Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/glAGV3KmKHdn_f5Xmz239KSILJo.roa
File: glAGV3KmKHdn_f5Xmz239KSILJo.roa (raw, json)
Hash identifier: AGzZkomLp7EQc33XExh9i1w4ar21TMgqEMoBjNdVt+I=
Subject key identifier: 82:50:06:57:72:A6:28:77:67:FD:FE:57:9B:3D:B7:F4:A4:88:2C:9A
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 0191BC26275002355297A7EA60655F1E037E
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/glAGV3KmKHdn_f5Xmz239KSILJo.roa
Signing time: Wed 04 Sep 2024 08:28:22 +0000
ROA not before: Wed 04 Sep 2024 08:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.43.138.0/24 maxlen: 24
193.43.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:26:27:50:02:35:52:97:a7:ea:60:65:5f:1e:03:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Sep 4 08:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8250065772a6287767fdfe579b3db7f4a4882c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:30:1f:8b:60:56:53:1c:b9:46:7f:ae:00:
2f:53:a9:74:95:0c:61:31:29:cc:f7:1c:54:af:4a:
6c:17:8e:bb:a3:98:6c:c8:b3:e7:f1:64:5a:7e:68:
1a:a9:e7:d6:69:c0:d1:ef:bc:fa:49:1a:06:e1:d8:
de:9b:dc:54:3f:b3:d3:1b:e0:d2:4d:c5:2e:2a:c1:
0a:4d:e1:b4:de:34:a1:cc:d8:98:c2:96:54:4a:5c:
ef:e5:6c:bc:11:75:73:56:08:a2:7f:3d:ff:61:0f:
52:73:f2:99:87:3a:a3:6f:21:75:cd:18:d6:d2:8a:
f8:5b:c5:95:23:2d:f7:45:cd:17:80:59:9f:27:f8:
61:ee:6c:88:ee:7a:78:c1:9f:5c:91:02:16:67:ac:
34:5a:7c:de:a5:0b:f2:37:6b:62:4d:15:74:7f:d0:
bf:3f:99:b9:41:63:90:fc:1a:86:3c:77:a8:4e:ea:
49:fe:58:4c:08:8d:05:08:a6:13:09:b3:6a:d6:c9:
0b:e3:30:c2:31:c8:1e:1a:16:3d:1a:74:45:b9:51:
48:a8:eb:e8:c7:e0:d8:69:fd:b2:6a:60:f1:7d:8c:
73:9c:1f:00:49:31:bb:0b:7e:44:38:d4:3a:81:f7:
8d:8c:c2:e3:a5:f8:f0:48:f9:c2:b8:ff:45:66:6d:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:06:57:72:A6:28:77:67:FD:FE:57:9B:3D:B7:F4:A4:88:2C:9A
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/glAGV3KmKHdn_f5Xmz239KSILJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a9:30:5b:86:c8:bf:38:6a:26:f4:f9:2a:e5:cd:fe:85:f1:
56:7a:24:a9:e5:48:23:c5:68:04:c6:94:f0:4f:43:28:46:11:
09:d5:a1:24:c6:f6:6d:aa:83:a3:de:ab:a1:58:aa:1c:2e:9d:
5b:15:cc:62:00:53:51:89:8d:91:ef:91:c0:18:75:33:eb:3b:
79:fc:32:ab:e4:e9:7a:4c:1c:25:5a:f5:cb:8d:da:2d:ba:c9:
fb:65:5b:66:7e:e3:de:48:77:99:12:53:b1:2d:6a:a2:6c:db:
5a:d0:ae:c2:86:c6:cb:12:95:db:59:1a:15:22:ef:76:4c:02:
f7:c5:d6:69:b9:37:09:8d:42:21:7c:74:ce:de:b9:1d:23:57:
b5:4c:0e:0a:9d:be:bd:83:c9:b8:9a:f9:4b:06:63:5f:3d:63:
da:e2:43:fe:90:31:56:09:98:7f:c9:f3:d2:b3:2a:54:20:d5:
96:46:4d:1b:8a:46:93:80:c8:de:65:a0:a8:f3:d0:06:e0:5a:
e3:17:b1:40:23:55:97:ed:f9:04:60:5f:97:9a:fb:d3:7f:9a:
cd:f0:6e:6e:74:de:d6:22:70:ca:4d:95:80:17:57:bb:64:cc:
27:f0:81:86:26:36:47:84:be:aa:d9:0e:32:57:06:ef:28:e8:
af:64:1f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:37 2025 by rpki-client