Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/6cZXEi3jNbV2Tw_Z685YNcWGm30.roa
File: 6cZXEi3jNbV2Tw_Z685YNcWGm30.roa (raw, json)
Hash identifier: wie2Xpp1kbQ/90fqjsfHWeWeYeZNvxxqhjjcLg+u7/g=
Subject key identifier: E9:C6:57:12:2D:E3:35:B5:76:4F:0F:D9:EB:CE:58:35:C5:86:9B:7D
Certificate issuer: /CN=13a5bdd2d61eba8efc9ca9cc632d802ae1f3d2c1
Certificate serial: 01882086773E67BB88AC59C26A33BE2B2201
Authority key identifier: 13:A5:BD:D2:D6:1E:BA:8E:FC:9C:A9:CC:63:2D:80:2A:E1:F3:D2:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6W90tYeuo78nKnMYy2AKuHz0sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/6cZXEi3jNbV2Tw_Z685YNcWGm30.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.163.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:77:3e:67:bb:88:ac:59:c2:6a:33:be:2b:22:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a5bdd2d61eba8efc9ca9cc632d802ae1f3d2c1
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c657122de335b5764f0fd9ebce5835c5869b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:e4:b4:8f:f5:89:64:d4:0a:ad:25:65:cc:
b6:f2:9a:28:55:cf:14:4f:c3:f0:32:f0:e9:3b:89:
c9:69:4c:b9:4b:18:cb:04:a5:c2:86:17:6e:61:5e:
9c:f9:48:82:1b:67:68:8c:db:0c:f6:2c:13:50:00:
43:6e:37:83:0a:81:90:01:49:87:a8:b4:cf:5e:06:
93:00:31:d3:0c:69:cb:ce:61:66:f6:f0:1c:ff:89:
0e:67:db:ad:1a:90:cc:af:7c:2c:72:e6:26:aa:2c:
f2:1d:4d:83:25:5b:dc:25:b4:ba:d0:73:db:f5:8b:
73:c9:cb:0c:15:8e:15:0b:e2:d7:1c:53:21:0c:16:
95:18:a4:c8:02:c1:57:94:e2:d7:e6:47:89:7a:38:
d4:4c:6a:b3:af:53:20:a9:42:8a:53:8f:b4:63:d6:
c1:36:de:ee:92:75:e6:ba:5b:f0:8b:ee:32:25:f3:
26:6c:1f:e3:a5:cf:69:55:54:98:6e:5e:ce:10:86:
f7:87:d6:04:1a:5a:aa:56:f8:af:22:92:c2:68:4e:
61:49:6b:5f:e3:ee:f0:91:53:b1:ab:d0:ba:fb:58:
1c:4c:f1:a7:5c:e6:96:43:32:00:27:70:9f:38:7f:
7a:6c:ab:41:d6:71:67:2c:ef:65:ec:6d:71:d9:d1:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C6:57:12:2D:E3:35:B5:76:4F:0F:D9:EB:CE:58:35:C5:86:9B:7D
X509v3 Authority Key Identifier:
keyid:13:A5:BD:D2:D6:1E:BA:8E:FC:9C:A9:CC:63:2D:80:2A:E1:F3:D2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6W90tYeuo78nKnMYy2AKuHz0sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/6cZXEi3jNbV2Tw_Z685YNcWGm30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/E6W90tYeuo78nKnMYy2AKuHz0sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.95.0/24
Signature Algorithm: sha256WithRSAEncryption
01:11:1e:18:5e:c1:78:06:85:35:0d:73:3b:54:f8:e6:77:44:
