Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LAY7tF8R7RzSbz3vdlC7OEoF7OI.roa
File: LAY7tF8R7RzSbz3vdlC7OEoF7OI.roa (raw, json)
Hash identifier: cj97Xwme5Mjgouiss3Wa8MomCXYtl8h1K1eewJb/tmg=
Subject key identifier: 2C:06:3B:B4:5F:11:ED:1C:D2:6F:3D:EF:76:50:BB:38:4A:05:EC:E2
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0184CF7C01453188F48277389171B2C937C9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LAY7tF8R7RzSbz3vdlC7OEoF7OI.roa
Signing time: Thu 01 Dec 2022 20:58:41 +0000
ROA not before: Thu 01 Dec 2022 20:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 193.109.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:7c:01:45:31:88:f4:82:77:38:91:71:b2:c9:37:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 1 20:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c063bb45f11ed1cd26f3def7650bb384a05ece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:8f:ce:ed:37:d7:50:d2:c3:6b:5a:5f:16:
45:69:e8:c8:76:27:eb:08:62:e4:27:fb:b0:b5:f8:
31:be:60:72:84:89:86:d6:45:ea:e1:af:57:90:6c:
2e:0c:89:5b:3c:97:46:a1:50:ae:84:4e:85:4a:4b:
a6:dd:7a:c0:46:9c:75:01:2d:0d:a3:ac:b5:f0:bd:
fb:b7:9e:a7:8b:4b:f3:46:ee:ca:46:6f:71:61:3f:
56:40:d8:d5:43:52:93:e1:66:40:41:88:80:5f:0a:
8e:db:b7:c0:d7:c3:3d:27:a2:b2:13:4d:37:a8:56:
4d:56:91:e0:e7:78:06:40:d5:9d:f6:66:03:4f:5a:
9e:4a:ab:3d:0d:e1:91:24:c1:e1:19:75:17:e8:a7:
dd:7f:a1:f2:75:c9:5f:1d:3e:0f:d6:ac:44:22:ae:
f7:13:d7:cc:7f:4a:b5:84:0e:db:c6:64:50:22:f6:
55:b0:a0:43:3b:ee:c2:1e:7e:5b:50:4b:84:93:02:
49:58:72:fc:f9:8b:ef:66:f7:94:f2:be:5e:85:2e:
59:af:81:68:20:46:0e:2d:41:a1:95:44:22:ac:62:
0b:89:b5:4f:01:b9:1c:93:ae:d0:99:83:96:ff:1b:
66:37:81:94:c9:00:3b:61:1b:c8:50:7b:0c:e1:64:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:3B:B4:5F:11:ED:1C:D2:6F:3D:EF:76:50:BB:38:4A:05:EC:E2
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LAY7tF8R7RzSbz3vdlC7OEoF7OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4b:c5:41:ca:8f:7f:db:2b:43:74:99:da:4f:78:f3:1d:06:
50:d9:b3:50:a8:68:aa:79:4d:19:52:b4:7a:9d:ab:aa:eb:c2:
6e:53:df:c3:8c:1f:9d:c0:36:17:df:ed:25:6b:7c:73:e3:0c:
2c:db:7b:46:66:55:23:22:7c:8e:32:d1:d0:42:a1:f2:f2:3d:
54:80:e1:1a:91:9c:fa:b1:f4:f5:ef:f2:77:c3:cb:35:82:ca:
61:20:2b:c5:16:5e:9d:e6:87:bd:d7:c0:8e:f4:35:66:22:a1:
14:96:7a:14:9e:5d:07:7c:f9:81:a4:b0:1d:db:0a:2e:af:50:
0f:97:e2:2d:51:32:a3:22:45:07:c6:bc:b9:b7:bc:f3:fd:88:
3d:7e:c4:97:65:d4:c6:72:15:b0:82:fa:c2:da:29:d8:b2:bd:
ad:46:33:72:b4:85:43:8f:33:02:96:eb:44:1a:c8:1b:bc:7f:
de:36:8c:a3:ba:85:d6:c4:e5:26:83:21:9a:78:f4:5c:37:1f:
10:50:8b:1d:f1:e8:7b:21:27:99:f4:63:c4:19:f5:56:b8:ed:
73:e7:f6:e0:b1:57:82:47:97:04:4f:dd:b8:a8:97:31:31:39:
d4:5a:a1:38:fa:ce:61:8c:9f:48:56:36:d2:9b:93:07:62:be:
33:eb:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org