Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9rs1XAZspkGes9hfRRaClyspwD8.roa
File: 9rs1XAZspkGes9hfRRaClyspwD8.roa (raw, json)
Hash identifier: 7xoABbtiKUgtE2FKdng6gWK8dPA/C36Ba1ey8fKXaXw=
Subject key identifier: F6:BB:35:5C:06:6C:A6:41:9E:B3:D8:5F:45:16:82:97:2B:29:C0:3F
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018873C5A22C9DE778F8D1FF693746AF3FCA
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9rs1XAZspkGes9hfRRaClyspwD8.roa
Signing time: Wed 31 May 2023 21:45:11 +0000
ROA not before: Wed 31 May 2023 21:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:c5:a2:2c:9d:e7:78:f8:d1:ff:69:37:46:af:3f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 31 21:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6bb355c066ca6419eb3d85f451682972b29c03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:6c:f2:b1:06:f0:37:51:5b:56:28:91:21:
28:cc:7a:4f:14:ed:5f:02:0f:99:18:ab:3f:86:a3:
89:63:82:90:47:eb:8d:30:57:13:51:af:0f:9e:9b:
6a:45:ab:b4:36:b1:f6:77:78:38:81:1f:a1:4a:dd:
ae:37:49:6e:72:b8:e6:35:b1:7b:6c:aa:21:69:b2:
9f:0c:a7:2b:c0:15:db:a7:37:b1:2d:2e:ae:61:28:
e0:f9:b1:b8:36:89:56:5f:6c:3d:04:54:11:29:53:
b8:24:0f:6e:d7:02:33:27:ac:fd:1f:b1:be:10:76:
55:e8:27:e0:cf:98:8c:df:aa:49:1d:d7:92:8d:cb:
48:73:57:93:cc:b0:61:19:33:6a:b8:30:82:60:f0:
06:9c:a7:03:46:15:ff:f7:37:39:8a:b1:02:44:d3:
07:53:9a:0d:c5:f7:80:d0:23:02:95:e4:0e:6f:ce:
6e:66:87:2c:9c:1b:0f:e5:0b:b4:76:37:34:1d:20:
cc:38:9e:b2:a9:4a:c0:a8:e0:dc:a8:b7:5a:39:ef:
fa:bf:1a:1c:50:97:b9:2c:67:ab:58:32:89:8c:2d:
a7:b6:27:a8:97:f4:56:8e:6a:e6:be:3a:49:71:5c:
a6:78:49:55:7c:9f:fe:d7:ad:93:53:68:e3:03:4e:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BB:35:5C:06:6C:A6:41:9E:B3:D8:5F:45:16:82:97:2B:29:C0:3F
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9rs1XAZspkGes9hfRRaClyspwD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:55:a8:70:12:09:b9:71:4a:d8:15:f3:26:65:eb:6e:54:d6:
b6:51:63:02:b4:24:a4:a4:ac:be:05:8b:26:8d:04:db:1f:95:
ab:54:94:da:dc:7f:1e:5c:eb:f1:b1:0a:23:62:d0:e2:b8:4d:
a2:19:ca:c7:83:0c:20:e2:36:5c:af:7f:45:4e:f1:cb:07:6b:
99:2a:5f:cd:ed:53:42:ce:5f:1e:8d:8f:26:b7:e9:de:ec:38:
fe:fe:c6:6a:4e:d8:df:f2:c8:f6:2c:ee:2a:e1:0c:95:bf:15:
4d:4a:25:21:d7:86:56:58:0c:9b:61:ca:34:4e:3d:22:32:bb:
13:cb:1e:67:02:cc:6d:95:a6:e3:ef:21:c0:c3:a9:fc:99:bb:
72:92:69:75:c6:78:12:b2:cf:af:1e:85:63:93:48:d6:e7:75:
db:fd:bc:d0:b7:c6:35:ee:ee:11:99:85:21:6b:96:58:ad:6d:
0d:ae:8e:d4:4a:52:7a:f1:14:62:c7:de:e4:c4:17:16:2a:62:
73:17:c9:97:31:c7:ec:9f:98:df:64:40:ca:7a:1d:85:df:8a:
41:94:f2:97:03:9f:04:cc:0e:99:a9:58:62:80:57:4f:0d:9a:
88:c6:93:14:79:79:01:7d:23:f1:18:0f:0b:6c:e8:8b:a1:a4:
05:2d:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org