Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/yiQwSnpUfWGQYfeLc88az02hDlk.roa
File: yiQwSnpUfWGQYfeLc88az02hDlk.roa (raw, json)
Hash identifier: 1Qjak8zrdZpQHk0QptgWA+FYbDppr+ah7CG+YII/cXw=
Subject key identifier: CA:24:30:4A:7A:54:7D:61:90:61:F7:8B:73:CF:1A:CF:4D:A1:0E:59
Certificate issuer: /CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Certificate serial: 03C4F87C
Authority key identifier: 4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/yiQwSnpUfWGQYfeLc88az02hDlk.roa
Signing time: Thu 09 Jun 2022 08:04:10 +0000
ROA not before: Thu 09 Jun 2022 08:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 193.30.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63240316 (0x3c4f87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Validity
Not Before: Jun 9 08:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca24304a7a547d619061f78b73cf1acf4da10e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:f3:94:fd:08:4b:2a:68:ec:d7:cb:34:cb:
51:54:bf:69:8b:bf:87:d7:4b:7b:48:68:08:38:5f:
3e:91:99:b3:83:b9:83:ad:0d:98:0d:64:cc:5e:1f:
9c:e7:a2:10:bd:65:a0:2b:1b:78:2c:37:a0:ed:d3:
b8:1e:12:3d:0a:ec:dc:4f:4d:a4:03:1f:ef:52:9b:
60:81:99:82:f0:e2:eb:4a:72:45:64:1b:b6:f6:1e:
a8:16:fa:63:46:7f:43:9b:18:32:e1:9d:08:c0:cc:
9d:c8:ab:b1:d8:0f:16:03:43:5d:75:54:e8:f9:e6:
80:a5:55:ef:47:9e:11:1e:aa:c9:83:90:cb:33:68:
1b:1f:fe:ee:a6:41:76:c5:4f:5c:df:58:90:fd:0c:
29:03:1a:90:99:fa:1a:53:d7:60:b3:2a:78:26:25:
b3:e3:49:54:ec:90:76:8d:eb:7b:20:c5:b6:c4:1d:
4b:e0:69:08:eb:d7:7e:1e:86:c7:84:cb:0d:62:92:
81:e6:5f:7f:53:d2:73:07:29:7a:b0:eb:4b:fb:3a:
9b:d3:a3:b3:20:98:9a:d6:72:45:1f:55:7f:16:71:
02:45:4d:99:2c:ce:1d:dc:99:ed:f4:44:cc:d1:86:
d9:a1:9f:17:49:e6:74:77:8b:d4:3a:ee:24:e1:80:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:30:4A:7A:54:7D:61:90:61:F7:8B:73:CF:1A:CF:4D:A1:0E:59
X509v3 Authority Key Identifier:
keyid:4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/yiQwSnpUfWGQYfeLc88az02hDlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.117.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b1:2e:50:c7:5f:b3:11:b5:a5:c8:fe:d0:ac:36:55:6a:93:
f6:c7:0f:4f:ee:13:8f:c9:90:71:dd:d1:c0:27:aa:5e:1a:c1:
42:4a:18:2c:30:e4:83:f0:32:3e:27:82:01:2a:1a:d5:26:f8:
e3:ee:74:24:43:60:67:72:2e:fb:2f:7c:a3:4a:0f:ff:50:d3:
1e:0f:d9:68:8a:bb:10:33:1d:4f:98:e5:c2:d8:e4:c5:f8:77:
5d:e7:dc:89:3f:48:68:db:97:af:8d:72:0d:c0:3a:0c:84:c1:
4b:c8:06:b1:d2:84:2d:19:ee:b7:86:44:4f:38:4b:93:66:06:
4f:8d:9a:a9:af:6a:a3:0e:b7:f1:d5:ad:8a:a9:19:dd:aa:84:
01:bf:5e:90:22:a1:f5:23:b1:c7:70:69:d3:12:05:22:92:f8:
d0:50:2b:99:9c:ee:41:60:ae:4b:b1:cf:aa:65:7c:26:14:23:
7e:28:2e:33:fb:a9:c9:44:71:dd:20:6a:b7:ee:0e:37:00:fb:
17:d7:c8:7d:f8:90:73:2e:f2:e2:91:a6:65:5c:cf:c7:7b:b7:
64:e1:9f:4c:9a:f6:b0:34:08:55:fa:58:7b:59:be:cb:f4:33:
53:43:8a:47:cf:25:77:f2:73:be:f3:b5:fb:e3:fc:28:54:7f:
d1:c3:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:14 2024 by rpki-client on console-ams.rpki-client.org