Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/XKkrrZozSEGFAR9nNPdXFLsvMVw.roa
File: XKkrrZozSEGFAR9nNPdXFLsvMVw.roa (raw, json)
Hash identifier: zK3aU9kHfCvoW+APmT3Bk7e7JLtyNHvHZZbFh3nWr68=
Subject key identifier: 5C:A9:2B:AD:9A:33:48:41:85:01:1F:67:34:F7:57:14:BB:2F:31:5C
Certificate issuer: /CN=99aa47c59d6a545518085ac0ce79c302db3052e2
Certificate serial: 01856D81BBF2B5833BB0761BAE9F815B2EBD
Authority key identifier: 99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mapHxZ1qVFUYCFrAznnDAtswUuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/XKkrrZozSEGFAR9nNPdXFLsvMVw.roa
Signing time: Sun 01 Jan 2023 13:24:56 +0000
ROA not before: Sun 01 Jan 2023 13:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213334
IP address blocks: 193.176.82.0/24 maxlen: 24
193.176.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:bb:f2:b5:83:3b:b0:76:1b:ae:9f:81:5b:2e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aa47c59d6a545518085ac0ce79c302db3052e2
Validity
Not Before: Jan 1 13:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ca92bad9a33484185011f6734f75714bb2f315c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:8c:2c:fe:41:26:2a:a7:3b:53:aa:52:6e:
51:a1:7e:8a:ec:a3:ec:8f:fb:b4:0f:71:0f:ca:99:
89:37:1a:12:4b:be:a1:95:ef:60:a5:7f:77:ad:98:
c3:62:8d:44:24:60:15:dc:66:e4:62:45:54:60:85:
97:d6:44:ce:dc:3f:a9:09:50:12:7c:00:a2:c1:9b:
dc:bb:c6:a8:66:1a:7c:95:7f:bc:28:bf:6e:52:09:
7c:3e:7d:13:54:6d:ad:7d:40:64:54:1a:18:3e:cc:
61:99:c0:d5:ae:c2:49:8d:a0:e4:2e:11:38:ca:f3:
ef:b0:ae:44:8b:1f:73:35:ce:f7:f3:44:13:25:75:
67:72:b8:0a:27:f6:f0:62:e0:60:04:0b:e3:12:dc:
00:45:65:98:c1:19:e7:c4:44:a1:a4:c2:c8:0f:2f:
3e:16:f2:d8:d0:ed:d7:03:bf:96:50:29:4c:76:9f:
46:b4:a4:79:60:5f:11:7f:53:e0:c2:8f:f2:19:bb:
15:6c:13:b9:21:42:1c:53:73:5f:94:c6:cb:bc:92:
67:60:b4:d4:03:5f:ff:97:c9:7b:e7:56:80:a2:7c:
11:63:5c:f4:bd:7d:e7:1e:e7:36:ab:f5:c5:c5:71:
6a:46:05:fe:be:ac:68:75:2d:4a:a4:33:c3:33:0b:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A9:2B:AD:9A:33:48:41:85:01:1F:67:34:F7:57:14:BB:2F:31:5C
X509v3 Authority Key Identifier:
keyid:99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mapHxZ1qVFUYCFrAznnDAtswUuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/XKkrrZozSEGFAR9nNPdXFLsvMVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.81.0-193.176.82.255
Signature Algorithm: sha256WithRSAEncryption
4a:a6:49:2d:09:86:8a:ea:50:02:ca:72:99:88:e5:f3:de:1a:
6c:8d:c6:fd:e4:34:e8:d0:a5:9e:92:fe:e6:32:ae:9b:35:0b:
2f:80:bd:c5:9d:b5:0d:ce:95:67:f1:84:5a:c4:e5:20:24:7c:
3d:98:ae:44:bd:7c:a4:b9:58:a5:d3:c5:c3:35:2b:a9:a6:88:
ce:49:b7:d3:db:39:b3:48:d9:59:cb:c7:d2:76:6d:2a:0f:71:
85:b0:96:f4:2d:b3:57:8b:f0:4f:dd:87:af:d1:9f:70:0f:88:
88:94:13:9d:24:a1:48:3e:54:43:1a:70:9d:a1:fb:df:7b:dd:
d7:1c:a1:68:90:a8:33:99:52:58:c7:8e:66:0b:25:1a:87:c5:
54:63:62:db:ad:5b:fa:2e:24:84:ec:2c:64:3d:5f:36:e4:82:
7e:fd:8a:57:80:21:f5:32:86:bf:77:b4:f4:11:29:c3:bf:e6:
1f:f8:d0:39:2e:73:0a:95:8e:e0:58:76:a2:b7:8b:3a:ce:78:
66:5b:71:7a:8c:97:c1:ff:17:a0:f2:23:11:0f:db:a9:21:ab:
51:57:1b:fa:f7:1e:be:26:31:88:f9:9d:c1:f9:9c:ae:29:58:
44:69:b8:5f:ad:ae:55:51:37:7c:9c:3d:0a:29:ca:12:4b:1f:
e7:ff:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:51 2024 by rpki-client on console-fra.rpki-client.org