Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/SAieZdDNoUvwhRYCOhWQTOcGMmQ.roa
File: SAieZdDNoUvwhRYCOhWQTOcGMmQ.roa (raw, json)
Hash identifier: Wfr2T44w+RroB12HLDedwnrHbh5nFSwO05Q0aLnthgw=
Subject key identifier: 48:08:9E:65:D0:CD:A1:4B:F0:85:16:02:3A:15:90:4C:E7:06:32:64
Certificate issuer: /CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Certificate serial: 018688224DA7A74532D8316A42927FA644A4
Authority key identifier: 4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/SAieZdDNoUvwhRYCOhWQTOcGMmQ.roa
Signing time: Sat 25 Feb 2023 10:33:14 +0000
ROA not before: Sat 25 Feb 2023 10:33:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 193.30.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:88:22:4d:a7:a7:45:32:d8:31:6a:42:92:7f:a6:44:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Validity
Not Before: Feb 25 10:33:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48089e65d0cda14bf08516023a15904ce7063264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:5a:e5:cf:50:83:af:7e:f9:b4:90:6a:47:
8d:7e:bb:7a:c7:c0:18:51:2b:ad:30:ff:06:f0:3d:
93:9b:cc:da:aa:47:04:7f:d0:0f:a3:2d:d1:a2:a5:
14:1b:c3:08:98:b3:1a:b6:4c:81:e2:34:b3:4c:b8:
8e:2c:1b:43:f7:6a:e2:13:9c:2d:64:84:33:bc:91:
f7:55:7b:29:f5:e3:24:6e:7c:fc:4a:e0:cf:45:a5:
5b:39:e4:47:e9:05:6f:fb:84:02:40:ca:8e:c8:8a:
d0:db:bd:ad:22:bc:2c:da:94:56:c2:b7:38:24:1f:
85:9c:bd:8b:7c:45:1d:be:ca:42:f7:cd:00:aa:2b:
9f:6d:d2:18:ef:a2:e8:b0:fc:87:6f:db:13:b2:c8:
cc:12:20:39:79:ef:da:0a:a2:c8:33:09:0b:77:98:
74:0e:ab:82:0b:ff:65:83:0f:77:88:ca:b9:e3:7b:
00:6b:44:95:03:65:7f:17:50:4a:94:b3:35:e9:40:
eb:65:75:c5:3b:02:7a:72:79:a8:bd:b5:5d:f2:0e:
36:a1:d7:7c:ec:77:27:3e:7f:ff:61:90:7f:a1:08:
0b:77:5c:36:23:48:6d:f7:0e:a9:bb:57:53:21:c9:
f2:ba:f6:4e:f0:98:8a:14:de:e1:63:d4:cb:27:5c:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:9E:65:D0:CD:A1:4B:F0:85:16:02:3A:15:90:4C:E7:06:32:64
X509v3 Authority Key Identifier:
keyid:4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/SAieZdDNoUvwhRYCOhWQTOcGMmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.117.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ea:dc:50:de:fb:17:09:da:72:07:18:95:06:b7:0d:6e:ca:
a3:34:54:83:03:6b:63:90:d9:e2:85:d1:6a:f2:78:1d:ab:f5:
bc:88:07:89:68:a5:6e:ad:e5:f4:39:f3:b3:5f:6f:0e:40:ef:
16:aa:fe:9c:32:6f:bb:40:95:d2:76:af:69:f2:61:b8:ba:6f:
3e:46:a5:06:95:03:cf:f0:ae:2b:4f:cd:97:44:1c:99:d5:21:
81:7f:df:98:f4:14:0a:40:16:2d:b5:ac:33:cd:8b:c3:95:4c:
cd:c8:eb:69:f1:fb:71:8e:6d:1c:e8:e3:e3:c4:70:42:c4:ba:
47:c6:58:c4:60:d2:07:dd:ee:9b:f8:b9:9e:95:bc:1a:82:36:
53:e7:63:1b:25:e9:ae:b4:a1:4d:44:55:24:b9:65:c9:ad:f0:
4f:cf:7d:e8:f5:55:68:9a:7a:95:bf:cf:76:3a:5c:d3:ff:fe:
ac:ec:a5:46:e5:9a:8f:15:65:36:6a:f9:e2:2b:c8:c0:ac:68:
b5:f3:7e:1c:71:07:91:66:7a:1c:15:b5:8d:75:5d:c5:87:ab:
9d:de:b8:4f:f8:12:78:78:ac:fc:4f:84:9a:3a:96:85:a0:03:
43:7f:70:66:18:89:2f:4c:a4:1c:a9:bf:d3:58:a1:5f:41:c5:
eb:71:1d:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaIIk2np0Uy2DFqQpJ/pkSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzNjMThmNDdlYTVlZGQ3MTM1ZGYyNDc4NjhlMTE3YzY4
MWM4N2YwHhcNMjMwMjI1MTAzMzE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODA4OWU2NWQwY2RhMTRiZjA4NTE2MDIzYTE1OTA0Y2U3MDYzMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkpa5c9Qg69++bSQakeNfrt6x8AY
USutMP8G8D2Tm8zaqkcEf9APoy3RoqUUG8MImLMatkyB4jSzTLiOLBtD92riE5wt
ZIQzvJH3VXsp9eMkbnz8SuDPRaVbOeRH6QVv+4QCQMqOyIrQ272tIrws2pRWwrc4
JB+FnL2LfEUdvspC980AqiufbdIY76LosPyHb9sTssjMEiA5ee/aCqLIMwkLd5h0
DquCC/9lgw93iMq543sAa0SVA2V/F1BKlLM16UDrZXXFOwJ6cnmovbVd8g42odd8
7HcnPn//YZB/oQgLd1w2I0ht9w6pu1dTIcnyuvZO8JiKFN7hY9TLJ1yaYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgInmXQzaFL8IUWAjoVkEznBjJkMB8GA1UdIwQY
MBaAFE3DwY9H6l7dcTXfJHho4RfGgch/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNQQmowZnFYdDF4TmQ4a2VHamhGOGFCeUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81YWVjMjUtMjE2ZC00M2E3LWFiZTEt
Mzg3OWUzMzgwMmU2LzEvU0FpZVpkRE5vVXZ3aFJZQ09oV1FUT2NHTW1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81YWVjMjUtMjE2ZC00M2E3LWFiZTEtMzg3OWUzMzgwMmU2
LzEvVGNQQmowZnFYdDF4TmQ4a2VHamhGOGFCeUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR51MA0G
CSqGSIb3DQEBCwUAA4IBAQBq6txQ3vsXCdpyBxiVBrcNbsqjNFSDA2tjkNnihdFq
8ngdq/W8iAeJaKVureX0OfOzX28OQO8Wqv6cMm+7QJXSdq9p8mG4um8+RqUGlQPP
8K4rT82XRByZ1SGBf9+Y9BQKQBYttawzzYvDlUzNyOtp8ftxjm0c6OPjxHBCxLpH
xljEYNIH3e6b+LmelbwagjZT52MbJemutKFNRFUkuWXJrfBPz33o9VVomnqVv892
OlzT//6s7KVG5ZqPFWU2avniK8jArGi1834ccQeRZnocFbWNdV3Fh6ud3rhP+BJ4
eKz8T4SaOpaFoANDf3BmGIkvTKQcqb/TWKFfQcXrcR1I
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org