Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/_cG8oNWxh4h5iIZJIaVBtqqKOCY.roa
File: _cG8oNWxh4h5iIZJIaVBtqqKOCY.roa (raw, json)
Hash identifier: fVWzaWzGAFUBBlB7elctSdhvD6RVcBdy+kA3sKQytsY=
Subject key identifier: FD:C1:BC:A0:D5:B1:87:88:79:88:86:49:21:A5:41:B6:AA:8A:38:26
Certificate issuer: /CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Certificate serial: 01856E8B31767CFD22516744DE2E4FD00909
Authority key identifier: 4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/_cG8oNWxh4h5iIZJIaVBtqqKOCY.roa
Signing time: Sun 01 Jan 2023 18:14:53 +0000
ROA not before: Sun 01 Jan 2023 18:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 193.30.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:31:76:7c:fd:22:51:67:44:de:2e:4f:d0:09:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Validity
Not Before: Jan 1 18:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdc1bca0d5b187887988864921a541b6aa8a3826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:6e:16:d0:a7:83:2f:8c:07:a7:6d:8b:67:
35:9a:5b:06:13:11:3c:3c:f1:f1:e6:ee:2b:de:3b:
59:38:46:f9:f6:7c:b9:e8:9f:43:11:cd:d4:fd:39:
26:d8:46:9f:80:05:7b:7c:a0:04:0b:b2:f0:9b:9e:
3a:25:e2:93:b1:c3:59:16:2f:39:c1:4f:26:9b:ae:
7a:32:e1:e3:ef:a2:c6:f4:e3:ab:ab:6a:7e:dd:a2:
df:9e:75:a3:a4:31:99:b7:a6:8a:23:7f:51:05:90:
8a:b8:16:42:dc:43:bd:b7:8a:50:db:b6:75:2e:2b:
4d:61:12:cf:10:ac:e9:e5:62:02:96:7f:3c:a4:10:
99:12:da:3b:c8:7e:69:67:b1:e0:a9:bd:05:4c:e5:
43:94:3e:7a:96:8f:3c:1c:23:22:55:39:56:c1:c9:
6d:12:c4:8a:d4:16:7b:2b:f5:f6:eb:0d:26:f8:ce:
48:6c:bc:26:7f:2f:23:a0:0c:2e:02:60:1e:f7:37:
df:70:9c:97:34:b8:f0:44:c2:d9:e6:af:3b:6a:f5:
e6:6c:17:62:5d:4b:68:55:41:67:70:ed:a4:a5:cf:
1a:c3:a2:af:ba:b2:af:77:eb:8a:ef:50:17:30:d4:
de:39:3a:e9:7f:2c:2a:40:0c:56:70:b7:98:c5:73:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C1:BC:A0:D5:B1:87:88:79:88:86:49:21:A5:41:B6:AA:8A:38:26
X509v3 Authority Key Identifier:
keyid:4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/_cG8oNWxh4h5iIZJIaVBtqqKOCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.117.0/24
Signature Algorithm: sha256WithRSAEncryption
24:29:e0:95:15:4b:a7:0a:03:55:d4:0f:8a:7c:6b:76:e0:c1:
ed:71:36:49:01:cc:5e:04:f4:11:60:5a:0e:27:74:d6:7f:70:
bd:3d:93:c0:3d:2a:b9:56:a4:77:11:4e:61:9b:29:c6:b0:8c:
14:3a:b2:a1:74:dc:b5:da:e6:f8:22:48:f1:60:6f:8d:5c:9f:
82:3a:31:6a:ec:fd:53:42:76:64:83:f4:7e:4c:36:52:22:d1:
f5:12:25:90:71:e1:59:ab:2a:31:5f:da:c0:3b:80:1a:85:62:
f0:ce:11:9b:d5:6d:b6:6d:0a:17:e7:8f:98:7d:f3:ee:f8:27:
14:1f:cb:92:55:5a:e7:83:8e:dc:46:f9:96:a5:4b:2f:2d:27:
70:85:8d:68:9a:f5:ab:42:dd:51:11:9e:4d:79:3d:72:f8:c5:
d3:0b:8a:ab:26:35:2d:2d:71:3a:7f:38:aa:cf:40:2f:a9:37:
2f:0e:c0:69:3c:79:32:72:7b:e1:9c:0f:32:5d:09:d0:d2:f5:
3c:f1:89:cf:dc:cc:69:ae:0e:a2:b1:e1:f3:7e:02:54:51:8a:
0c:af:72:c3:27:99:cc:ef:89:4e:79:67:67:ed:c9:ef:60:1e:
31:5f:18:1e:4e:63:40:f3:2b:3f:c5:df:7e:51:d0:f7:06:96:
95:dc:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:49 2024 by rpki-client on console-fra.rpki-client.org