Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/Ub4AO4zuOQgR82XY9LlL6WkqacU.roa
File: Ub4AO4zuOQgR82XY9LlL6WkqacU.roa (raw, json)
Hash identifier: qrdHY+QcGl68DXuJZ9NZJemTQ2lhy+/Xtj+CD1zIiHs=
Subject key identifier: 51:BE:00:3B:8C:EE:39:08:11:F3:65:D8:F4:B9:4B:E9:69:2A:69:C5
Certificate issuer: /CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Certificate serial: 018A46C6BE154A67024752934112FD87ED92
Authority key identifier: 2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/Ub4AO4zuOQgR82XY9LlL6WkqacU.roa
Signing time: Wed 30 Aug 2023 14:09:04 +0000
ROA not before: Wed 30 Aug 2023 14:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209178
IP address blocks: 193.200.102.0/23 maxlen: 24
193.201.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:c6:be:15:4a:67:02:47:52:93:41:12:fd:87:ed:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Validity
Not Before: Aug 30 14:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51be003b8cee390811f365d8f4b94be9692a69c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:1a:b3:ef:aa:80:cf:58:1c:c0:9e:7c:5c:
ab:f0:c3:61:14:68:41:b2:28:42:29:ee:33:79:7b:
e8:08:d2:ee:d7:12:af:64:fb:d9:fb:f9:04:58:ae:
a1:29:af:43:c7:b7:79:ab:af:7a:d7:12:d7:22:60:
c9:40:12:12:ae:a9:22:55:7a:c8:ba:36:24:01:c2:
c2:6a:ea:09:59:87:27:ae:df:6a:66:bf:3d:5a:9e:
dc:e0:6f:de:e0:a0:15:a4:18:cb:ea:dd:4a:ad:39:
13:72:02:24:0d:62:63:59:21:5b:21:8d:31:64:0b:
c2:4d:f4:3c:16:0f:e4:b6:56:e4:ba:c9:5f:1e:e0:
ff:ea:52:68:5f:6e:a1:82:a3:93:1a:27:45:42:e3:
97:f0:7e:69:9c:d2:14:56:6d:d9:78:8b:e5:6f:1f:
92:c3:a0:ec:48:cc:cd:f1:ec:5c:48:d0:b6:c2:15:
82:ca:4f:ff:06:45:f4:95:51:b8:17:8d:c3:bc:ac:
e3:c3:e0:e4:3c:d6:45:37:7a:a3:9a:37:cd:6c:f4:
20:52:53:2e:c6:a6:48:20:19:db:95:b0:dd:51:89:
e9:ab:5c:49:42:42:69:8b:b7:c2:d2:08:d2:5e:42:
cb:b5:40:bd:ab:52:c8:35:ca:ae:0b:f4:c7:6d:d0:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BE:00:3B:8C:EE:39:08:11:F3:65:D8:F4:B9:4B:E9:69:2A:69:C5
X509v3 Authority Key Identifier:
keyid:2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/Ub4AO4zuOQgR82XY9LlL6WkqacU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/23
193.201.72.0/23
Signature Algorithm: sha256WithRSAEncryption
26:10:06:87:4e:aa:85:94:83:17:67:65:1f:ba:ef:83:fc:c5:
b5:78:df:7a:da:0f:d2:c2:7d:0c:4c:71:67:07:13:73:cb:7b:
92:d3:24:5c:97:41:1a:ed:f1:bb:fc:1f:a4:9b:41:c4:e8:8a:
19:d4:9f:de:96:68:3d:37:a3:74:ac:0f:fb:4c:a8:80:b4:ad:
d2:85:bd:3f:23:09:5c:ee:42:e2:62:cf:87:45:f8:b0:9b:31:
72:f8:84:c2:54:a4:52:a3:c9:41:b3:7d:ff:70:a1:4f:b1:fe:
80:f0:b2:fe:e6:b6:4f:6c:56:ad:6b:24:d0:13:ae:02:cb:a6:
e5:2e:ee:43:2f:46:fe:a8:dc:fe:39:15:5e:bc:b1:f3:fb:f2:
dd:81:5c:5f:d3:e7:c3:75:7c:9b:0c:4b:da:bd:b4:bb:d3:a4:
25:39:b3:6a:74:20:4a:1a:96:0d:79:c6:75:1d:e1:68:13:22:
57:00:7e:23:4a:62:97:58:47:7f:34:9d:25:fc:a2:ce:78:1f:
f8:f8:50:5b:a2:5b:e5:11:f5:92:f6:b4:21:9e:34:d9:a3:bb:
34:b4:42:18:c4:b3:ce:7c:44:75:1b:12:f0:9b:fa:ec:dd:8e:
be:28:ed:2e:ae:3d:36:4c:b9:36:26:7c:48:d0:54:74:b9:59:
9c:22:12:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:31 2024 by rpki-client on console-fra.rpki-client.org