Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/ob1fd09SqzvKKy2QJ-FxvK7lj6w.roa
File: ob1fd09SqzvKKy2QJ-FxvK7lj6w.roa (raw, json)
Hash identifier: 5dAbn9/9hkr8VwanXunOSuWlzbb/ySuaTFihSeRXX5M=
Subject key identifier: A1:BD:5F:77:4F:52:AB:3B:CA:2B:2D:90:27:E1:71:BC:AE:E5:8F:AC
Certificate issuer: /CN=6610295ff286ff4e79b557eee3cc943c03e72a5e
Certificate serial: 01856F546E818B258AD79C7F6EDBC5E2EDBD
Authority key identifier: 66:10:29:5F:F2:86:FF:4E:79:B5:57:EE:E3:CC:94:3C:03:E7:2A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhApX_KG_055tVfu48yUPAPnKl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/ob1fd09SqzvKKy2QJ-FxvK7lj6w.roa
Signing time: Sun 01 Jan 2023 21:54:42 +0000
ROA not before: Sun 01 Jan 2023 21:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50340
IP address blocks: 193.3.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:6e:81:8b:25:8a:d7:9c:7f:6e:db:c5:e2:ed:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6610295ff286ff4e79b557eee3cc943c03e72a5e
Validity
Not Before: Jan 1 21:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1bd5f774f52ab3bca2b2d9027e171bcaee58fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:ce:d2:57:ed:e6:c3:46:fc:b5:4a:50:8a:
02:60:1a:45:32:da:33:4c:f7:04:e4:74:5c:a0:54:
5d:9d:17:db:59:4f:d2:64:d4:4b:6d:cc:d4:d5:43:
2e:40:45:f7:e2:e8:69:af:a1:63:eb:de:f2:15:62:
53:75:8d:ce:b8:c7:62:7d:04:5e:d1:ff:9d:36:a8:
e2:3b:59:ba:80:a8:95:6b:7e:d5:ec:83:9d:0f:43:
0e:71:48:6e:41:f9:1d:c7:57:7e:38:c1:2a:a7:2d:
75:90:fa:4a:c1:35:49:56:bd:69:04:cf:35:c4:ef:
d5:56:59:49:2f:7b:60:76:99:a1:88:5c:0e:5e:df:
5a:2c:1b:90:e4:a1:d8:92:c0:02:e8:66:9b:9d:9d:
b9:6d:c6:5e:c1:8b:88:8d:20:1c:55:77:f4:3a:72:
d4:90:04:38:af:0a:9b:1c:a3:7f:f2:84:05:0c:4c:
c4:c0:0d:fc:3e:54:39:56:1c:15:0f:3a:9e:56:1f:
b8:57:bf:24:53:b1:a1:ea:03:01:86:e4:2d:92:b1:
41:0c:82:98:26:3e:2e:2a:2c:e6:71:1c:e2:ed:7d:
14:c1:87:d9:28:71:35:cf:00:14:8f:be:c4:14:6c:
d4:37:9b:5a:1c:07:9f:e0:e8:85:a9:71:26:49:93:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:5F:77:4F:52:AB:3B:CA:2B:2D:90:27:E1:71:BC:AE:E5:8F:AC
X509v3 Authority Key Identifier:
keyid:66:10:29:5F:F2:86:FF:4E:79:B5:57:EE:E3:CC:94:3C:03:E7:2A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhApX_KG_055tVfu48yUPAPnKl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/ob1fd09SqzvKKy2QJ-FxvK7lj6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/ZhApX_KG_055tVfu48yUPAPnKl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b6:63:1b:6a:0a:79:de:09:b2:09:08:90:ad:ab:3c:0c:62:
9b:73:3c:6d:7f:71:de:fc:0e:ba:0e:60:aa:00:4d:e7:8d:ce:
e6:3a:69:a1:8a:5f:78:4d:55:d7:18:ba:f4:80:4f:2a:78:37:
ee:db:ac:11:ff:1f:79:bc:4d:ee:44:38:53:f2:8e:b2:1f:fd:
58:20:12:0e:41:a2:b0:5b:ef:9f:4e:84:03:5b:b9:95:59:96:
93:0a:7c:22:00:b0:b2:e3:e4:f5:11:0b:1a:75:8d:06:9d:d4:
f3:ad:dc:21:3d:7a:42:0d:ff:bd:d2:a1:e6:1a:a4:3f:5e:f6:
dd:90:dc:4f:57:25:d4:57:77:4f:8a:5a:28:0f:ce:01:8f:ba:
84:2b:fa:99:39:ad:0e:26:c2:e7:06:89:68:25:31:9e:d2:d6:
8b:a8:b2:a6:a0:77:57:de:5b:a3:38:c4:db:69:f9:0c:25:e2:
2f:73:18:9f:c3:20:be:74:68:33:2b:84:15:4d:b1:97:73:66:
ab:95:08:2b:15:53:3c:7c:32:36:e0:b6:9a:02:71:0d:8a:20:
d3:d7:d5:ee:96:a1:a0:da:73:1b:b4:5b:a7:34:0f:dd:36:28:
d1:ab:95:4a:3f:43:46:72:38:ab:cd:b3:83:ee:cb:d1:1d:c6:
6b:07:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:30 2025 by rpki-client