Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/zAS8hJEvUxY2ak2VEXMe79TD4zU.roa
File: zAS8hJEvUxY2ak2VEXMe79TD4zU.roa (raw, json)
Hash identifier: QMySItqAd9mw1Vf3+4te8T/HMlvPUWimLGQa+XGjwIY=
Subject key identifier: CC:04:BC:84:91:2F:53:16:36:6A:4D:95:11:73:1E:EF:D4:C3:E3:35
Certificate issuer: /CN=a6d53dcc251871823f2006e62256f8e97687c5a5
Certificate serial: 01856BAEB032972679BC6D76C59167D0499D
Authority key identifier: A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/zAS8hJEvUxY2ak2VEXMe79TD4zU.roa
Signing time: Sun 01 Jan 2023 04:54:48 +0000
ROA not before: Sun 01 Jan 2023 04:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 188.93.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:b0:32:97:26:79:bc:6d:76:c5:91:67:d0:49:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6d53dcc251871823f2006e62256f8e97687c5a5
Validity
Not Before: Jan 1 04:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc04bc84912f5316366a4d9511731eefd4c3e335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:d2:3e:eb:a6:84:18:a9:82:04:70:ad:7d:
7d:14:d7:c0:eb:94:94:f9:58:9e:2b:6e:71:ac:53:
1c:75:f6:69:db:d8:e2:89:b3:55:ec:bd:bc:73:4e:
91:b5:08:e6:ab:0d:28:f2:de:df:d5:79:dc:33:07:
f6:e1:f9:5a:80:57:35:67:45:6b:1a:8b:3b:f6:69:
f4:86:8b:19:e2:6c:38:ed:ff:2a:25:70:a1:fb:88:
5b:48:94:ed:a8:b7:bd:77:0d:3f:f7:bc:4f:5a:5f:
9e:6c:ba:4c:23:d2:f8:33:ed:21:fc:3e:64:17:f8:
8d:33:a8:c3:9a:95:32:80:3f:08:3c:05:0b:28:2f:
5c:5f:41:ba:3f:bb:04:59:b9:70:a1:94:80:b9:03:
58:0e:bd:36:ec:13:71:12:bd:09:61:d9:21:74:ec:
f2:6f:3b:39:3e:9d:e3:c5:10:cd:2e:bf:e6:62:6f:
2f:97:37:b9:a8:d7:2f:e5:67:7d:9d:f7:9c:cf:a1:
53:e4:89:52:00:dd:37:e0:2f:5f:88:86:d4:87:92:
3e:59:ce:0e:5c:51:03:e4:25:5d:a7:92:3d:ad:0e:
17:0b:3c:f8:48:df:67:bd:71:9b:7a:fc:c9:54:d9:
d6:f1:09:93:c0:b1:43:ef:c0:be:63:7d:06:61:44:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:04:BC:84:91:2F:53:16:36:6A:4D:95:11:73:1E:EF:D4:C3:E3:35
X509v3 Authority Key Identifier:
keyid:A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/zAS8hJEvUxY2ak2VEXMe79TD4zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/ptU9zCUYcYI_IAbmIlb46XaHxaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.141.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f5:38:1c:1f:22:61:ac:8c:c0:f9:3f:26:33:54:7a:53:12:
5a:c8:68:0a:91:f1:a9:05:f1:3b:a1:5e:cb:4e:eb:5e:fb:f7:
dc:ce:f0:22:e0:b1:59:d7:23:48:dc:3a:05:1a:77:40:a6:d8:
60:1c:f0:d8:e1:2a:48:55:27:46:ed:6c:f5:3c:34:55:b6:20:
38:35:73:c6:83:da:95:37:e6:ee:34:10:92:a4:9d:67:0e:ec:
bd:91:c8:90:c9:af:e5:75:4b:f6:be:7c:a1:ee:ee:f2:84:83:
f7:e1:dc:8b:97:46:25:5d:3c:5b:ab:2f:aa:b9:66:6c:1b:28:
b9:4e:8f:45:25:9c:aa:c2:3a:96:ba:d9:28:00:80:d5:95:aa:
bc:33:be:9d:52:af:96:90:37:1a:ad:72:85:4e:6b:a7:63:6b:
04:5d:3d:b2:bd:3a:7b:be:a3:9e:4f:ba:d1:6f:8c:7d:68:19:
d7:19:de:a6:fa:cc:ca:13:c9:09:ce:23:4c:bc:29:68:93:1a:
a0:50:f4:77:4a:1b:51:e0:68:c4:d7:5f:8f:9c:d4:71:53:69:
b3:98:48:84:00:1b:c7:1e:65:81:68:eb:f4:58:c7:75:47:0d:
1b:f2:d2:94:2d:0e:4f:1a:8f:d7:32:f0:ca:ea:58:10:44:3e:
c4:f5:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:21 2024 by rpki-client on console-ams.rpki-client.org