Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/FH4_8RhV4X6E9AYAXGxkxvYOCZ4.roa
File: FH4_8RhV4X6E9AYAXGxkxvYOCZ4.roa (raw, json)
Hash identifier: 4RDQ47cdQY0RupAgoq/V271uAyHOW5YKr1/7fkoQ0IE=
Subject key identifier: 14:7E:3F:F1:18:55:E1:7E:84:F4:06:00:5C:6C:64:C6:F6:0E:09:9E
Certificate issuer: /CN=8a3ac90f2840cedb657ac30cb86415f564ffcbbb
Certificate serial: 01856C4A56D8A009DB98CA8988F42ECE31E1
Authority key identifier: 8A:3A:C9:0F:28:40:CE:DB:65:7A:C3:0C:B8:64:15:F5:64:FF:CB:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijrJDyhAzttlesMMuGQV9WT_y7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/FH4_8RhV4X6E9AYAXGxkxvYOCZ4.roa
Signing time: Sun 01 Jan 2023 07:44:49 +0000
ROA not before: Sun 01 Jan 2023 07:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 193.163.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:56:d8:a0:09:db:98:ca:89:88:f4:2e:ce:31:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3ac90f2840cedb657ac30cb86415f564ffcbbb
Validity
Not Before: Jan 1 07:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=147e3ff11855e17e84f406005c6c64c6f60e099e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:59:52:ac:2c:06:8c:07:d3:87:2c:99:4e:
7a:f8:c5:7b:4c:de:11:9b:b0:5d:86:5d:b7:9f:f4:
1c:34:b7:87:a0:b7:3f:d4:b7:83:1f:b6:7f:c9:c0:
24:ca:e1:b8:d6:43:0a:20:17:e6:f3:d5:8e:77:4b:
0e:dc:cd:1b:a0:01:70:65:f6:f0:af:89:62:13:a8:
3f:dd:0a:cc:f8:0d:61:1c:a3:94:c0:0f:7d:f3:2c:
59:72:f5:f4:03:33:7d:77:8d:77:a8:2a:4c:72:13:
5b:be:d1:8d:4f:29:58:ec:62:4c:67:81:50:e3:64:
26:7d:14:10:6a:cd:c5:40:2a:c7:12:00:5c:fd:4c:
81:4e:e1:0f:8b:c8:c4:7b:55:85:4d:29:a9:54:d2:
cd:d2:6f:40:2f:45:2d:8f:67:10:da:17:08:9a:08:
32:c9:f6:aa:72:ed:15:78:aa:e1:8a:1b:32:7d:9c:
85:1f:84:8c:2b:01:a8:e2:1b:f8:5a:a3:57:3f:b4:
30:a7:db:0e:2f:4d:7f:cf:4f:02:32:05:82:86:19:
f6:23:32:0c:a0:3f:3d:70:8b:ab:23:94:e9:c4:70:
3a:ac:ac:6f:3a:64:32:da:89:b6:21:3f:d0:0c:af:
c9:e6:29:94:f4:26:00:36:8b:55:f0:fa:95:4f:94:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7E:3F:F1:18:55:E1:7E:84:F4:06:00:5C:6C:64:C6:F6:0E:09:9E
X509v3 Authority Key Identifier:
keyid:8A:3A:C9:0F:28:40:CE:DB:65:7A:C3:0C:B8:64:15:F5:64:FF:CB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijrJDyhAzttlesMMuGQV9WT_y7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/FH4_8RhV4X6E9AYAXGxkxvYOCZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/ijrJDyhAzttlesMMuGQV9WT_y7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:86:61:ae:01:45:c4:f6:82:3a:f1:ed:42:d5:c8:6a:3f:41:
df:13:43:b0:aa:a3:a3:1e:af:9a:4e:de:a0:57:97:b2:8f:b1:
54:79:0a:41:48:1e:7c:89:18:ee:55:d9:fd:25:f4:f1:d5:94:
e3:98:56:42:1a:46:46:5e:2c:ce:e1:cb:ac:9c:3c:68:45:e0:
cb:f2:be:7a:7a:a2:9a:55:75:c0:47:34:53:44:d3:fb:a8:d1:
4d:24:ec:ca:35:ef:b9:74:34:79:96:80:c7:a9:94:c2:0d:d2:
2b:6a:12:ee:eb:2b:99:cb:f8:25:d3:f9:8d:9b:31:94:ba:41:
2f:2b:a9:4d:e7:5c:0e:c1:87:55:98:a0:85:7a:aa:f1:d3:09:
ee:f0:62:d8:ef:93:5e:82:09:ca:0d:97:87:58:79:48:77:bb:
be:f7:0f:20:61:f2:b7:7a:ec:87:1f:e6:32:1f:4c:fb:81:f8:
2e:8e:f4:f9:7c:47:05:d2:f0:83:9e:02:06:ef:48:e7:87:13:
36:97:6c:94:c1:ca:26:20:f2:1c:fa:04:d4:af:e8:76:b2:79:
cf:3a:a7:34:96:c4:d1:02:3e:ad:27:e4:7f:42:db:87:83:4b:
c0:3c:b0:e5:5d:dd:5b:2a:83:b5:60:b0:da:a4:76:33:ff:c5:
ae:b0:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:20 2024 by rpki-client on console-ams.rpki-client.org