Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/3NH2uhwE86zuUU2uYce-Y7t575U.roa
File: 3NH2uhwE86zuUU2uYce-Y7t575U.roa (raw, json)
Hash identifier: YHY+nCYAwyjsLvZKfTvnVq0EoE0jICQ0x/fXHa07a2M=
Subject key identifier: DC:D1:F6:BA:1C:04:F3:AC:EE:51:4D:AE:61:C7:BE:63:BB:79:EF:95
Certificate issuer: /CN=8a3ac90f2840cedb657ac30cb86415f564ffcbbb
Certificate serial: 662111
Authority key identifier: 8A:3A:C9:0F:28:40:CE:DB:65:7A:C3:0C:B8:64:15:F5:64:FF:CB:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijrJDyhAzttlesMMuGQV9WT_y7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/3NH2uhwE86zuUU2uYce-Y7t575U.roa
Signing time: Sat 01 Jan 2022 03:02:18 +0000
ROA not before: Sat 01 Jan 2022 03:02:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.163.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6693137 (0x662111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3ac90f2840cedb657ac30cb86415f564ffcbbb
Validity
Not Before: Jan 1 03:02:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcd1f6ba1c04f3acee514dae61c7be63bb79ef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:c0:01:52:72:a3:cf:39:85:22:10:c8:d8:
29:f3:60:d5:29:7c:8c:54:ed:16:1c:c6:d4:93:f8:
23:68:95:23:ce:97:3c:54:4b:53:d6:1c:55:32:6f:
84:18:c5:3b:76:0a:a2:c1:a1:d8:a9:40:38:db:88:
d9:f2:17:97:b8:09:69:58:a0:33:7f:a9:9e:4d:bf:
83:58:a8:a7:c9:54:27:ab:54:54:c7:cf:b5:5d:cf:
22:cd:c7:89:5d:32:b5:c5:87:51:84:94:78:b4:a3:
f7:04:61:92:10:db:c3:b0:00:1c:b8:7f:c7:9e:ef:
9b:13:b9:fc:87:ad:60:8b:f0:d2:b5:f1:eb:4f:33:
f3:47:49:ce:e8:05:7e:91:26:37:46:2f:10:5e:f1:
d5:71:4c:4c:65:41:a9:6d:45:6f:5c:16:8a:93:c1:
ff:c2:c4:31:ca:1b:ce:98:29:2b:70:21:e9:68:ab:
db:88:02:b2:13:3a:5e:60:78:4e:3f:c9:6d:31:ed:
4d:47:61:00:a4:47:52:26:db:fa:bf:c1:98:bc:42:
cb:96:00:b0:63:43:ce:90:18:d5:fa:b0:a3:29:6f:
20:ac:26:95:1f:d0:27:c5:b1:d5:aa:aa:5a:38:9c:
16:3d:65:73:86:e1:c3:c4:ce:ff:71:59:41:b3:8b:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:F6:BA:1C:04:F3:AC:EE:51:4D:AE:61:C7:BE:63:BB:79:EF:95
X509v3 Authority Key Identifier:
keyid:8A:3A:C9:0F:28:40:CE:DB:65:7A:C3:0C:B8:64:15:F5:64:FF:CB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijrJDyhAzttlesMMuGQV9WT_y7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/3NH2uhwE86zuUU2uYce-Y7t575U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/ijrJDyhAzttlesMMuGQV9WT_y7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.20.0/24
Signature Algorithm: sha256WithRSAEncryption
59:98:cb:72:77:44:88:f9:31:c9:41:68:fb:9a:d9:4f:87:5c:
19:f0:e8:42:3e:af:79:26:58:cf:5c:60:39:f6:10:68:2b:32:
07:e2:2f:06:4d:b9:eb:8e:16:4a:a5:b7:8f:f9:6a:17:9d:86:
40:24:e7:cc:43:ba:cd:18:0d:f6:d9:18:f5:c2:94:1f:bc:46:
a0:0e:5f:6a:7a:94:fb:db:26:81:01:6c:f9:47:84:08:00:a9:
a7:08:77:25:b0:76:c2:8c:25:58:87:46:c6:62:3a:4c:cf:ec:
10:14:d5:a3:db:59:0f:6f:a4:04:2a:1f:8a:29:f2:00:67:16:
51:50:d8:26:f6:bc:94:a7:56:cd:9e:36:16:76:8c:cd:b3:c4:
29:b4:4b:31:74:09:64:89:56:c4:74:3f:5f:57:30:e9:1f:dd:
b3:f8:48:40:9b:29:31:87:1f:d4:b5:97:ad:c1:9c:7a:ba:f1:
94:a2:a9:77:b0:c2:21:a6:a8:b5:22:2a:77:f3:07:bf:a0:d0:
b2:27:b4:b9:7a:b7:c9:58:06:67:8e:54:41:ee:d3:28:e3:ac:
3b:7d:9a:ec:06:60:22:9e:b0:2a:ff:3b:e4:52:06:f3:79:b7:
9f:f9:8c:c2:b1:68:4a:03:6b:b4:e2:23:e0:51:16:92:d5:65:
9b:63:56:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:05 2024 by rpki-client on console-fra.rpki-client.org