Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa
File: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (raw, json)
Hash identifier: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=
Subject key identifier: B0:AD:D9:06:B5:AF:8F:07:7E:2E:49:97:B4:45:C8:F2:69:83:00:83
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019424B398DDFC49127121DE2C169F21FF07
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201099
IP address blocks: 193.111.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:98:dd:fc:49:12:71:21:de:2c:16:9f:21:ff:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0add906b5af8f077e2e4997b445c8f269830083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:6c:0c:0e:09:88:b5:90:be:ef:9f:3f:cc:
00:be:9d:ce:61:36:f1:05:85:c8:10:92:27:a5:46:
38:18:64:fe:00:54:72:33:24:75:76:cf:f2:5b:b4:
ad:02:40:c5:d0:42:6c:0b:02:70:76:14:bb:b1:d0:
be:f3:7a:66:55:b2:b8:8c:f0:16:4e:50:2f:b2:e2:
cd:b1:51:65:e3:3c:65:85:8a:4e:31:66:4a:7a:3a:
36:de:19:d1:20:e1:62:15:bd:b6:9e:55:0e:85:44:
0b:44:1b:29:34:bc:4f:df:42:0e:e2:d5:e9:92:96:
53:2b:1d:f5:ea:f3:f8:b9:31:66:f1:1a:92:48:08:
80:1d:1a:3c:bf:b6:4a:ba:0a:cb:8c:87:19:12:1c:
79:34:67:e2:42:0f:4d:86:1b:7c:00:66:c2:3e:51:
22:83:5f:d5:56:67:ef:2a:0a:13:69:08:6a:08:ae:
b7:7f:a8:51:b5:33:af:b3:1f:53:d3:d3:d9:82:89:
2c:0a:12:4c:9d:0a:6e:95:83:ff:b4:63:8b:f4:5b:
61:6b:73:8a:3b:33:9d:6c:df:36:49:2f:98:18:ce:
54:e6:b2:1a:47:56:8c:22:b6:2f:29:69:53:d8:c8:
2f:66:68:50:3d:f1:bd:8c:ac:ea:23:54:3e:a2:1c:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AD:D9:06:B5:AF:8F:07:7E:2E:49:97:B4:45:C8:F2:69:83:00:83
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.66.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:99:88:b2:f6:87:44:cf:ee:b3:c0:56:45:be:f8:25:73:2d:
fd:a8:64:16:a0:36:3c:98:b2:7d:97:39:58:64:26:c7:08:ae:
04:b3:d8:b7:b5:22:ea:b9:11:b7:04:d0:1f:d6:94:8e:ff:45:
86:f8:35:f2:f0:67:58:8b:fb:88:0c:93:84:e1:1b:3a:bb:98:
e0:55:4a:3f:c7:2b:4d:3b:0c:9c:38:56:c5:89:08:bd:88:5a:
b5:f3:73:fe:26:41:1c:81:7f:68:58:b8:52:de:d3:49:1f:26:
cd:a2:f0:04:b7:d3:d5:df:82:a9:61:ba:b0:5b:d9:c8:bb:7d:
f4:0f:2c:3c:da:50:08:ab:1b:e9:f2:38:d6:bb:99:27:9d:15:
e3:c7:d7:6e:37:fe:a2:48:bd:dc:26:63:55:a9:53:1e:00:86:
3b:e1:33:db:2b:7d:66:8f:49:2e:87:75:09:cd:80:68:17:be:
25:7a:69:7b:c6:7f:f9:0b:d9:d6:ae:a5:24:e7:eb:5f:56:73:
9e:b7:9c:67:54:26:95:c0:6b:5f:f0:30:af:45:d2:09:9a:62:
b8:9c:a7:f4:38:c6:d9:e4:3d:8c:9f:4c:ba:e6:2a:a9:7d:46:
e9:ac:84:3b:3b:cb:f5:8c:0c:b6:e6:97:44:1d:3c:c6:3b:11:
30:8a:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:07 2025 by rpki-client