Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/G3kFqwaZ5Q8szWak1GXNoyXQces.roa
File: G3kFqwaZ5Q8szWak1GXNoyXQces.roa (raw, json)
Hash identifier: q4kQFcnVcnrksQ+UWwaYK2GsD3M+gmqE7+NHKn7qaGE=
Subject key identifier: 1B:79:05:AB:06:99:E5:0F:2C:CD:66:A4:D4:65:CD:A3:25:D0:71:EB
Certificate issuer: /CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
Certificate serial: 018793B0FAFF0FFD82B4E3D621613F1A862E
Authority key identifier: DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/G3kFqwaZ5Q8szWak1GXNoyXQces.roa
Signing time: Tue 18 Apr 2023 09:27:41 +0000
ROA not before: Tue 18 Apr 2023 09:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209638
IP address blocks: 130.193.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:b0:fa:ff:0f:fd:82:b4:e3:d6:21:61:3f:1a:86:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
Validity
Not Before: Apr 18 09:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b7905ab0699e50f2ccd66a4d465cda325d071eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:15:c5:6a:9a:58:5d:89:14:55:0b:b4:39:
4d:4d:a6:bf:88:e2:5c:71:9e:19:df:f8:88:f7:c4:
c2:fb:44:fe:14:9c:c6:65:d1:2f:ef:78:35:ae:75:
ff:e1:40:10:e6:99:3e:06:a4:89:28:9f:c2:1d:e1:
82:ff:1e:97:2a:21:06:6a:68:16:aa:b1:ef:90:b0:
02:73:ad:4c:cf:dd:57:6a:39:d3:8d:92:e2:6d:e0:
97:cc:0d:96:1e:19:68:e4:28:8e:bb:73:da:3c:3a:
8f:20:e4:8a:e6:10:57:2c:10:90:2e:ba:ca:0f:33:
cb:ba:8d:9e:d6:d0:7a:61:53:c6:33:3c:81:76:5b:
56:b9:a3:c9:97:c0:d0:1f:04:c8:60:95:87:1a:61:
ea:cf:ac:af:64:ab:9f:51:67:96:b2:1e:5c:26:27:
3a:3f:81:14:2a:c9:57:d8:8c:6b:21:78:f2:7c:94:
06:6b:73:12:a3:89:2b:14:ad:ec:79:7a:fc:c6:a4:
ef:91:03:ce:a5:9f:81:37:78:b3:77:60:d1:0f:ab:
c7:f4:73:4f:c4:f2:3c:48:5a:02:20:21:50:93:82:
42:52:12:35:6b:c0:3e:26:db:e2:04:b2:c4:d5:d1:
31:32:bf:eb:13:47:5f:72:a2:16:23:85:24:a1:95:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:79:05:AB:06:99:E5:0F:2C:CD:66:A4:D4:65:CD:A3:25:D0:71:EB
X509v3 Authority Key Identifier:
keyid:DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/G3kFqwaZ5Q8szWak1GXNoyXQces.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/3PA197_VBt9uGSQPtDrusshSANQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f8:60:dd:c1:c8:4d:17:df:47:39:8a:2d:db:7b:e7:2e:a8:
f6:52:65:cb:3d:19:95:5a:92:71:3c:be:69:26:5c:a6:4f:7d:
f4:31:f2:08:c8:fe:cb:d1:a6:08:0f:8d:37:c5:e8:77:7f:63:
a8:93:79:f7:d9:f7:6b:f9:e4:dc:e6:ca:de:41:3e:95:f6:ad:
2f:31:d4:1b:42:12:29:0a:2f:79:ea:81:fa:27:de:f8:c6:25:
54:60:ac:35:33:f9:b6:e7:31:89:01:36:09:5d:9e:bd:68:9c:
07:8a:41:59:c7:fb:a7:a9:a4:88:7e:dd:cb:0a:8e:19:4d:a3:
0e:57:31:b4:f8:7e:9c:f8:c9:f4:9f:2a:30:6f:87:9c:00:2d:
d7:7b:5c:8d:ea:e4:d1:cd:eb:ba:db:84:4a:a9:78:b6:05:c1:
c5:f4:83:b9:48:1f:ca:ff:af:6a:aa:91:07:fd:a1:cd:dc:27:
8e:b1:9c:7a:fa:34:8b:73:10:07:41:a4:23:40:3a:09:df:52:
2f:3d:90:6a:8f:d2:d7:b7:80:b2:34:c3:9b:6c:1f:b5:0d:7f:
ae:b6:d1:d7:a9:58:ca:b2:8b:d1:ef:50:ad:c8:41:47:83:36:
be:ed:dd:24:e1:07:41:22:e9:18:45:b9:4f:65:c1:69:8d:4b:
1d:a6:e3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:43 2025 by rpki-client