Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/STSy9Gt43pmv5K6o1Bq3hpG4ALI.roa
File: STSy9Gt43pmv5K6o1Bq3hpG4ALI.roa (raw, json)
Hash identifier: RxV9a4GRiD2bOhLFJkjVPyyneaKZCDGF8dsaHLiRIeI=
Subject key identifier: 49:34:B2:F4:6B:78:DE:99:AF:E4:AE:A8:D4:1A:B7:86:91:B8:00:B2
Certificate issuer: /CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
Certificate serial: 01856B130DB522684D89A2C35E0088BC5942
Authority key identifier: 2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/STSy9Gt43pmv5K6o1Bq3hpG4ALI.roa
Signing time: Sun 01 Jan 2023 02:04:48 +0000
ROA not before: Sun 01 Jan 2023 02:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50407
IP address blocks: 193.105.17.0/24 maxlen: 24
195.191.68.0/23 maxlen: 23
2001:67c:2e18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:13:0d:b5:22:68:4d:89:a2:c3:5e:00:88:bc:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
Validity
Not Before: Jan 1 02:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4934b2f46b78de99afe4aea8d41ab78691b800b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:3e:18:a6:62:d1:2d:c1:00:9e:6b:59:8f:
14:f7:7b:ac:87:42:14:8d:ba:44:38:60:bf:d8:78:
55:4b:29:4c:7f:05:c8:12:1a:ea:8e:e1:6d:a4:79:
3b:26:92:26:46:20:9a:6c:99:56:36:e8:83:06:bf:
ed:82:40:aa:b1:f1:84:07:f8:3e:c3:60:72:a4:e0:
63:4f:31:ca:73:fc:21:00:72:71:80:d6:3b:ae:fb:
7f:f8:16:e4:e3:cd:c4:3e:ed:67:ca:63:84:2d:41:
53:c3:ae:62:0c:f9:da:b8:a8:04:5a:3b:58:ba:f1:
cd:3e:32:f5:16:a1:67:da:43:fc:f8:99:a7:a4:b9:
82:9f:ba:06:c2:9c:5c:24:a0:fe:04:61:e9:dd:a0:
d1:d1:06:c7:cc:9e:6a:1f:59:ea:d9:19:43:41:42:
64:65:68:52:20:52:7a:90:2e:20:a2:18:c2:81:2c:
e7:9d:f1:07:b0:96:f6:f4:a1:da:e6:a3:d4:01:aa:
71:35:ed:db:28:9f:71:40:8c:ee:55:2f:c1:97:dc:
e2:ae:fd:14:41:42:9a:b4:6c:cd:aa:2f:bd:bf:17:
cc:8e:fa:ee:22:8e:a5:56:72:d2:26:06:96:40:bc:
73:28:fe:8a:bb:df:23:54:f9:97:44:5f:3e:1c:60:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:34:B2:F4:6B:78:DE:99:AF:E4:AE:A8:D4:1A:B7:86:91:B8:00:B2
X509v3 Authority Key Identifier:
keyid:2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/STSy9Gt43pmv5K6o1Bq3hpG4ALI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.17.0/24
195.191.68.0/23
IPv6:
2001:67c:2e18::/48
Signature Algorithm: sha256WithRSAEncryption
3f:b6:97:db:dd:7b:28:d5:66:c8:a2:9b:5f:06:96:2e:9c:58:
74:78:6b:33:d3:39:5c:2a:1e:ef:68:31:54:1c:1b:c0:8d:f2:
4e:c6:1c:60:7b:54:64:a0:7f:97:c6:f8:6a:12:7e:c8:21:61:
47:31:5e:01:ad:27:74:ff:42:c7:5a:9f:84:ac:94:92:c3:ba:
0b:11:3e:5f:bc:bb:4d:b8:0c:e8:5b:11:f6:c3:6c:cc:d4:97:
3c:b8:9f:12:5e:27:1f:8d:2e:e6:a1:ea:e2:1f:f6:cb:3e:f8:
24:53:33:1f:89:a8:1c:53:5c:7a:60:1c:45:41:a9:2d:1f:52:
62:2e:d6:af:d0:0f:f8:c3:c5:9f:8e:87:9c:49:bd:6b:39:8e:
22:e2:2a:70:10:89:8d:1a:10:fd:a9:04:2f:75:00:1a:1e:0a:
91:8c:55:d9:43:66:25:5f:ce:8b:27:28:11:bd:fb:d0:e2:84:
2d:7e:01:14:06:38:cb:5a:23:98:3b:33:85:e3:35:ac:94:17:
6a:d7:53:28:05:29:19:42:17:24:df:9a:05:94:c9:f9:ac:2f:
5e:2a:7d:9c:dc:db:5b:60:63:e5:82:19:1b:22:7d:3f:15:50:
4a:14:b0:c6:78:00:8d:06:21:03:d4:42:50:e9:a0:72:5c:9c:
e1:60:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:18 2025 by rpki-client