Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/crSEWfxGwdtCuv4Zn-8dbtHekR4.roa
File: crSEWfxGwdtCuv4Zn-8dbtHekR4.roa (raw, json)
Hash identifier: T126giwZQU2DLDviBEsPcnLCXQLZbnFsjmHMhXGDDo4=
Subject key identifier: 72:B4:84:59:FC:46:C1:DB:42:BA:FE:19:9F:EF:1D:6E:D1:DE:91:1E
Certificate issuer: /CN=c1a11ca059e44d410e37861eb6040aa26e687903
Certificate serial: 0187C779BDDEEF8752312AC36F801BD06C27
Authority key identifier: C1:A1:1C:A0:59:E4:4D:41:0E:37:86:1E:B6:04:0A:A2:6E:68:79:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waEcoFnkTUEON4YetgQKom5oeQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/crSEWfxGwdtCuv4Zn-8dbtHekR4.roa
Signing time: Fri 28 Apr 2023 10:47:37 +0000
ROA not before: Fri 28 Apr 2023 10:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46918
IP address blocks: 193.169.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:79:bd:de:ef:87:52:31:2a:c3:6f:80:1b:d0:6c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a11ca059e44d410e37861eb6040aa26e687903
Validity
Not Before: Apr 28 10:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72b48459fc46c1db42bafe199fef1d6ed1de911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:9a:f5:24:13:4c:cd:83:b0:86:6a:95:db:
dc:f2:28:02:72:35:dd:33:7d:de:db:f6:c8:e0:ad:
7b:44:46:06:fb:24:75:8f:04:04:32:01:87:4d:fa:
a4:1d:1c:21:f9:06:50:9c:bd:ba:6b:e1:2a:94:a6:
83:21:e3:c5:7c:09:e9:a6:45:a3:77:24:f9:10:8f:
a7:1a:f0:0d:1b:4d:a2:4b:84:0a:cb:e8:e6:eb:8d:
09:b3:09:70:49:f0:3d:16:50:f8:18:51:99:a5:58:
f2:58:4f:54:03:80:cb:45:61:92:15:2a:87:8c:52:
74:7c:a5:bc:65:c7:2d:fa:9e:11:87:95:f2:99:94:
f3:66:97:a8:76:bc:60:ba:61:f9:ba:10:62:79:4f:
ea:06:92:d8:f4:3a:92:08:c0:4e:e3:69:86:1f:96:
b6:78:ca:ea:ff:be:11:9e:3d:83:1a:06:0f:7f:b0:
73:24:7b:4f:89:26:23:ec:3c:5e:7b:97:48:7f:dc:
04:58:41:c6:0b:0f:55:82:7f:40:c0:93:5a:ec:a0:
ea:01:1c:e0:ac:50:dc:4e:50:d8:0c:c9:dc:bb:f8:
32:98:0d:75:98:16:14:aa:f0:8b:75:a5:2e:3f:ff:
45:70:a4:1b:ec:c8:55:1a:6c:39:00:b4:92:96:b9:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:84:59:FC:46:C1:DB:42:BA:FE:19:9F:EF:1D:6E:D1:DE:91:1E
X509v3 Authority Key Identifier:
keyid:C1:A1:1C:A0:59:E4:4D:41:0E:37:86:1E:B6:04:0A:A2:6E:68:79:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waEcoFnkTUEON4YetgQKom5oeQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/crSEWfxGwdtCuv4Zn-8dbtHekR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/waEcoFnkTUEON4YetgQKom5oeQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.218.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:99:b4:4c:0b:97:36:39:4e:65:ff:ff:10:9c:5d:fb:fd:16:
50:33:4d:34:bb:61:f9:ff:7f:f5:2d:fb:7c:ca:8a:69:c2:fa:
2a:7c:1c:58:b3:6a:ea:9b:f8:81:57:fe:b4:60:ad:1b:bd:8e:
34:7a:f5:ab:81:65:27:1f:8a:22:6d:a4:53:30:a3:cd:51:57:
1b:71:2b:6a:e4:57:ef:70:ba:a7:87:05:f3:4a:7e:2e:09:3a:
e8:79:b5:e3:dd:b5:85:c5:39:71:ad:b0:2e:bb:27:b0:f0:70:
af:7e:a4:58:9b:77:e3:05:4b:e8:18:b2:77:a1:d7:59:c4:cc:
6c:89:33:5e:38:f1:65:fc:e8:7e:e4:cb:84:df:ed:19:3e:a7:
9a:53:ed:fa:02:51:7f:12:30:9f:d0:0a:be:f0:ea:2e:32:bb:
08:f2:b1:da:9d:71:46:e8:54:ff:c7:08:8f:9a:e6:be:a7:52:
50:f3:f5:ce:7a:7c:f6:5d:e2:95:9f:f4:1f:87:c3:23:e3:bc:
e7:21:30:3b:9e:df:6c:47:dc:62:8a:e4:9d:e6:2d:00:75:c3:
ef:a2:5a:f2:da:68:9d:44:13:08:2d:f6:96:ca:9e:73:72:1d:
da:b8:41:8e:33:04:77:e8:e3:6b:32:69:9b:7a:a3:38:e9:30:
cd:25:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:06 2025 by rpki-client