Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/aFnJDSOOFwfJmAVT-wpz8IOqh20.roa
File: aFnJDSOOFwfJmAVT-wpz8IOqh20.roa (raw, json)
Hash identifier: ERH6JfHhrVp1LfTAdHR+pld2he+GwDoofd2tShsfqH4=
Subject key identifier: 68:59:C9:0D:23:8E:17:07:C9:98:05:53:FB:0A:73:F0:83:AA:87:6D
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F0228A2D9AB1F155E7517A0F3E8A23D
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/aFnJDSOOFwfJmAVT-wpz8IOqh20.roa
Signing time: Sun 01 Jan 2023 20:24:50 +0000
ROA not before: Sun 01 Jan 2023 20:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198335
IP address blocks: 213.198.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:28:a2:d9:ab:1f:15:5e:75:17:a0:f3:e8:a2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6859c90d238e1707c9980553fb0a73f083aa876d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:08:95:b0:96:fd:75:4f:85:b7:28:b5:ca:
55:7a:c0:6f:4d:43:86:86:5d:eb:53:59:a5:67:10:
23:91:b5:fb:47:52:69:d9:66:6a:5c:bc:a5:7e:c1:
49:c3:0d:03:4b:e1:d5:68:e0:3f:3e:7f:5f:c0:50:
be:01:94:86:91:42:07:5b:1d:e1:ae:a1:62:fe:92:
3f:99:85:88:05:6f:8b:91:b6:e8:9e:09:98:1a:07:
57:a9:f4:fd:da:f0:4c:2f:ea:6f:7f:14:e8:b4:cd:
de:d1:d3:d0:04:32:6a:cc:5c:f4:1e:d7:64:d9:76:
3c:28:a5:3a:e4:6d:1d:f7:4b:02:aa:8c:c0:db:47:
8f:d0:1b:86:9d:86:ee:16:9b:67:ec:e9:51:45:82:
98:09:7a:2f:1d:35:47:16:af:ee:a4:a8:ff:ac:5b:
c0:09:6b:c2:c3:fe:e7:9b:8c:80:88:c7:09:61:be:
0c:43:09:08:f2:82:bd:ee:c8:6c:08:43:72:9d:0b:
ff:e6:7e:44:78:26:fb:0e:37:4c:28:32:70:30:5e:
e4:bd:18:46:f4:45:7d:9d:0b:2b:9a:ff:da:2e:b3:
5d:a5:f3:03:e2:dd:7d:b9:18:e7:a6:9b:1c:9b:e1:
b8:a6:f2:9d:22:45:48:1b:44:7d:0c:65:d4:04:59:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:C9:0D:23:8E:17:07:C9:98:05:53:FB:0A:73:F0:83:AA:87:6D
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/aFnJDSOOFwfJmAVT-wpz8IOqh20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.104.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a3:33:2e:6c:67:cc:51:3a:69:ae:e6:70:92:f4:36:da:d1:
64:5f:18:b7:9e:64:08:1d:ac:ee:d5:9d:b4:56:4f:d6:d8:68:
d6:1a:92:eb:52:ab:3a:e4:00:ba:05:9b:63:53:de:f0:24:bf:
2a:75:78:63:bf:0d:a8:2c:f5:9a:86:68:3a:79:0b:b5:9a:3c:
60:c6:09:b0:6e:b7:aa:93:f8:a9:f0:bb:c3:0c:fc:ad:b7:9c:
c5:17:1b:60:94:6a:9f:24:59:cf:7d:ef:c5:5b:09:05:66:4f:
7b:e0:c0:8b:15:38:14:b7:38:8e:9c:16:b6:d6:32:c0:f1:13:
13:b0:e0:be:66:07:52:90:85:84:32:14:2d:6e:55:42:af:67:
92:3a:2b:8b:1f:cf:ee:c2:47:80:3d:4e:77:90:af:ab:f0:93:
d0:db:13:61:7e:c7:22:82:28:16:25:22:f5:f5:81:97:22:f5:
d7:76:3a:8c:47:61:32:ad:b9:bc:c4:83:45:1b:82:d6:41:6b:
58:7d:0d:dd:f0:40:8a:24:51:2e:e0:de:d6:09:46:01:1c:33:
4d:5e:d1:60:a5:b4:37:34:be:16:8a:62:00:d5:d9:53:9e:02:
52:99:88:60:26:d0:aa:96:05:63:34:e1:a5:9c:78:b6:70:33:
29:c6:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org