Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/SlgoBdyFbLrbGJUSLamDbPXy66s.roa
File: SlgoBdyFbLrbGJUSLamDbPXy66s.roa (raw, json)
Hash identifier: wT1ApjtDk/NC/y4qWriccY48oazYSgFC0+PcQLUekB0=
Subject key identifier: 4A:58:28:05:DC:85:6C:BA:DB:18:95:12:2D:A9:83:6C:F5:F2:EB:AB
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 018DAC923EB65C55F988B8CA2DE45A43D737
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/SlgoBdyFbLrbGJUSLamDbPXy66s.roa
Signing time: Thu 15 Feb 2024 11:41:21 +0000
ROA not before: Thu 15 Feb 2024 11:41:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200184
IP address blocks: 67.63.56.0/21 maxlen: 24
67.63.61.0/24 maxlen: 24
80.75.216.0/24 maxlen: 24
2a13:f800::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:92:3e:b6:5c:55:f9:88:b8:ca:2d:e4:5a:43:d7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Feb 15 11:41:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a582805dc856cbadb1895122da9836cf5f2ebab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:99:4c:29:e5:af:af:03:bf:03:74:98:04:a4:
9b:a4:82:85:b8:b7:9f:47:ec:13:40:f7:3d:7f:46:
83:b5:8f:1f:7d:b4:cd:f3:dd:ef:44:96:99:0c:21:
d0:39:4a:35:84:15:56:a7:26:2e:9b:5b:3d:4a:05:
84:37:a2:17:4b:a1:a5:78:0e:e4:d1:3b:4f:a8:04:
c7:55:5a:8b:f6:15:b4:a5:57:cf:0a:9d:8e:50:f2:
2a:30:33:19:2a:1e:e4:89:30:15:41:9d:b7:12:56:
62:ed:f1:64:50:d5:a6:f9:d2:60:c3:cd:e8:af:64:
5e:b9:71:0d:08:91:2c:bb:4a:03:4d:80:44:7b:92:
98:94:c2:9f:75:dd:f7:25:1d:2e:d8:b1:15:27:cf:
cb:ba:34:3c:c3:da:22:38:1c:01:13:f7:f3:a7:a1:
f0:61:2d:f8:55:8b:15:3b:7d:db:69:9e:7f:d5:5b:
c2:d7:dc:16:39:98:58:7a:4f:5a:d8:be:83:20:2f:
46:6a:14:6d:07:96:9b:d6:58:08:7d:58:02:cd:bd:
30:52:7f:1e:0f:f3:fc:a2:36:ff:d2:be:89:a6:3f:
63:ec:d1:73:08:63:c5:01:3f:c3:6f:bc:96:12:b0:
6b:0f:ac:9c:76:c7:0e:82:31:bb:8a:94:2e:bd:2c:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:28:05:DC:85:6C:BA:DB:18:95:12:2D:A9:83:6C:F5:F2:EB:AB
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/SlgoBdyFbLrbGJUSLamDbPXy66s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.56.0/21
80.75.216.0/24
IPv6:
2a13:f800::/29
Signature Algorithm: sha256WithRSAEncryption
be:39:e6:88:a9:4e:17:4f:d0:79:b9:25:19:e2:b1:33:57:9d:
a7:88:4e:e0:1c:60:1e:05:ed:8a:2d:ad:48:71:2f:10:4e:4f:
37:eb:07:4b:4d:18:60:72:78:4d:c2:c9:e1:3e:3c:c4:47:85:
d8:28:01:54:7b:d5:75:3e:05:b5:21:30:ac:f2:55:bd:67:c8:
70:0b:35:b4:92:d2:00:74:14:c9:d1:7b:4f:9a:3c:17:72:d6:
f1:f1:82:a5:a2:9d:0a:89:44:fa:20:2c:0b:2d:10:db:07:ca:
14:35:26:a7:95:25:4a:40:2c:14:0c:39:12:89:41:a0:5d:78:
ba:2d:61:ba:59:01:e4:03:75:57:eb:9c:92:b4:44:f1:65:f7:
15:a8:27:e5:d1:98:0a:df:58:50:6d:94:ab:15:3a:24:4b:9c:
7e:4e:8e:bf:7f:47:70:f9:77:29:e1:10:e0:13:e5:99:d7:44:
7b:ae:7f:cf:ee:dc:2a:76:4a:d5:bc:b0:08:eb:f8:a4:48:0f:
e5:71:45:cc:cb:ea:e2:43:1f:8e:6b:c1:71:0c:58:db:05:0c:
89:91:46:42:6a:a9:b9:fd:39:1e:1c:3a:0b:ad:87:3d:cf:40:
48:39:bf:89:fe:0c:67:b8:1d:36:48:a0:82:d7:da:37:a6:fc:
f3:5e:ef:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:26 2025 by rpki-client