Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/ktU1xwbuBs7TX3bHrSI1gDERwyI.roa
File: ktU1xwbuBs7TX3bHrSI1gDERwyI.roa (raw, json)
Hash identifier: D/7cbZjQJhBMrciAWZMlMcFoCCVgt1esSXotE+pPi2U=
Subject key identifier: 92:D5:35:C7:06:EE:06:CE:D3:5F:76:C7:AD:22:35:80:31:11:C3:22
Certificate issuer: /CN=a94f0a32a602d641fb284d9928d32bf84f60a4dc
Certificate serial: 01856D5D18C671F992967A90F508C98337D7
Authority key identifier: A9:4F:0A:32:A6:02:D6:41:FB:28:4D:99:28:D3:2B:F8:4F:60:A4:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/ktU1xwbuBs7TX3bHrSI1gDERwyI.roa
Signing time: Sun 01 Jan 2023 12:44:55 +0000
ROA not before: Sun 01 Jan 2023 12:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50214
IP address blocks: 193.3.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:18:c6:71:f9:92:96:7a:90:f5:08:c9:83:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a94f0a32a602d641fb284d9928d32bf84f60a4dc
Validity
Not Before: Jan 1 12:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92d535c706ee06ced35f76c7ad2235803111c322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:f8:36:df:0b:f9:05:73:c7:cd:f3:23:58:
35:2f:e9:04:0a:73:0b:69:20:2a:a1:b7:76:e4:33:
fd:cb:de:cf:e9:f7:89:a2:7b:55:61:df:c9:ff:c3:
eb:56:e1:97:08:d8:3d:4f:20:df:04:b8:23:69:c2:
70:f3:a6:fa:ca:c3:58:67:38:5c:9e:f3:59:73:80:
67:18:f0:31:10:77:2e:19:3e:59:40:69:17:03:84:
a6:12:7c:66:f0:fa:8a:29:f9:de:fa:58:f0:ff:c0:
51:5f:6f:dc:b4:21:d5:ee:0b:2c:f3:0a:4b:b0:5d:
ad:8f:c8:d6:a1:e6:aa:9e:0e:c9:57:0a:6b:2b:6c:
a7:aa:ec:4e:6e:6a:06:68:b9:80:b8:67:da:fa:92:
03:21:89:bf:30:02:11:c3:72:fc:f5:11:c3:3c:d2:
1e:33:a4:04:a8:08:0b:86:87:d3:ab:b4:1f:a6:8b:
0a:04:a1:3f:33:9f:d0:8b:17:cb:94:3e:a8:59:be:
3f:f6:51:1b:38:a7:37:61:13:0e:f4:0e:d3:ed:b3:
0a:f4:c8:60:b3:40:18:32:a7:2d:6c:3e:ae:de:e4:
43:a9:00:8c:cc:01:ac:a2:04:b9:84:47:a2:c1:fc:
44:9c:21:39:87:97:52:48:93:07:ef:e6:45:ad:3c:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D5:35:C7:06:EE:06:CE:D3:5F:76:C7:AD:22:35:80:31:11:C3:22
X509v3 Authority Key Identifier:
keyid:A9:4F:0A:32:A6:02:D6:41:FB:28:4D:99:28:D3:2B:F8:4F:60:A4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/ktU1xwbuBs7TX3bHrSI1gDERwyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.184.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a2:03:34:08:dd:11:a8:57:5b:ff:fc:a5:59:34:09:bf:17:
21:a7:4d:ab:6a:4c:38:05:6d:40:bc:1b:ff:d7:3c:f2:f3:63:
8a:3e:b2:80:d6:9d:5b:42:bb:ee:eb:66:41:fb:a6:c0:5f:26:
1d:09:95:7a:82:fb:2f:51:bc:a4:7a:4d:40:75:34:df:25:6e:
6a:51:c1:5a:df:b5:34:2e:52:9b:31:56:13:ec:af:13:fa:37:
db:2b:c7:ea:f5:58:60:ed:48:a8:ec:32:d7:6b:ed:8a:29:df:
3f:e8:9f:00:54:f4:27:44:c4:1a:e2:39:ae:8a:c0:e6:3d:6d:
7a:db:31:94:81:26:04:d5:0f:39:21:16:2f:f5:be:da:78:b4:
9b:bd:a3:c1:2e:81:5c:08:1f:b9:10:0e:e4:fd:00:de:32:12:
3b:f7:68:63:a2:2c:de:37:07:fb:97:99:1a:0e:ea:ef:0b:d0:
b8:e7:14:b3:44:14:05:9e:17:57:af:21:9e:52:ba:92:e8:f4:
30:45:5f:62:a8:ba:88:f8:5e:97:98:b5:bc:fd:42:ed:99:2a:
60:10:0b:42:9e:ef:28:6e:5b:55:21:e4:1d:96:eb:13:4e:de:
d1:09:a6:18:ca:59:df:2a:e1:56:e6:9c:f1:13:4e:58:57:5d:
ff:a0:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:11 2025 by rpki-client