89:c9:c1:ec:42:7b:d6:1f:03:5b:dd:c3:da:c7:06:24:b4:c6:
77:e1:b0:76:5f:95:47:66:5e:57:36:3e:ae:49:a8:ca:f4:d3:
6c:85:43:73:89:50:1f:7a:ee:6f:d7:06:0b:05:3e:79:fb:fb:
30:d8:3a:89:52:ca:21:e3:bf:7a:61:a7:82:5a:10:b7:1e:9c:
a0:00:c9:46:ee:b6:35:c3:c3:ec:37:8f:ca:b2:3d:05:c0:03:
ae:ee:26:47:c8:88:dd:43:41:f0:1c:6c:15:66:84:e5:09:36:
0a:7a:18:39:41:a3:1a:1f:42:83:72:70:dd:a3:7f:40:c5:22:
dd:45:af:02:1d:a2:4a:06:bc:fa:4b:99:c4:f7:fc:9e:0d:00:
cf:0d:30:27:7c:f8:0c:47:13:38:66:98:fe:b5:6e:a6:92:1f:
5a:bf:0f:38:1b:eb:db:78:49:48:aa:0d:72:c2:d9:93:45:0f:
ae:51:79:76:4a:95:e3:4f:64:08:fd:3d:43:bc:4b:5f:3c:5e:
92:65:ff:12:43:e9:77:9d:2e:99:3d:be:25:ec:3f:c0:de:cc:
e3:6f:c3:f9:0e:c6:b3:8a:85:4b:3f:77:38:92:9f:7a:c6:12:
af:8d:2c:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnc+Z7uIrFnCajO+KyIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYTViZGQyZDYxZWJhOGVmYzljYTljYzYzMmQ4MDJhZTFm
M2QyYzEwHhcNMjMwNTE1MTc0NzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWM2NTcxMjJkZTMzNWI1NzY0ZjBmZDllYmNlNTgzNWM1ODY5YjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2/ktI/1iWTUCq0lZcy28pooVc8U
T8PwMvDpO4nJaUy5SxjLBKXChhduYV6c+UiCG2dojNsM9iwTUABDbjeDCoGQAUmH
qLTPXgaTADHTDGnLzmFm9vAc/4kOZ9utGpDMr3wscuYmqizyHU2DJVvcJbS60HPb
9YtzycsMFY4VC+LXHFMhDBaVGKTIAsFXlOLX5keJejjUTGqzr1MgqUKKU4+0Y9bB
Nt7uknXmulvwi+4yJfMmbB/jpc9pVVSYbl7OEIb3h9YEGlqqVvivIpLCaE5hSWtf
4+7wkVOxq9C6+1gcTPGnXOaWQzIAJ3CfOH96bKtB1nFnLO9l7G1x2dG0swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOnGVxIt4zW1dk8P2evOWDXFhpt9MB8GA1UdIwQY
MBaAFBOlvdLWHrqO/JypzGMtgCrh89LBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTZXOTB0WWV1bzc4bktuTVl5MkFLdUh6MHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lNDNmNDctNDMwNy00NWUxLWFjN2Et
NTkwNzczNWQzOTFjLzEvNmNaWEVpM2pOYlYyVHdfWjY4NVlOY1dHbTMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lNDNmNDctNDMwNy00NWUxLWFjN2EtNTkwNzczNWQzOTFj
LzEvRTZXOTB0WWV1bzc4bktuTVl5MkFLdUh6MHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaNfMA0G
CSqGSIb3DQEBCwUAA4IBAQABER4YXsF4BoU1DXM7VPjmd0SJycHsQnvWHwNb3cPa
xwYktMZ34bB2X5VHZl5XNj6uSajK9NNshUNziVAfeu5v1wYLBT55+/sw2DqJUsoh
4796YaeCWhC3HpygAMlG7rY1w8PsN4/Ksj0FwAOu7iZHyIjdQ0HwHGwVZoTlCTYK
ehg5QaMaH0KDcnDdo39AxSLdRa8CHaJKBrz6S5nE9/yeDQDPDTAnfPgMRxM4Zpj+
tW6mkh9avw84G+vbeElIqg1ywtmTRQ+uUXl2SpXjT2QI/T1DvEtfPF6SZf8SQ+l3
nS6ZPb4l7D/A3szjb8P5DsazioVLP3c4kp96xhKvjSz9
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:46 2025 by rpki-client