Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/Z_wVdpZ3FeFGX7Z-umZZmfymNgU.roa
File: Z_wVdpZ3FeFGX7Z-umZZmfymNgU.roa (raw, json)
Hash identifier: BIhka0NEFcKHbxYTttdXDXrum3AoCoHt712ike5LwdM=
Subject key identifier: 67:FC:15:76:96:77:15:E1:46:5F:B6:7E:BA:66:59:99:FC:A6:36:05
Certificate issuer: /CN=99aa47c59d6a545518085ac0ce79c302db3052e2
Certificate serial: 01856D81BB5E3D2370CBEAC949CD01B648DD
Authority key identifier: 99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mapHxZ1qVFUYCFrAznnDAtswUuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/Z_wVdpZ3FeFGX7Z-umZZmfymNgU.roa
Signing time: Sun 01 Jan 2023 13:24:56 +0000
ROA not before: Sun 01 Jan 2023 13:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62040
IP address blocks: 193.176.83.0/24 maxlen: 24
193.176.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:bb:5e:3d:23:70:cb:ea:c9:49:cd:01:b6:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aa47c59d6a545518085ac0ce79c302db3052e2
Validity
Not Before: Jan 1 13:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67fc1576967715e1465fb67eba665999fca63605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:89:4a:de:9c:6a:25:a9:52:68:79:37:0f:
cb:95:08:63:63:9a:d6:ab:b5:f7:3d:f9:93:02:78:
79:9b:ed:cc:b8:5e:c6:81:62:41:cb:3d:50:7a:a8:
f9:ca:6e:92:aa:bd:e1:7e:c2:b2:76:50:44:07:2d:
57:b6:54:54:71:a9:72:f2:05:30:97:f2:5a:22:cc:
28:47:95:79:95:b2:b4:09:3a:ba:d5:7a:89:76:52:
b3:89:19:da:b2:da:ee:e7:a1:00:91:f9:98:c7:c0:
ea:37:3c:7f:3f:02:c3:87:d1:57:53:a3:19:39:e2:
52:b3:e4:57:72:bc:93:24:e6:b7:3a:85:93:dc:2f:
b3:b0:53:a2:73:75:1a:07:76:1f:e5:7e:fb:6b:fe:
f9:35:fd:52:35:d3:c1:53:63:c3:29:db:e6:af:f5:
3e:b6:3b:c8:bb:52:53:3d:04:2d:5f:e6:21:22:36:
81:57:66:e2:d2:97:63:c2:0e:f5:2c:3e:18:69:b6:
fb:a1:34:ef:91:a1:19:95:7e:8a:c2:d7:4c:96:28:
69:33:b5:df:76:e0:30:8c:d2:3c:a0:10:43:89:d3:
1c:1e:c3:67:ce:f9:b7:41:ed:3e:d7:ea:1a:d9:fe:
ed:8e:77:83:8b:f5:e8:1d:09:49:c8:cc:cf:d5:5a:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:15:76:96:77:15:E1:46:5F:B6:7E:BA:66:59:99:FC:A6:36:05
X509v3 Authority Key Identifier:
keyid:99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mapHxZ1qVFUYCFrAznnDAtswUuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/Z_wVdpZ3FeFGX7Z-umZZmfymNgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.80.0/24
193.176.83.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7f:7c:86:b2:38:3c:99:d7:09:75:24:47:79:bd:a3:a9:e1:
7e:bd:6b:3f:8e:58:63:ec:bf:b9:36:64:fc:2e:a4:2f:17:c1:
8e:b8:0c:69:9d:7d:08:2f:65:aa:46:e0:27:e9:68:ce:ed:6e:
65:9a:91:de:a5:5e:aa:e7:8a:df:75:36:84:64:cd:e6:69:ec:
70:fa:6f:13:df:40:52:b1:45:d2:bd:b3:35:6a:c8:8b:92:fb:
59:f4:c2:01:40:9d:85:67:c6:61:19:57:84:a7:f3:f3:f3:b3:
0a:bf:a3:2c:1b:b5:b3:7e:40:3f:94:f2:ef:c0:34:77:fb:2d:
07:00:6f:0f:12:06:d6:48:13:db:6e:18:55:6e:21:ac:9d:d3:
8e:0e:cc:df:5b:ca:5e:ad:c6:dd:b9:ec:07:f3:bf:50:50:12:
5b:1d:86:47:29:4b:c2:28:60:52:d9:46:cf:6a:a5:4e:db:50:
98:29:1d:8d:1a:a1:c3:fa:fe:df:d3:3f:69:83:81:95:70:06:
f2:15:8a:5f:cc:4b:13:93:24:b2:61:16:91:10:36:75:50:9a:
5d:14:f3:4b:76:68:4d:08:ed:17:71:7e:44:22:6b:af:51:1e:
92:a0:19:c4:e8:ba:13:ef:af:a4:aa:fe:b3:95:32:6d:b4:4f:
14:e0:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:51 2024 by rpki-client on console-fra.rpki-client.org