Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/xW7bR-EnNSZcw5zo8riyLhs_9O0.roa
File: xW7bR-EnNSZcw5zo8riyLhs_9O0.roa (raw, json)
Hash identifier: zRYQFNHxFasR25F9nGPiYbpHloI5urkUI4RvbfgcApc=
Subject key identifier: C5:6E:DB:47:E1:27:35:26:5C:C3:9C:E8:F2:B8:B2:2E:1B:3F:F4:ED
Certificate issuer: /CN=e80a19bb3522df73fee1fe22a8955429931c9756
Certificate serial: 01856D53E26B346200259DA9FB186596D630
Authority key identifier: E8:0A:19:BB:35:22:DF:73:FE:E1:FE:22:A8:95:54:29:93:1C:97:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AoZuzUi33P-4f4iqJVUKZMcl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/xW7bR-EnNSZcw5zo8riyLhs_9O0.roa
Signing time: Sun 01 Jan 2023 12:34:52 +0000
ROA not before: Sun 01 Jan 2023 12:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 193.201.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:e2:6b:34:62:00:25:9d:a9:fb:18:65:96:d6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80a19bb3522df73fee1fe22a8955429931c9756
Validity
Not Before: Jan 1 12:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56edb47e12735265cc39ce8f2b8b22e1b3ff4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:a6:0c:61:08:da:55:eb:a7:2b:96:89:7a:
1e:0b:3c:ec:1c:f2:10:8d:f0:f3:6d:52:b5:7b:0e:
45:6e:1e:19:56:3e:e8:a1:55:1f:c4:42:d5:d5:4f:
d1:13:1d:4a:46:0d:5c:d5:50:15:3c:45:f0:e1:95:
5d:83:e0:1d:84:7a:8a:01:ec:41:e4:c3:7e:65:e7:
b0:b5:6c:21:20:83:91:91:88:d2:66:17:e2:af:47:
69:ef:97:36:e2:8a:b0:77:ab:37:94:e7:06:c2:08:
f9:49:05:01:67:6c:20:d0:4c:99:78:58:a6:88:ee:
fe:3c:e6:84:f1:b2:c0:e0:95:a1:7c:52:4d:f1:14:
eb:cf:1c:e7:2e:1c:1f:ac:41:aa:2d:d9:ec:b0:0a:
b6:c2:37:bb:10:1e:e9:47:64:52:bb:cf:10:e8:fd:
79:9f:01:91:91:49:21:42:40:06:8c:b7:27:06:14:
b9:b5:a5:0e:41:b3:6f:38:a5:09:af:b0:c0:83:5d:
7a:a5:7d:bb:82:c1:14:64:f4:c9:b4:28:69:67:6f:
76:5b:2e:c1:29:c0:c3:b2:f6:85:cc:65:63:b3:2e:
d0:dc:2c:f8:d4:19:6e:13:94:66:12:d9:38:06:0d:
e7:b5:f4:4e:c9:bd:66:9c:33:ac:e3:59:40:42:75:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6E:DB:47:E1:27:35:26:5C:C3:9C:E8:F2:B8:B2:2E:1B:3F:F4:ED
X509v3 Authority Key Identifier:
keyid:E8:0A:19:BB:35:22:DF:73:FE:E1:FE:22:A8:95:54:29:93:1C:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AoZuzUi33P-4f4iqJVUKZMcl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/xW7bR-EnNSZcw5zo8riyLhs_9O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7ac0f6-2af2-4a41-b370-9350413e038b/1/6AoZuzUi33P-4f4iqJVUKZMcl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a6:00:fc:78:64:d4:94:fa:99:ae:0c:42:af:a0:06:7e:b3:
68:71:98:3b:20:f7:cf:dd:c4:ec:05:c0:2e:47:8c:64:37:a7:
dd:b7:4f:10:be:6c:b2:95:d4:2d:58:67:82:d9:27:c6:f8:bc:
cd:f8:30:fa:b9:63:c1:ec:15:f5:e6:81:40:05:2c:61:63:72:
a4:a8:aa:46:86:4c:3e:71:ed:90:ec:12:60:75:19:b6:bf:13:
94:d2:f8:da:94:17:a6:88:e3:5b:33:9e:f4:a5:b0:27:c4:f3:
23:f1:c6:af:22:4e:ed:75:cf:4a:88:f2:56:59:82:c1:ce:33:
d0:76:95:15:5d:72:c9:6e:0a:69:e9:b7:1f:6f:80:27:0d:64:
ac:61:a0:59:4c:bc:d3:58:b5:ee:29:4c:1e:2d:d2:95:86:e6:
64:ca:7d:43:cb:f1:65:ce:18:69:3e:48:c5:24:09:2e:2b:81:
84:d7:e7:c5:ae:4d:6c:21:38:6f:9a:8b:b5:b9:df:02:1f:bb:
00:e9:7f:3b:21:0f:89:dd:6c:ea:06:16:88:01:d7:f3:f2:7c:
72:cb:e5:95:ce:58:de:8b:e5:e8:3e:b3:27:62:a4:9d:dc:05:
43:50:13:71:b5:25:6f:72:ac:59:b6:a0:95:de:65:f5:66:3c:
f6:a3:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:10 2024 by rpki-client on console-ams.rpki-client.org