Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/2x3GH0uugj9PiKapw7_y_5XF8YY.roa
File: 2x3GH0uugj9PiKapw7_y_5XF8YY.roa (raw, json)
Hash identifier: Q5ocnBPifUXZuaMrfYFAL794jt6aZyPuaM4u2/TpMXA=
Subject key identifier: DB:1D:C6:1F:4B:AE:82:3F:4F:88:A6:A9:C3:BF:F2:FF:95:C5:F1:86
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019421B1B2FDF2A7CB077810530C1032D2DC
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/2x3GH0uugj9PiKapw7_y_5XF8YY.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215514
IP address blocks: 193.56.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b2:fd:f2:a7:cb:07:78:10:53:0c:10:32:d2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db1dc61f4bae823f4f88a6a9c3bff2ff95c5f186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:e7:2f:d1:2c:3e:a9:c3:00:c7:f4:c4:b9:
31:5b:c8:6d:d0:43:d3:cd:92:5a:11:94:06:b3:be:
4a:03:b3:14:d3:57:d6:9f:fe:08:c1:fa:9e:21:cf:
c9:0b:db:2e:44:5a:83:6e:d9:38:c0:29:34:e6:f5:
db:fa:8b:c7:f7:81:50:46:e4:84:85:09:bb:07:a0:
57:32:d7:b4:2c:fc:68:d7:38:66:fd:dd:b6:cc:6b:
77:6c:28:6e:ba:51:25:49:b5:bf:d4:d9:05:be:75:
5e:ac:98:5d:0f:a6:5c:00:ba:5d:4f:c2:9a:cf:4f:
09:66:42:6a:b0:b0:ec:62:e6:e3:c6:1b:a9:17:c9:
94:26:a4:10:ab:71:db:66:f3:46:73:e5:35:a8:39:
f4:81:30:16:c1:65:5d:67:ff:20:28:e1:ab:45:7e:
a8:96:01:a9:0d:75:6a:99:19:7e:00:85:45:04:f7:
79:dd:fd:98:10:e5:5c:e7:73:60:91:d0:a1:e6:80:
c2:d7:8a:dc:07:5c:ba:9b:d6:70:9a:e8:c0:fc:f6:
84:87:cc:68:ca:d9:5b:60:99:07:c9:a6:8d:ac:41:
83:07:1e:83:45:2d:18:65:f6:1f:84:ce:d1:29:a9:
86:c5:ca:83:2f:16:e0:f8:1a:3a:93:83:fc:9a:c6:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1D:C6:1F:4B:AE:82:3F:4F:88:A6:A9:C3:BF:F2:FF:95:C5:F1:86
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/2x3GH0uugj9PiKapw7_y_5XF8YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.63.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:12:ab:a2:de:36:38:56:6e:aa:08:de:46:dc:d3:12:f7:d7:
2b:10:9f:9b:61:dd:92:2e:b7:62:ed:9c:05:c7:fa:75:af:93:
61:3a:90:c1:7c:35:cf:4d:40:89:7e:12:0e:fb:e2:e6:fe:08:
e2:71:77:b2:38:5c:1d:22:52:05:85:49:6a:d0:78:97:ae:81:
6e:ec:10:14:6a:fb:c8:75:31:3d:c8:e1:e7:6d:46:33:87:80:
cb:c5:ee:76:e1:2a:9e:05:cd:09:65:d7:c7:ee:11:98:1d:76:
5b:a6:51:eb:87:49:d9:69:4f:45:d6:74:a6:c0:13:6c:aa:47:
6a:d6:c4:23:b3:d7:b6:94:48:f3:01:b2:8f:8c:40:43:df:22:
24:2d:29:b0:24:f8:e1:5e:f0:d2:73:e0:fd:12:14:ff:9b:b8:
52:4b:c0:bb:ee:b1:84:e5:98:dc:0a:52:53:c1:5e:03:06:8c:
75:11:3a:da:89:1e:13:4f:66:c5:27:89:f7:ab:8f:d3:ed:15:
d0:16:f7:20:21:e5:b6:bf:7f:d9:fe:9c:77:15:ec:4a:1c:a3:
5b:59:ca:d0:d6:75:31:6f:45:0e:37:50:a1:d2:8c:83:ad:f3:
5f:0d:9e:98:24:ec:df:f0:db:33:f3:65:f5:9e:e4:b6:65:14:
f9:58:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:03 2025 by rpki-client