Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/GrHFFmDjWmDUF-yyuqNVSaOx15g.roa
File: GrHFFmDjWmDUF-yyuqNVSaOx15g.roa (raw, json)
Hash identifier: oRHawK1KhX0UX7IOIygK/ah97umDga9bRE9hZCytoVU=
Subject key identifier: 1A:B1:C5:16:60:E3:5A:60:D4:17:EC:B2:BA:A3:55:49:A3:B1:D7:98
Certificate issuer: /CN=89daadb981f7e93da4b19acf41079f9bbe1d672e
Certificate serial: 018CC3492C3A89A1C1D477BCB7AEB2BE81F9
Authority key identifier: 89:DA:AD:B9:81:F7:E9:3D:A4:B1:9A:CF:41:07:9F:9B:BE:1D:67:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idqtuYH36T2ksZrPQQefm74dZy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/GrHFFmDjWmDUF-yyuqNVSaOx15g.roa
Signing time: Mon 01 Jan 2024 04:30:01 +0000
ROA not before: Mon 01 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15626
IP address blocks: 193.238.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:2c:3a:89:a1:c1:d4:77:bc:b7:ae:b2:be:81:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89daadb981f7e93da4b19acf41079f9bbe1d672e
Validity
Not Before: Jan 1 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ab1c51660e35a60d417ecb2baa35549a3b1d798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:99:ce:9a:3f:1c:62:10:58:0d:5c:4e:67:
e9:90:cc:94:8e:2d:39:97:57:07:22:49:1b:52:12:
f8:09:11:be:42:25:cb:5c:2c:71:dd:28:76:29:4c:
91:d4:bf:c1:36:6e:1e:9e:b0:8e:06:4c:79:82:80:
cd:17:8b:6e:f5:ce:32:df:35:f7:8c:c6:80:d9:14:
8a:88:68:8d:ca:10:5e:3b:ab:11:40:9e:87:3f:be:
cd:3f:00:6f:59:3b:c7:21:d9:2a:2e:82:72:6e:e0:
f9:55:de:2d:7d:54:b9:a6:44:81:09:2d:42:41:bc:
de:07:bc:d6:1e:1a:46:db:02:19:86:bc:59:b5:ee:
37:52:b3:4f:9a:9c:c9:79:66:45:8e:94:e2:7c:85:
67:93:e4:b7:73:43:26:aa:f3:e8:d5:f3:81:25:49:
13:3f:07:cc:de:92:2c:16:c9:0b:04:af:c7:6b:39:
2c:85:43:1a:cc:57:69:d1:c9:0e:f8:0d:8c:c7:59:
09:ad:4c:13:6c:d4:59:ac:bf:06:7d:f2:cf:84:81:
0a:79:b4:eb:95:d4:f1:05:40:96:0d:ec:ef:86:9b:
93:5f:21:ce:5b:f4:b3:1f:f7:ed:fd:b1:56:7e:30:
7a:39:69:33:e0:48:23:6d:71:6a:38:63:55:23:7c:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:C5:16:60:E3:5A:60:D4:17:EC:B2:BA:A3:55:49:A3:B1:D7:98
X509v3 Authority Key Identifier:
keyid:89:DA:AD:B9:81:F7:E9:3D:A4:B1:9A:CF:41:07:9F:9B:BE:1D:67:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idqtuYH36T2ksZrPQQefm74dZy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/GrHFFmDjWmDUF-yyuqNVSaOx15g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/idqtuYH36T2ksZrPQQefm74dZy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.152.0/23
Signature Algorithm: sha256WithRSAEncryption
80:aa:59:e6:c4:f7:e7:5e:6f:92:87:88:3d:29:83:30:61:41:
81:d3:3e:8e:4c:7d:16:9e:0b:3c:be:26:8f:e2:81:91:a5:1a:
20:fd:a8:db:19:42:9c:7e:f7:80:bd:97:7e:3b:4e:70:29:f3:
97:7e:14:41:9a:b9:0b:ec:d1:4f:81:13:9e:5e:49:8a:28:5b:
23:41:76:2a:f1:95:3a:95:23:c7:d2:e0:be:44:00:e7:05:0c:
b0:05:e6:a5:5e:8c:f9:01:0b:61:f2:67:5c:e8:5b:12:e0:ad:
87:4b:40:a4:f1:d1:2a:b2:8a:a8:0e:91:f9:a8:1f:28:e7:ed:
1c:28:a4:36:c2:e9:83:92:b1:d0:3e:41:9c:9f:4a:df:ca:c1:
18:78:dd:38:80:44:fd:30:21:d7:ef:2a:fc:22:85:81:f5:e3:
43:39:a6:84:78:a3:c5:92:61:c7:f1:bb:d7:dd:8c:15:f5:92:
7f:af:62:38:6c:1b:f8:95:5c:f0:b2:87:fc:27:13:da:1d:60:
31:8a:bc:69:22:34:7a:cc:0b:01:a8:78:7e:3c:8d:7d:06:0c:
cd:0f:37:06:f1:3b:ec:79:aa:f8:4b:67:06:ae:ed:fc:27:c2:
41:09:2c:99:36:3e:7f:f5:0e:a6:70:f5:4b:a7:dc:42:9f:7f:
ad:40:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:46 2025 by rpki-client