Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/UihdNYIbT5K3hg6LQFahka_yLBc.roa
File: UihdNYIbT5K3hg6LQFahka_yLBc.roa (raw, json)
Hash identifier: ZSJrNDVWgfKGB60qdEHnPTlXOuVaqst9KCVKl7oKZ4Q=
Subject key identifier: 52:28:5D:35:82:1B:4F:92:B7:86:0E:8B:40:56:A1:91:AF:F2:2C:17
Certificate issuer: /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial: 018B684072530A55E22FB204363DF217B4DC
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/UihdNYIbT5K3hg6LQFahka_yLBc.roa
Signing time: Wed 25 Oct 2023 19:12:15 +0000
ROA not before: Wed 25 Oct 2023 19:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19762
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:40:72:53:0a:55:e2:2f:b2:04:36:3d:f2:17:b4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
Validity
Not Before: Oct 25 19:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52285d35821b4f92b7860e8b4056a191aff22c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:ed:ef:b7:2a:0a:68:47:bb:9c:db:49:b4:
f0:14:44:83:d3:aa:5f:ef:34:f5:6e:0c:92:d1:10:
3a:0c:74:85:29:0d:90:22:63:5b:de:b3:ed:52:de:
b9:6f:b0:30:5f:6c:d4:31:be:89:fa:a0:12:da:9b:
0b:7a:05:e7:2b:25:04:66:2a:ed:7c:d9:b1:ae:2b:
18:e1:83:5d:93:19:37:00:f1:30:04:18:a2:b0:bd:
b9:53:53:40:04:0c:1f:4a:e9:80:70:13:63:de:9e:
9d:00:07:3e:5a:13:09:c5:be:88:03:4c:b5:0b:7b:
2e:aa:71:05:8d:52:95:27:ad:1f:68:14:26:a6:9e:
7f:74:50:f6:ce:ab:bf:31:40:a8:27:f7:de:23:dc:
94:29:ad:cd:d5:21:b6:36:56:3e:04:e6:7b:a1:b5:
dd:8c:76:9a:e6:ba:a9:aa:a1:ff:cc:3e:e2:af:e1:
96:df:e7:bd:9e:0c:90:3a:d3:0a:45:a7:45:d2:d7:
6d:1e:26:e3:77:ec:b1:e7:71:13:dd:5b:d2:ec:ba:
b4:ec:18:41:2a:b7:08:d8:d4:4b:af:81:20:de:47:
fb:47:22:4b:aa:55:80:6e:8a:c6:64:64:53:75:94:
ec:2b:43:c2:f9:20:b4:b2:d3:72:36:cd:8b:48:a0:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:28:5D:35:82:1B:4F:92:B7:86:0E:8B:40:56:A1:91:AF:F2:2C:17
X509v3 Authority Key Identifier:
keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/UihdNYIbT5K3hg6LQFahka_yLBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
98:41:36:24:ba:8f:42:9e:aa:26:64:55:fb:e1:f5:3a:ee:f7:
da:e5:32:cd:78:28:18:53:cc:9c:35:d6:bd:8c:73:4f:ee:3c:
3a:b5:f2:76:18:7e:73:ba:f1:38:e7:65:20:24:05:a2:9a:3a:
4d:24:90:e4:22:97:7c:f7:ef:ee:b2:fa:6c:52:3b:66:d9:67:
55:b0:68:38:88:05:49:10:47:fd:59:af:eb:b9:e0:48:d5:85:
0b:52:d0:b5:70:34:d6:b6:16:31:54:5a:4f:ba:cf:1a:65:fd:
56:97:68:dd:13:43:39:74:21:4c:a5:95:ba:23:17:48:30:e9:
b1:86:9a:f9:e4:f9:da:e4:63:47:89:df:44:df:9f:5d:5a:e2:
2d:2d:60:0b:4c:7e:77:d6:0d:f5:17:4e:b8:13:4f:27:5e:a1:
45:fc:e1:ce:9f:d7:1f:26:bc:d9:ef:a6:4d:be:c6:d8:b8:3f:
71:7a:f0:41:0a:ab:97:c7:a1:a1:f9:e9:18:ed:75:83:7f:35:
c5:d5:94:06:96:13:61:bc:74:07:ef:55:98:4e:c2:a0:96:16:
37:56:c7:81:8a:b6:b5:c1:fc:c6:03:4f:f8:1c:8e:d8:23:5e:
11:70:3a:4a:72:55:af:c4:76:95:9e:ca:77:3e:be:5d:3a:35:
6b:2c:2b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 09:49:19 2023 by rpki-client on console-ams.rpki-client.org