b0dca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:77:7a:ae:09:01:6d:a9:24:e4:81:73:a2:
48:80:f1:0b:41:4f:47:cb:49:4e:ae:af:69:68:51:
78:57:ef:10:01:ea:04:42:e1:cf:9b:ae:72:dc:d2:
50:cc:7b:16:60:e6:c2:e1:16:5e:ec:b3:2a:4b:ae:
2f:24:42:46:81:9f:b3:f3:b0:c6:e3:48:76:7c:31:
06:16:24:c9:c7:71:fc:76:92:3c:4e:9d:ef:22:1a:
2f:06:e9:3d:b5:a2:30:85:62:ce:87:8d:28:f6:9f:
34:cf:a0:87:f9:ee:f4:2c:2c:61:24:42:58:17:67:
26:36:ba:c7:57:47:d2:05:af:5e:a0:ff:80:0e:78:
16:f5:56:d4:71:07:ba:06:fc:03:4a:a9:f9:94:94:
c2:b6:26:3b:fe:49:39:42:c7:aa:f7:f7:b0:d0:a0:
a7:b5:36:01:3d:e7:85:a5:82:55:ef:fd:c3:1b:67:
32:0c:34:e8:c1:24:7e:4c:17:71:07:ac:28:a8:7b:
b9:47:f0:6d:d2:80:fe:5c:4f:47:13:e4:03:17:43:
67:10:c3:2c:e1:af:7b:d8:5b:e8:20:dd:28:31:fd:
1c:c3:4c:b2:b4:9b:c9:90:a8:72:09:05:a5:6f:44:
ca:6e:cb:26:d4:00:c5:9d:c7:dd:4f:f6:0b:e0:01:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7C:18:8E:15:84:1B:19:A7:B2:F4:7F:F8:4F:CC:40:C7:B0:DC:A4
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/vXwYjhWEGxmnsvR_-E_MQMew3KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.47.0/24
IPv6:
2a10:5bc0::/32
Signature Algorithm: sha256WithRSAEncryption
96:98:ac:48:f5:7d:36:d4:07:d8:d2:0c:70:e3:5b:f6:37:e4:
5e:03:27:0c:f6:15:7f:33:56:10:ed:5d:51:0e:bf:02:eb:c9:
f4:7c:a3:53:06:b8:97:a8:3a:51:58:10:7c:0c:6c:c2:09:f0:
90:3b:48:4d:9f:0e:6a:04:65:aa:78:df:23:79:37:e2:01:38:
a6:70:79:3d:86:ab:8e:7f:d0:df:b5:61:ef:a6:fa:7f:af:24:
67:0f:b6:1e:9e:cf:c9:d9:c1:5e:f4:15:2a:7a:4f:76:35:a2:
4e:60:2e:50:d7:72:02:1a:38:05:a2:0a:c2:62:73:d1:34:27:
28:8f:90:0b:39:aa:84:a9:13:8d:4f:9e:ed:13:97:8e:04:68:
5e:7e:bc:ff:e8:b8:9c:a9:f1:08:cf:dc:6e:4c:4f:7e:56:44:
c3:33:6e:dd:fe:6a:ed:dc:4d:8c:ca:f6:65:9b:2d:05:e9:15:
3b:70:a3:d8:b4:ca:1f:07:8b:14:b4:62:e4:0b:96:68:66:96:
43:af:91:2d:84:70:33:a2:69:4a:2b:bc:21:31:58:23:ac:07:
5b:ce:44:20:bd:0e:db:be:2f:af:30:75:ea:35:49:19:83:68:
14:64:a9:a0:9c:58:ad:6a:78:aa:95:2e:94:61:7c:72:31:70:
e0:ba:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:41 2025 by rpki-client