Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/sbZsOUxgGHMpv9ojZliGgFFvOSw.roa
File: sbZsOUxgGHMpv9ojZliGgFFvOSw.roa (raw, json)
Hash identifier: ZCUga62yd1k9gM5BEpuS55Z+EOYzyWJGLXmv8SpctXU=
Subject key identifier: B1:B6:6C:39:4C:60:18:73:29:BF:DA:23:66:58:86:80:51:6F:39:2C
Certificate issuer: /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial: 013E1CA0
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/sbZsOUxgGHMpv9ojZliGgFFvOSw.roa
Signing time: Sat 01 Jan 2022 12:59:06 +0000
ROA not before: Sat 01 Jan 2022 12:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.36.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20847776 (0x13e1ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Validity
Not Before: Jan 1 12:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1b66c394c60187329bfda2366588680516f392c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:1f:69:ca:dc:34:75:c3:09:3a:f3:28:67:
71:a1:0e:f8:9f:9d:ad:9e:e8:f8:66:83:7d:5a:74:
75:6e:d9:0f:c3:58:29:de:4d:3f:8d:4a:5d:97:8f:
e3:22:aa:1a:83:80:ad:27:7b:7a:cb:9a:22:b7:df:
a8:0d:3f:5f:d2:17:05:b0:68:92:53:18:c9:24:b3:
19:b0:21:7a:63:66:b8:bc:d8:0d:b8:00:5f:87:37:
55:77:11:89:87:af:f8:04:3b:73:3f:ef:fd:2b:6a:
1b:97:9c:2a:89:57:07:13:df:9c:11:99:55:aa:aa:
c1:b2:37:a5:6e:86:b8:a6:9a:6f:08:23:46:89:a6:
9b:bf:50:57:db:fa:c2:e0:25:5e:76:d4:08:06:21:
de:a9:22:51:96:fc:54:67:97:52:32:a2:ee:92:30:
f2:03:5e:b6:2c:5a:06:21:f1:f7:a5:8a:f4:6b:c0:
3a:fc:b8:e3:bd:48:a8:eb:6f:03:df:3f:d6:17:0d:
30:52:59:aa:33:6a:9b:84:2b:8c:de:12:78:61:03:
be:2a:42:15:16:82:85:ec:73:9d:2b:db:e4:a2:a0:
10:0a:db:92:f8:ad:9c:39:52:61:05:b5:18:92:38:
67:1a:ba:01:e3:c5:3b:ef:7a:a4:95:1d:89:3c:b7:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:6C:39:4C:60:18:73:29:BF:DA:23:66:58:86:80:51:6F:39:2C
X509v3 Authority Key Identifier:
keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/sbZsOUxgGHMpv9ojZliGgFFvOSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.132.0/24
Signature Algorithm: sha256WithRSAEncryption
63:df:15:46:31:be:11:9d:f3:c4:8c:45:a2:22:2a:9a:75:35:
b0:12:e6:ec:9b:e8:6a:3f:01:fb:32:bc:20:71:f8:4a:1a:24:
3c:26:ab:6b:00:01:2b:e0:f9:ab:6c:3e:c9:80:73:f5:37:9b:
4d:14:71:35:f5:9d:01:7d:9b:8f:ae:19:51:e7:8d:d4:f5:9d:
12:d3:42:a7:04:c6:45:f7:0b:bd:7e:f7:e2:b4:5d:62:77:f4:
12:71:57:34:2a:20:99:5b:09:b9:f9:88:d7:22:01:7e:bb:8e:
aa:bc:f4:28:e4:77:2c:b7:89:4f:2f:65:2e:cc:a3:42:e8:84:
cb:35:3d:90:00:14:ba:96:b4:8d:d8:a7:48:6a:02:33:b8:39:
ca:85:5d:4c:ca:ba:2f:e3:b5:67:6f:5b:68:e8:5f:5e:1e:de:
fb:f8:96:5c:5b:57:4f:7a:35:8a:21:d5:cd:2e:45:d2:1b:49:
75:35:05:43:c6:6f:a7:7e:65:80:19:06:28:82:cc:3f:ca:3c:
7d:cd:fa:8a:8d:ae:af:dc:d7:fa:ab:55:04:be:59:e6:fc:71:
df:48:27:5e:ca:4f:3b:96:de:84:f3:b1:43:84:61:41:79:40:
de:89:4f:24:c4:1b:58:95:ab:89:83:5b:a1:1f:7d:58:3a:b5:
f0:19:99:d2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAT4coDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzMwNmEzYThkOGJjYmEzOWY5MmVmMWFjNDlhNTU5YjBiY2U4YTU4MB4XDTIyMDEw
MTEyNTkwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjFiNjZjMzk0YzYw
MTg3MzI5YmZkYTIzNjY1ODg2ODA1MTZmMzkyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALX3H2nK3DR1wwk68yhncaEO+J+drZ7o+GaDfVp0dW7ZD8NY
Kd5NP41KXZeP4yKqGoOArSd7esuaIrffqA0/X9IXBbBoklMYySSzGbAhemNmuLzY
DbgAX4c3VXcRiYev+AQ7cz/v/StqG5ecKolXBxPfnBGZVaqqwbI3pW6GuKaabwgj
Rommm79QV9v6wuAlXnbUCAYh3qkiUZb8VGeXUjKi7pIw8gNetixaBiHx96WK9GvA
Ovy4471IqOtvA98/1hcNMFJZqjNqm4QrjN4SeGEDvipCFRaChexznSvb5KKgEArb
kvitnDlSYQW1GJI4Zxq6AePFO+96pJUdiTy3F/UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSxtmw5TGAYcym/2iNmWIaAUW85LDAfBgNVHSMEGDAWgBSDMGo6jYvLo5+S
7xrEmlWbC86KWDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d6QnFPbzJMeTZPZmt1OGF4SnBWbXd2T2lsZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvM2M2NGFkLWZlMDgtNDNkOC1hYmE3LTBjNTU3M2NhYjhjMC8x
L3NiWnNPVXhnR0hNcHY5b2pabGlHZ0ZGdk9Tdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
M2M2NGFkLWZlMDgtNDNkOC1hYmE3LTBjNTU3M2NhYjhjMC8xL2d6QnFPbzJMeTZP
Zmt1OGF4SnBWbXd2T2lsZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEkhDANBgkqhkiG9w0BAQsFAAOC
AQEAY98VRjG+EZ3zxIxFoiIqmnU1sBLm7Jvoaj8B+zK8IHH4ShokPCarawABK+D5
q2w+yYBz9TebTRRxNfWdAX2bj64ZUeeN1PWdEtNCpwTGRfcLvX734rRdYnf0EnFX
NCogmVsJufmI1yIBfruOqrz0KOR3LLeJTy9lLsyjQuiEyzU9kAAUupa0jdinSGoC
M7g5yoVdTMq6L+O1Z29baOhfXh7e+/iWXFtXT3o1iiHVzS5F0htJdTUFQ8Zvp35l
gBkGKILMP8o8fc36io2ur9zX+qtVBL5Z5vxx30gnXspPO5behPOxQ4RhQXlA3olP
JMQbWJWriYNboR99WDq18BmZ0g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:06 2025 by rpki-client