Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/Npn4shUKhljFYZbkZcQxOZ0wddA.roa
File: Npn4shUKhljFYZbkZcQxOZ0wddA.roa (raw, json)
Hash identifier: OSSVkY00Tig7essvCOpr/l+Z22/RR8dPJZPanSpmi5A=
Subject key identifier: 36:99:F8:B2:15:0A:86:58:C5:61:96:E4:65:C4:31:39:9D:30:75:D0
Certificate issuer: /CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Certificate serial: 018A8D2819D07CBB2DCA4713953ECACB00A2
Authority key identifier: 2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/Npn4shUKhljFYZbkZcQxOZ0wddA.roa
Signing time: Wed 13 Sep 2023 06:08:50 +0000
ROA not before: Wed 13 Sep 2023 06:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 193.200.102.0/23 maxlen: 24
193.201.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:28:19:d0:7c:bb:2d:ca:47:13:95:3e:ca:cb:00:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Validity
Not Before: Sep 13 06:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3699f8b2150a8658c56196e465c431399d3075d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:5c:56:14:e7:f7:a1:3c:76:3b:64:0d:6b:
06:ce:dd:fe:f9:f7:23:a5:35:fc:14:76:94:db:84:
6a:7e:b8:b3:b1:5a:4a:51:a7:aa:62:ff:1c:c2:aa:
29:93:bd:d0:3d:20:6e:0c:4b:84:a8:27:98:43:ea:
44:22:6b:92:fe:3b:91:48:e2:22:3e:51:04:e6:2b:
24:93:37:ff:a3:5e:7b:a0:42:e8:74:94:1b:49:8b:
8d:e3:14:91:f1:d3:1c:4d:b6:ed:88:a4:ab:1f:bb:
4d:b6:5c:46:ec:ba:9b:64:c3:75:f5:50:e4:b7:18:
af:89:9e:ac:eb:e5:45:a9:2d:b9:6e:b7:66:48:4d:
0c:3e:1c:08:15:45:5a:29:9a:cc:a9:06:8a:a7:cd:
90:ad:a7:43:bc:13:3e:4b:30:c2:19:93:b4:b5:db:
b7:00:57:30:04:37:5b:cf:e9:be:25:ac:80:de:5f:
19:c5:09:c8:d0:8e:85:5c:6e:ba:f6:8c:8a:03:7a:
cb:a6:59:1e:7f:14:64:d8:1c:3b:a6:37:a8:0c:b9:
30:aa:39:56:35:1f:27:5d:b5:22:a1:fb:22:36:63:
c1:67:82:43:a7:64:16:13:8f:a0:41:2c:52:ad:2a:
80:92:7d:1c:cf:8d:ac:56:67:2f:59:71:64:16:20:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:F8:B2:15:0A:86:58:C5:61:96:E4:65:C4:31:39:9D:30:75:D0
X509v3 Authority Key Identifier:
keyid:2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/Npn4shUKhljFYZbkZcQxOZ0wddA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/23
193.201.72.0/23
Signature Algorithm: sha256WithRSAEncryption
50:78:22:92:dc:2a:9d:29:0f:11:df:95:00:f6:b5:ec:b2:ab:
26:02:f6:55:b3:af:c9:e3:f8:02:d5:7b:91:77:9c:d3:29:7b:
af:f8:78:e5:e4:33:6e:f9:e3:45:1c:aa:b3:c9:a4:e9:64:e4:
89:a9:1b:a4:85:75:e5:3d:4a:94:2c:3e:0a:85:78:80:99:5f:
f2:60:fb:47:a0:4f:df:e8:41:96:13:be:c1:e5:7b:86:ae:e7:
59:5d:6d:ea:de:17:35:8d:23:5d:db:4a:94:a4:dd:13:09:f1:
34:dd:ee:ef:f2:70:cf:4f:c4:e6:ac:15:c1:90:ba:ec:50:98:
25:13:fc:36:7e:7d:ba:7d:da:65:c1:26:1b:bb:5e:59:02:71:
77:7c:86:fa:e4:16:a3:e0:b6:fc:b6:fb:5a:a5:1f:02:1b:3c:
a4:70:a9:0d:40:6c:bf:4c:13:8d:1a:7f:7c:79:71:b7:e0:b9:
eb:24:e1:22:c9:ad:28:41:60:c0:04:c4:97:c0:26:4f:a7:14:
9b:21:97:cf:96:5b:f6:e0:57:90:29:e9:5c:e9:67:ba:c1:82:
c9:a9:8d:92:b6:30:8d:72:90:7f:f3:8c:8a:8f:5d:3d:46:51:
a0:f7:ff:61:1d:d7:99:cb:81:b1:51:a2:60:5a:41:88:4e:a3:
45:2d:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:31 2024 by rpki-client on console-fra.rpki-client.org