Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/1GxZjPEl3xOmeLALJLZuqJXKI-E.roa
File: 1GxZjPEl3xOmeLALJLZuqJXKI-E.roa (raw, json)
Hash identifier: WOYtfUqracBEm2q3ufVmGyOir/t6hXZDwhDTkl6zXls=
Subject key identifier: D4:6C:59:8C:F1:25:DF:13:A6:78:B0:0B:24:B6:6E:A8:95:CA:23:E1
Certificate issuer: /CN=33de5dc98887219264ac4e421d880e89290f456a
Certificate serial: 01857139D8229C130ABFD05A104B7EAE2266
Authority key identifier: 33:DE:5D:C9:88:87:21:92:64:AC:4E:42:1D:88:0E:89:29:0F:45:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M95dyYiHIZJkrE5CHYgOiSkPRWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/1GxZjPEl3xOmeLALJLZuqJXKI-E.roa
Signing time: Mon 02 Jan 2023 06:44:54 +0000
ROA not before: Mon 02 Jan 2023 06:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50043
IP address blocks: 193.228.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:d8:22:9c:13:0a:bf:d0:5a:10:4b:7e:ae:22:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33de5dc98887219264ac4e421d880e89290f456a
Validity
Not Before: Jan 2 06:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d46c598cf125df13a678b00b24b66ea895ca23e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:db:61:17:12:48:a5:be:e4:9d:da:ce:f2:
48:38:2a:9f:a0:f5:fd:1a:f6:e7:16:34:08:88:a1:
67:b4:9d:dd:e2:f7:b8:9c:b9:dd:7a:4d:c9:4d:15:
95:07:d7:a3:b3:ff:91:0e:b6:16:10:20:6f:51:7d:
59:99:9e:20:b9:f6:04:c6:05:2c:92:bc:d0:14:12:
77:a5:75:97:c0:83:e1:a6:f7:b5:47:d9:8b:17:23:
75:71:e1:4a:94:2f:c4:c8:f5:9a:20:04:52:5c:94:
91:8f:1f:0a:d4:04:f4:e9:8f:1e:6c:68:93:51:09:
ad:38:00:97:0c:11:8f:ed:a9:a3:ef:6c:f3:c8:a5:
39:be:a6:b3:b9:e1:3a:78:27:8c:f6:71:6a:4a:e8:
27:98:49:9c:44:ad:0c:8d:82:36:23:38:a1:65:b7:
d1:eb:ee:30:94:26:60:4f:aa:20:74:93:a2:7f:1b:
00:ea:3f:9e:9b:f1:b7:3a:a2:02:c1:6e:90:17:dd:
8f:e4:e3:5b:a1:4e:95:86:5b:b3:f3:51:f7:c2:46:
41:94:4a:45:71:c5:82:05:ac:8a:0f:7a:90:56:4a:
fc:b8:7e:be:43:19:fb:90:a6:6c:0c:0e:e2:7b:88:
da:09:f2:af:e3:a0:91:40:de:93:96:9d:06:8f:17:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6C:59:8C:F1:25:DF:13:A6:78:B0:0B:24:B6:6E:A8:95:CA:23:E1
X509v3 Authority Key Identifier:
keyid:33:DE:5D:C9:88:87:21:92:64:AC:4E:42:1D:88:0E:89:29:0F:45:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M95dyYiHIZJkrE5CHYgOiSkPRWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/1GxZjPEl3xOmeLALJLZuqJXKI-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/M95dyYiHIZJkrE5CHYgOiSkPRWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.125.0/24
Signature Algorithm: sha256WithRSAEncryption
74:25:41:2b:99:c6:24:cd:19:a5:c6:bd:eb:d8:67:1e:ba:e4:
a2:61:d2:d8:08:04:8a:00:18:ed:67:6d:e1:5f:28:da:68:28:
b5:ab:d8:6b:06:d3:be:80:6e:6b:4b:5b:48:9f:3f:3c:cb:a6:
5b:39:b1:66:29:d4:3e:28:64:62:f4:0b:1c:bb:97:51:0d:56:
78:f2:9e:6f:71:e9:cd:be:6a:a4:2d:0d:8f:50:c1:d6:7c:60:
e1:34:85:69:48:3a:bf:ba:4c:3d:81:bd:ce:b6:a7:c3:7a:a3:
cb:32:18:d4:ef:d9:5f:78:1c:08:a7:d1:86:bf:4f:fc:fa:12:
84:4c:c6:d0:03:06:15:88:18:50:28:2f:50:a0:2d:34:6b:6a:
3e:39:aa:fa:69:fd:6d:fc:dc:3e:1f:6c:e9:c0:a1:91:75:cf:
80:5e:71:86:9f:a2:df:c5:ab:62:4d:2e:20:06:a0:3a:b3:27:
9d:b3:e3:50:67:df:9f:78:ea:7e:9e:d0:83:a1:cb:77:e6:20:
f7:67:b7:9a:29:a5:77:86:ca:6e:9e:07:7c:cc:e3:36:fe:c4:
a0:f2:bb:91:35:6c:b7:a8:e6:3e:28:4c:c2:25:6f:85:13:d1:
64:9b:39:54:dd:63:30:47:d9:09:35:f3:d5:b8:b0:7c:3e:24:
f6:8b:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:32 2025 by rpki-client