Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/xLzivp4jigHbaZfVjFzr9jZuM8M.roa
File: xLzivp4jigHbaZfVjFzr9jZuM8M.roa (raw, json)
Hash identifier: /gwF5guoWFI6z2UHHdg6lCko05M0CS5LCIWG1RHBep0=
Subject key identifier: C4:BC:E2:BE:9E:23:8A:01:DB:69:97:D5:8C:5C:EB:F6:36:6E:33:C3
Certificate issuer: /CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Certificate serial: 01856E8B30E6B7FF65F37CA0F1C0E1E1B3DD
Authority key identifier: 4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/xLzivp4jigHbaZfVjFzr9jZuM8M.roa
Signing time: Sun 01 Jan 2023 18:14:53 +0000
ROA not before: Sun 01 Jan 2023 18:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.30.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:30:e6:b7:ff:65:f3:7c:a0:f1:c0:e1:e1:b3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Validity
Not Before: Jan 1 18:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4bce2be9e238a01db6997d58c5cebf6366e33c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:a1:b3:44:92:b3:52:2a:9e:35:31:b1:57:
6f:a4:7e:7a:30:5c:89:d5:41:bf:f1:70:0e:9a:36:
90:95:a9:d1:43:24:61:dc:32:b0:28:71:60:eb:ff:
21:04:c1:c2:98:ef:82:b6:a2:85:17:80:df:4f:a1:
99:e8:c2:79:a0:2d:eb:4c:b4:be:3d:8b:eb:ac:3e:
90:f0:f6:b9:af:e1:2e:ce:e9:a1:87:18:83:fe:e4:
d7:22:df:ce:ff:fe:7a:8c:82:db:4d:48:aa:5b:f5:
75:54:89:49:f9:c4:c1:42:53:4b:93:25:ce:63:e1:
e4:d2:4c:3c:9a:01:65:8d:95:59:78:8d:73:47:7c:
73:b5:5b:d2:9d:a4:8e:dd:34:3c:49:9e:10:4a:29:
c6:4d:14:13:7b:a2:fc:0e:18:04:91:e2:5f:e4:8c:
09:c3:44:56:6b:9e:9a:63:14:55:02:de:7e:24:c9:
b1:44:0a:12:e9:92:45:d0:79:79:2e:d1:dd:e0:ac:
e5:39:c5:db:a1:f5:e9:01:8c:66:c0:51:82:bd:c9:
e5:e4:f2:7c:ff:03:df:1e:72:e5:3f:4f:d3:53:3a:
b9:90:3c:80:8c:7e:d9:e2:19:cf:85:85:0c:02:a3:
6b:e8:81:ae:90:fe:1c:5a:33:e3:e8:f8:b3:97:f2:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BC:E2:BE:9E:23:8A:01:DB:69:97:D5:8C:5C:EB:F6:36:6E:33:C3
X509v3 Authority Key Identifier:
keyid:4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/xLzivp4jigHbaZfVjFzr9jZuM8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.117.0/24
Signature Algorithm: sha256WithRSAEncryption
29:62:d0:fb:c7:21:3f:24:8d:9f:04:2c:0c:c3:ac:88:92:d9:
ae:93:99:a3:78:94:a4:18:24:9d:12:bd:66:a4:3c:28:26:d5:
e6:e4:fb:21:e3:d7:cb:5f:5c:4b:83:34:7c:cc:21:44:20:1d:
f3:3d:eb:7e:90:a7:bb:e2:3d:5f:e3:8a:6b:d0:8c:85:2f:b6:
1f:5e:d6:09:9a:f2:f0:ca:40:37:63:ee:91:07:ca:2d:01:ef:
e5:6f:13:8a:bd:8f:39:ed:24:a1:5d:b6:a0:75:0f:11:2d:0c:
2c:e1:30:b7:e4:79:46:d9:e1:fe:b9:2d:aa:49:21:bd:47:08:
c0:cd:6d:76:59:28:43:65:6b:be:88:1b:86:f6:85:f3:42:02:
51:ef:2f:da:37:3d:ce:62:1f:8f:37:e5:c6:23:26:6c:75:4b:
c5:c6:3a:d2:4f:27:a7:ab:dd:9e:1a:d6:a7:e1:e1:df:be:cd:
49:ec:5c:ce:0e:40:ef:23:dd:31:0a:fa:15:4c:18:c4:94:e0:
1c:43:04:97:2e:2a:83:dc:5e:77:d4:f9:20:24:d2:66:4d:84:
3d:a9:de:c8:36:68:dd:38:e0:bb:06:dd:63:ab:bc:39:ee:70:
fd:5f:7d:0b:3b:fe:5e:9d:58:00:14:96:84:b5:81:ad:f8:78:
d9:27:37:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:14 2024 by rpki-client on console-ams.rpki-client.org