Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/OcZ3uI5QfgIjAQ1oM8JTlMiPKhc.roa
File: OcZ3uI5QfgIjAQ1oM8JTlMiPKhc.roa (raw, json)
Hash identifier: ZiaQvLevjii0iMKEPvVSLyZm3ejVKHnLaqN5ukRCgxk=
Subject key identifier: 39:C6:77:B8:8E:50:7E:02:23:01:0D:68:33:C2:53:94:C8:8F:2A:17
Certificate issuer: /CN=712d0af87b0662f31e483e01efefc02a74326355
Certificate serial: 01927021BC4E63A230E009C3235D0F7D5CD2
Authority key identifier: 71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/OcZ3uI5QfgIjAQ1oM8JTlMiPKhc.roa
Signing time: Wed 09 Oct 2024 07:15:11 +0000
ROA not before: Wed 09 Oct 2024 07:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43451
IP address blocks: 193.93.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:21:bc:4e:63:a2:30:e0:09:c3:23:5d:0f:7d:5c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712d0af87b0662f31e483e01efefc02a74326355
Validity
Not Before: Oct 9 07:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39c677b88e507e0223010d6833c25394c88f2a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9a:dc:4a:1d:a6:93:8f:1e:e9:96:d1:5f:68:
e3:78:1e:41:e2:43:48:55:38:17:f4:b0:bb:f0:48:
fd:2f:3e:3c:71:17:40:56:a9:13:2a:8f:7d:68:d9:
04:64:ce:2c:d4:ca:7a:89:5a:e0:69:d3:c9:8d:1b:
a0:f7:d8:26:0b:0e:e3:9d:e4:3e:5d:5e:a9:a2:60:
6e:4f:51:2b:da:47:d2:df:dd:ba:e9:bf:72:48:a3:
a5:92:03:71:08:b3:0b:00:30:4f:bc:9b:80:cc:e8:
d3:11:e2:d8:0a:8b:1f:1c:78:45:12:78:bf:64:f9:
ca:1a:ef:32:77:44:24:2e:35:7b:2d:b6:c0:86:d0:
65:f3:cc:d0:b6:0e:38:47:b3:34:77:47:e2:f6:a2:
ce:8b:7b:6e:5a:7a:ac:a2:55:98:9c:18:d1:0e:b1:
b3:5d:7b:42:5b:42:ee:e4:cf:ac:dc:05:c5:8f:c0:
9d:90:ff:b2:e9:fc:dc:65:cf:35:dd:0c:be:80:e4:
aa:22:7c:c6:53:99:38:4e:7f:89:56:37:c8:ae:af:
76:ed:3d:fb:cb:d2:af:03:26:53:09:a6:66:47:bb:
2b:66:ed:41:95:87:7a:ae:9e:8e:be:2a:32:40:21:
25:78:d9:1b:de:e0:36:c9:32:29:b6:13:e5:d8:99:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:77:B8:8E:50:7E:02:23:01:0D:68:33:C2:53:94:C8:8F:2A:17
X509v3 Authority Key Identifier:
keyid:71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/OcZ3uI5QfgIjAQ1oM8JTlMiPKhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.72.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:e1:96:80:f1:33:ba:ab:ae:32:8e:49:1c:bf:f9:af:c6:19:
73:45:6e:b9:96:0e:1c:91:ea:03:66:1a:01:ac:9f:e3:f6:5e:
17:39:ef:ce:f9:0a:cd:e6:08:2c:f4:bd:f0:68:d1:1c:c1:72:
98:bf:e6:d0:96:30:11:9c:5b:97:99:8b:19:46:af:72:75:f7:
c3:4e:a5:bc:29:36:58:c0:c9:95:87:a9:a2:99:90:22:07:1c:
5b:d1:e9:b1:90:0b:98:c9:90:d3:28:6d:ed:10:c6:22:ea:ae:
d6:2f:69:92:47:c3:70:fb:2a:92:11:ce:44:b5:57:f0:cd:8f:
6b:74:8d:51:85:8d:a9:b6:41:99:15:6d:67:56:54:ab:ad:8c:
b3:3a:b1:26:af:dd:b6:67:cb:80:63:26:37:1c:a4:c2:4b:68:
3a:65:36:58:36:90:ff:fa:19:81:68:67:07:57:9f:86:8e:ef:
3e:52:45:88:64:ae:77:4a:9f:ce:47:fc:cf:22:70:af:d4:ef:
20:c3:14:da:7e:27:fc:8e:d3:b4:72:12:6a:06:c1:56:6d:e2:
d3:c6:21:d1:b8:b4:15:eb:7b:d3:36:8f:58:1e:a4:1f:e5:e1:
18:d6:67:2c:40:f1:3e:8a:07:3b:ad:28:0e:3b:97:fc:77:d1:
a4:3c:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:48 2025 by rpki-client