Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/bRhzyzsRF4n3fCfvo6CQv8mcpgk.roa
File: bRhzyzsRF4n3fCfvo6CQv8mcpgk.roa (raw, json)
Hash identifier: WyWzmi15oTKP3Dqq5EWrsHQsa0cMn6wDui1bO0qKzzk=
Subject key identifier: 6D:18:73:CB:3B:11:17:89:F7:7C:27:EF:A3:A0:90:BF:C9:9C:A6:09
Certificate issuer: /CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Certificate serial: 018A8D8F8EDF2615603592B377BEAD914A04
Authority key identifier: 2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/bRhzyzsRF4n3fCfvo6CQv8mcpgk.roa
Signing time: Wed 13 Sep 2023 08:01:50 +0000
ROA not before: Wed 13 Sep 2023 08:01:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209178
IP address blocks: 193.200.102.0/23 maxlen: 24
193.201.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:8f:8e:df:26:15:60:35:92:b3:77:be:ad:91:4a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Validity
Not Before: Sep 13 08:01:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d1873cb3b111789f77c27efa3a090bfc99ca609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:07:e9:96:08:3e:d6:0b:a2:fe:a5:5d:f3:
00:0d:0d:a9:cf:68:7b:e2:ee:86:42:7d:20:ce:76:
4e:86:e0:13:64:2c:ef:83:92:4e:7b:de:4c:c1:28:
0c:af:4c:ca:5c:8a:ba:e5:15:84:a5:12:d4:a8:bd:
b0:70:24:d9:eb:ca:fc:21:fb:9f:11:cc:46:7c:6a:
f8:09:b8:0f:5a:10:2e:cb:ce:ce:6d:a2:b9:7a:ca:
e6:4d:6f:75:6e:0a:80:04:32:2f:05:01:8a:3a:61:
86:32:8c:ae:3c:d6:db:86:f7:13:29:8a:09:fd:b6:
99:85:61:6e:74:0d:50:d7:74:ea:0e:5b:09:eb:d7:
56:49:49:61:40:10:44:9c:0d:29:27:e3:8e:22:d6:
6e:35:6f:52:7f:9b:0e:85:27:fa:48:aa:5c:a8:0f:
b9:b3:e4:4e:cc:2d:40:3c:29:36:2e:97:20:24:ee:
da:76:8d:f1:99:73:3e:7c:27:4d:07:49:c1:79:91:
53:0a:91:d1:64:ca:78:72:b9:87:92:81:b4:39:0a:
46:1e:e9:f0:3a:f8:23:e0:64:f8:e2:7a:74:05:4a:
39:b2:43:35:f3:10:32:50:69:e7:32:99:1e:67:34:
c4:eb:85:78:78:80:a2:de:ae:17:d1:d7:b6:96:92:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:18:73:CB:3B:11:17:89:F7:7C:27:EF:A3:A0:90:BF:C9:9C:A6:09
X509v3 Authority Key Identifier:
keyid:2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/bRhzyzsRF4n3fCfvo6CQv8mcpgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/23
193.201.72.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:bd:4a:c5:82:f7:de:a4:a7:23:a3:15:2d:cd:9f:c3:81:64:
46:74:8a:e6:29:09:fe:7b:40:75:76:f1:97:ea:4a:d8:47:f0:
3d:96:66:0d:cd:14:f7:03:23:8e:94:86:ee:e9:5f:87:db:7a:
c2:0e:0d:86:26:6b:c3:6e:0a:56:de:02:aa:f0:18:1f:bb:98:
b5:a3:20:ce:0c:14:57:92:09:59:9e:e1:78:4d:70:5d:d9:0d:
50:00:e8:b4:c6:a8:1c:3a:a1:dc:d9:8b:3b:8c:86:c0:6f:67:
86:17:1a:e5:42:9f:cf:98:dd:69:d8:03:5c:be:57:6b:8a:a5:
4d:e3:b3:c2:aa:c6:39:00:d0:72:17:af:d9:21:18:2e:96:72:
55:94:e3:9a:ce:76:49:2f:19:74:76:8d:78:62:63:f5:b5:21:
16:6f:ee:07:9a:9d:b2:bd:c5:24:9f:40:72:45:98:22:06:c5:
84:48:c7:8a:33:a7:9e:89:32:55:b4:94:cc:4f:b9:a0:72:05:
d1:ad:53:1f:78:58:31:d6:54:a7:76:67:97:a8:fb:43:21:6f:
ed:0b:b2:c9:8d:4f:ed:f7:3e:03:f1:36:9c:74:c2:fd:6e:22:
eb:22:3a:4c:0c:db:ed:c3:51:ea:4d:17:75:f4:16:4a:65:57:
74:72:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:50 2024 by rpki-client on console-ams.rpki-client.org