Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9OxbQbCaP9s6-eh1i_k2OkDXurY.roa
File: 9OxbQbCaP9s6-eh1i_k2OkDXurY.roa (raw, json)
Hash identifier: OU4wXd1wthK7AuQu8BGPedXb0BN/1Ozc5W+boXC9bGo=
Subject key identifier: F4:EC:5B:41:B0:9A:3F:DB:3A:F9:E8:75:8B:F9:36:3A:40:D7:BA:B6
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01860A6E9170434C991AD470D697C1255FAC
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9OxbQbCaP9s6-eh1i_k2OkDXurY.roa
Signing time: Wed 01 Feb 2023 00:44:23 +0000
ROA not before: Wed 01 Feb 2023 00:44:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 193.109.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0a:6e:91:70:43:4c:99:1a:d4:70:d6:97:c1:25:5f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Feb 1 00:44:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4ec5b41b09a3fdb3af9e8758bf9363a40d7bab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:10:3b:6b:63:bd:ff:22:f4:37:04:a7:81:
06:b4:bc:8f:b5:da:cd:f1:04:d8:fb:27:b6:67:c1:
a0:c5:10:5c:c3:0c:de:cf:60:13:db:87:7f:27:e5:
99:c5:b0:2d:ea:d1:cc:70:16:21:84:90:fe:e1:d4:
8b:f1:d3:b5:f3:f2:4c:34:2f:35:95:f9:21:4e:7e:
2b:e6:d5:8d:59:54:4d:94:67:45:47:11:63:7e:d3:
95:c3:0b:58:58:2a:4f:fb:93:8e:0d:04:cb:e8:14:
51:b6:59:30:af:df:38:65:08:87:86:2a:ce:0d:35:
74:90:76:04:bc:37:09:4a:a1:dc:d8:0d:c7:af:65:
cc:a9:e5:77:a9:e5:70:ab:b8:1d:e8:b5:a9:36:36:
77:08:7f:09:e8:e4:33:16:f8:82:62:1f:31:4c:7e:
09:2e:ee:34:d5:4e:ad:e7:81:2c:39:c7:32:d3:a7:
74:b1:8f:65:0c:c2:fe:73:0d:76:ad:3e:56:9e:23:
9a:9d:80:2f:40:b8:92:a8:29:a0:2f:ab:ad:61:a8:
17:42:3a:4e:b2:bd:77:2b:6d:42:c4:46:d0:77:bd:
f2:d5:de:4d:cf:3f:01:a0:40:b5:2e:21:68:62:6f:
49:d6:74:3e:63:d0:ba:74:ae:64:a7:4b:62:49:ef:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:5B:41:B0:9A:3F:DB:3A:F9:E8:75:8B:F9:36:3A:40:D7:BA:B6
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9OxbQbCaP9s6-eh1i_k2OkDXurY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:05:ea:e9:61:5d:fc:03:7c:b7:f5:76:4b:92:39:79:da:b3:
dc:56:5b:38:43:a9:fb:48:63:10:5b:a2:1a:52:13:5b:8b:3a:
3b:3a:ff:53:5b:8b:90:45:46:48:fc:b4:8e:7a:a4:91:4a:35:
e2:9c:a7:84:2e:64:e6:59:e8:53:ec:2f:18:8f:92:aa:2d:1c:
67:c6:85:6d:42:60:70:5c:99:2e:a5:15:c9:97:38:7b:fd:1d:
73:5f:b5:70:42:30:fd:38:1f:f0:0c:a6:fd:ba:a1:51:af:a4:
1d:80:67:05:4c:9d:2d:18:1f:e2:1a:92:86:3a:04:aa:35:74:
86:81:2c:9b:e3:d8:e0:5d:a5:af:25:12:20:ba:36:ec:fb:53:
ec:8d:11:9f:aa:b0:b7:20:e8:cc:22:76:39:76:76:f7:57:f9:
b3:f5:1c:3f:88:db:9c:cf:ec:7f:1a:67:5d:b0:eb:ce:52:d4:
2c:39:e9:e5:34:4e:87:c7:75:bc:d0:f9:8a:2f:22:8d:a4:81:
04:4b:20:df:5f:77:4b:f5:b1:b7:94:34:63:0d:ca:9d:ca:80:
e7:f1:d4:4d:9d:5c:70:f2:83:b2:4a:c7:35:bb:c0:00:6a:b0:
f9:a4:9c:01:b5:87:47:de:f1:fe:ac:92:76:1a:77:f3:79:a8:
ad:98:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org