Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/L25izpfCh2Us_V13sCNHVwlPNw0.roa
File: L25izpfCh2Us_V13sCNHVwlPNw0.roa (raw, json)
Hash identifier: jktXwGngUpYwve11RC+FgSLPdDo81XbxHrvvsJ6cGio=
Subject key identifier: 2F:6E:62:CE:97:C2:87:65:2C:FD:5D:77:B0:23:47:57:09:4F:37:0D
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01850211896B880302ABE82603A82A8960C7
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/L25izpfCh2Us_V13sCNHVwlPNw0.roa
Signing time: Sun 11 Dec 2022 16:43:01 +0000
ROA not before: Sun 11 Dec 2022 16:43:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 193.109.194.0/24 maxlen: 24
193.109.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:02:11:89:6b:88:03:02:ab:e8:26:03:a8:2a:89:60:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 11 16:43:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f6e62ce97c287652cfd5d77b0234757094f370d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:27:43:fa:64:57:bc:3e:e1:bc:50:04:c2:
3b:bb:da:7c:9c:e7:c4:52:f9:b6:0d:50:52:fc:ff:
79:83:4b:c3:eb:d1:fd:d3:15:bc:9c:91:a0:88:68:
6f:2e:13:ee:f6:cb:66:79:68:a0:94:ec:d0:e8:d3:
b4:10:29:c1:c2:a9:f3:c1:ab:0c:b9:e9:9a:d7:55:
79:4c:de:92:78:bc:a7:03:7f:15:00:b5:81:ae:62:
b3:f3:03:21:06:bc:29:c1:86:07:56:17:c6:93:25:
7e:c5:56:3c:61:e3:14:7f:c4:6a:79:f1:7b:2d:44:
7b:a3:d8:89:30:6b:df:60:4f:19:20:d5:a4:ef:59:
53:99:06:20:82:88:60:95:c1:8e:2c:97:c6:c6:5b:
6e:f8:ae:16:2b:14:ac:12:15:19:9e:f9:78:9e:00:
ea:17:a1:37:69:3a:be:79:ee:66:88:82:33:f4:51:
3d:72:33:cf:c0:80:84:ab:00:a1:f5:7a:f8:96:e0:
28:94:02:1e:b0:b6:6e:fb:0b:a1:eb:84:3e:a4:40:
ec:15:39:b6:54:08:d3:79:e2:fd:eb:93:3b:2f:3e:
cd:80:8a:7b:27:6e:9a:3e:74:a9:a0:e8:1f:a4:cb:
07:63:ab:f1:90:c3:47:f4:ae:40:66:92:de:6b:09:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:62:CE:97:C2:87:65:2C:FD:5D:77:B0:23:47:57:09:4F:37:0D
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/L25izpfCh2Us_V13sCNHVwlPNw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.194.0/24
193.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5e:68:80:a1:92:f3:b9:66:81:1f:96:3f:20:55:4c:0a:3d:
f1:e8:2c:4c:73:03:3c:3c:a3:75:a5:4a:a7:11:2e:0f:ca:d9:
37:af:91:e2:be:af:53:67:cd:91:9c:21:39:f6:10:2d:cf:2a:
1e:a9:3c:ef:3a:7b:9c:e7:85:27:f7:e3:b6:99:a0:fc:5a:e5:
81:c2:85:65:58:c9:d7:16:41:e4:3a:e4:3e:b7:20:72:d6:ba:
17:ba:1b:52:a2:ea:18:76:9d:3a:d6:30:81:f8:97:28:35:22:
3a:ee:36:c4:8e:fa:54:c3:b7:d3:5a:5e:ba:84:bb:c5:29:00:
53:3d:fb:87:81:d4:64:75:14:c2:27:47:93:c1:53:6d:c8:f1:
99:b8:5c:b1:23:1b:bd:df:46:f5:62:f9:bf:5a:34:42:05:fb:
e3:9d:65:bd:67:f3:fb:6e:ce:01:63:fb:5b:67:5f:34:02:41:
88:c5:31:1d:62:2f:24:38:5c:a8:f5:ba:ab:b7:9f:12:9b:a6:
54:f6:d3:04:de:e4:99:1b:42:89:d8:19:1d:5a:60:ac:81:b2:
16:2b:c0:3d:a6:9d:33:70:05:50:d9:d1:2b:64:1c:3f:0e:cf:
66:b5:eb:7e:7a:99:19:34:d6:eb:cd:2e:a4:d3:58:39:fa:4b:
4f:6e:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org