Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/rUmU8j1d8BlCxuczMUdU-cDavOY.roa
File: rUmU8j1d8BlCxuczMUdU-cDavOY.roa (raw, json)
Hash identifier: BbKJJajSbpjqnw1htBKPybE4+YGbEl4qqqPIawhCXuY=
Subject key identifier: AD:49:94:F2:3D:5D:F0:19:42:C6:E7:33:31:47:54:F9:C0:DA:BC:E6
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC013801FC281C5636F0A40AF998F0
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/rUmU8j1d8BlCxuczMUdU-cDavOY.roa
Signing time: Thu 15 Jun 2023 06:44:03 +0000
ROA not before: Thu 15 Jun 2023 06:44:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 193.109.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:01:38:01:fc:28:1c:56:36:f0:a4:0a:f9:98:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad4994f23d5df01942c6e733314754f9c0dabce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:82:0e:4c:02:12:03:2c:e3:21:16:fb:4d:
10:2b:4f:09:72:8a:d0:c1:ca:43:f3:63:07:29:b8:
99:f9:a1:dc:2a:fd:f5:ed:0b:16:41:5e:43:9f:78:
0a:7b:f4:6f:4d:72:b9:7d:f6:fe:b3:02:59:a5:cf:
b0:f3:13:b8:08:66:39:e3:91:0a:c9:6c:ca:59:77:
8e:52:eb:aa:bc:e8:1a:85:17:27:7c:6f:12:7a:a1:
b4:9f:ec:70:2e:0e:4c:91:7c:86:c8:6e:23:da:e1:
32:ee:16:40:2d:45:23:0f:c8:b2:74:61:3a:b6:34:
2f:fe:4a:64:f3:d6:88:6f:8f:4e:7b:a9:89:a6:ca:
63:31:52:18:a0:10:43:56:a4:e4:11:9c:5b:0a:b2:
38:8d:c9:0b:af:e1:ca:35:d3:33:61:57:39:5d:2e:
79:f3:3b:11:27:04:60:7b:27:6e:a4:94:26:d6:eb:
f9:63:ce:a3:9e:46:9f:75:80:19:95:d8:a7:f7:99:
c0:92:6a:c9:6a:43:0e:85:bb:5b:3e:98:be:2a:0b:
3d:dc:15:46:73:a8:79:f1:a5:21:d5:56:5c:bd:82:
f6:71:f6:6c:32:17:1a:69:66:79:f4:9c:a6:91:e2:
0e:c7:ac:d1:da:16:7f:7d:74:30:9f:60:e7:00:fc:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:94:F2:3D:5D:F0:19:42:C6:E7:33:31:47:54:F9:C0:DA:BC:E6
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/rUmU8j1d8BlCxuczMUdU-cDavOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b2:30:48:6b:16:05:ad:1e:7d:db:59:c0:a5:9d:2b:53:72:
ec:c2:70:c3:f5:94:3f:64:ff:b0:16:51:e6:b7:a0:dd:ac:b2:
88:9c:7f:ab:9c:ac:1e:6b:02:b5:9a:5c:53:da:07:da:62:62:
5f:75:fa:d8:22:72:ce:14:b5:e5:11:44:9f:04:2a:02:e1:be:
67:19:03:de:c3:ea:43:9d:ad:a2:1e:0d:bd:e5:54:48:fc:9f:
5a:33:da:f6:42:11:28:f7:5e:49:02:66:e7:ec:87:c0:8d:87:
2b:f2:17:e4:c5:0d:9b:6b:67:cd:79:bc:f6:b1:20:4d:fb:56:
75:09:60:29:58:71:3f:4a:cf:3f:5e:7b:00:e1:24:04:08:ab:
89:83:49:4c:93:40:9e:e4:3a:ff:ba:ea:64:ca:92:85:46:d1:
fa:f3:bd:31:5c:98:d6:e6:49:6f:4a:c0:82:38:14:84:08:4c:
88:d0:e1:aa:df:f4:4a:85:01:c8:27:12:d5:ea:86:0a:ee:fa:
dd:f9:e7:9f:01:c2:04:47:54:ce:97:80:41:72:14:d3:97:87:
6e:57:e7:69:6c:78:37:d1:1f:cd:ce:50:2d:f7:b4:f5:76:32:
c6:28:bd:dc:b5:a6:bd:ca:27:d8:3b:4a:52:e9:23:22:ea:83:
d7:b7:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 07:41:23 2023 by rpki-client on console-ams.rpki-client.org