Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/1pwrO4z_KXQ7a8ZF6DukwDPMKtc.roa
File: 1pwrO4z_KXQ7a8ZF6DukwDPMKtc.roa (raw, json)
Hash identifier: AcV22tlm/l/ghQUDKC5a5U5hx+WeGXGvbZWV9COTUfs=
Subject key identifier: D6:9C:2B:3B:8C:FF:29:74:3B:6B:C6:45:E8:3B:A4:C0:33:CC:2A:D7
Certificate issuer: /CN=3ea1d8b2fd27626f7b49664bf05bbde6d59bdad3
Certificate serial: 0185710C2931B438E218D644B5EBAC751990
Authority key identifier: 3E:A1:D8:B2:FD:27:62:6F:7B:49:66:4B:F0:5B:BD:E6:D5:9B:DA:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqHYsv0nYm97SWZL8Fu95tWb2tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/1pwrO4z_KXQ7a8ZF6DukwDPMKtc.roa
Signing time: Mon 02 Jan 2023 05:55:00 +0000
ROA not before: Mon 02 Jan 2023 05:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50268
IP address blocks: 193.104.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:29:31:b4:38:e2:18:d6:44:b5:eb:ac:75:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea1d8b2fd27626f7b49664bf05bbde6d59bdad3
Validity
Not Before: Jan 2 05:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d69c2b3b8cff29743b6bc645e83ba4c033cc2ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:62:a2:d9:d0:15:9a:cc:b7:25:3b:a8:7a:
8f:1a:30:a4:2c:38:e3:d8:db:69:f6:1b:c9:2c:67:
d9:92:5a:73:5b:0d:de:46:d7:0a:4b:bb:87:d5:7c:
29:3e:36:c5:b5:d3:88:c6:79:55:0e:eb:a4:5c:e2:
02:32:12:0a:ea:32:79:04:96:fd:9f:ce:f0:e6:22:
b2:2a:35:27:7f:97:23:3e:29:17:07:e3:aa:9f:68:
f8:4d:8c:fb:6b:c5:30:62:7e:c1:be:33:18:ee:df:
71:7a:d9:59:4a:1a:39:09:2e:40:56:24:ce:21:28:
69:15:fe:86:a3:0f:3b:cd:ee:3d:28:d2:ab:b4:b8:
65:f8:9f:c6:70:f6:e5:91:52:38:bf:ee:64:f5:78:
2d:84:01:c9:3d:b6:20:a0:b6:fe:93:43:e2:1e:e0:
92:7f:17:ae:6a:bb:ea:00:32:a6:bb:b3:af:5f:8d:
0d:62:e0:b0:1a:f2:e6:d9:2f:a6:d6:f2:23:5d:7f:
c6:54:cf:43:a7:b8:7e:22:bf:ce:06:c9:5a:4a:dd:
c9:3d:c4:32:89:3f:39:f9:01:eb:20:e4:fb:90:61:
21:f2:01:99:d2:93:d1:96:09:6c:42:64:1b:9f:d0:
79:69:3b:1c:66:e4:98:11:49:46:82:f2:3c:5b:f8:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9C:2B:3B:8C:FF:29:74:3B:6B:C6:45:E8:3B:A4:C0:33:CC:2A:D7
X509v3 Authority Key Identifier:
keyid:3E:A1:D8:B2:FD:27:62:6F:7B:49:66:4B:F0:5B:BD:E6:D5:9B:DA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqHYsv0nYm97SWZL8Fu95tWb2tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/1pwrO4z_KXQ7a8ZF6DukwDPMKtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/PqHYsv0nYm97SWZL8Fu95tWb2tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.157.0/24
Signature Algorithm: sha256WithRSAEncryption
90:81:76:09:4a:dc:20:e8:09:60:53:fa:57:0b:33:bf:ee:8b:
83:54:f3:0a:47:92:9e:23:23:5f:99:16:d9:1a:34:e6:4b:73:
78:49:d6:24:87:d7:11:df:67:a8:08:bf:c8:17:a5:9d:b2:84:
41:bc:a2:0b:95:b8:0d:f8:df:c2:5f:ec:65:79:2d:ef:59:b7:
fd:ba:3a:39:c9:34:1e:64:f6:86:25:c4:b2:a9:8f:e4:fe:a7:
13:0e:d3:05:67:94:46:95:a3:65:4e:af:82:c6:64:e8:b1:7b:
de:d1:a2:7e:7c:83:e5:9c:49:58:22:11:73:18:d6:62:9f:8b:
d1:d2:02:9e:76:6a:6a:30:6f:14:de:a0:ad:bf:13:b6:fb:e5:
76:0e:97:59:8d:5d:aa:7b:ac:b9:f5:3e:e7:41:48:40:d7:c8:
c3:24:34:fa:ab:eb:3f:43:55:5e:cb:69:68:0b:69:00:97:be:
67:e2:b9:59:1d:d4:f9:3d:bf:b6:da:a7:9d:32:34:0c:c7:e6:
07:04:11:1e:5f:f1:14:96:52:c6:37:07:3c:d1:af:b0:c1:33:
2a:73:7d:3e:78:92:a8:13:77:7b:f0:6f:83:f5:e8:de:cc:71:
a8:15:fa:0b:4a:75:38:21:66:d6:31:3d:f9:f1:bd:34:8f:63:
40:e2:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:04 2024 by rpki-client on console-fra.rpki-client.org