Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/1hVwnaca9Hdd8IR35puTnqynxJA.roa
File: 1hVwnaca9Hdd8IR35puTnqynxJA.roa (raw, json)
Hash identifier: MjwP+V5QxlR6yXa9IDsZtuLw1yozzOndlQnFwAaK3JI=
Subject key identifier: D6:15:70:9D:A7:1A:F4:77:5D:F0:84:77:E6:9B:93:9E:AC:A7:C4:90
Certificate issuer: /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial: 01860455F7376BEC6E2AE0C2B090E12A040B
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/1hVwnaca9Hdd8IR35puTnqynxJA.roa
Signing time: Mon 30 Jan 2023 20:19:48 +0000
ROA not before: Mon 30 Jan 2023 20:19:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:55:f7:37:6b:ec:6e:2a:e0:c2:b0:90:e1:2a:04:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Validity
Not Before: Jan 30 20:19:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d615709da71af4775df08477e69b939eaca7c490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:bd:35:fe:6c:8b:c1:fe:26:b8:49:5d:2e:
d7:bb:49:ed:ba:47:7a:c1:be:b3:28:e8:6b:60:9b:
71:60:a1:0c:6f:16:ea:1f:31:f3:cb:12:9e:a0:58:
97:04:bd:40:d7:ed:fe:df:12:05:44:cd:1c:df:d2:
97:b1:75:c8:1d:13:91:e0:57:30:b6:44:21:81:0f:
f5:e8:f5:45:e6:d4:cc:e2:71:2b:22:c9:f1:97:a1:
f4:9e:6d:62:f4:2e:b8:47:cb:4e:d7:28:9b:c0:8f:
7d:d3:cc:05:cf:4a:ba:ae:23:92:f4:e5:66:d9:b0:
01:15:61:a5:2e:70:11:3e:ac:e1:87:87:c1:4b:b8:
64:d8:8a:a8:82:e6:23:7e:16:55:af:65:7b:67:6d:
d0:9e:d4:b2:eb:a2:d4:21:4c:ae:31:e3:50:47:f4:
9b:1a:e9:cb:44:77:c9:db:b5:55:c6:bb:7a:d3:5d:
e3:f5:38:0a:96:ab:07:4f:48:37:8d:1c:a6:d0:53:
84:c9:67:8d:bd:63:96:cb:98:22:6c:a0:09:18:5c:
95:10:3f:75:49:5e:bf:7f:68:9b:55:31:6e:a4:86:
9c:b3:da:93:fc:3c:94:80:0b:ea:d5:ec:9a:54:96:
21:9a:a4:25:35:e5:4f:40:b4:a5:9b:d5:d0:df:9d:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:70:9D:A7:1A:F4:77:5D:F0:84:77:E6:9B:93:9E:AC:A7:C4:90
X509v3 Authority Key Identifier:
keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/1hVwnaca9Hdd8IR35puTnqynxJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:27:e6:2f:47:2b:cb:eb:69:a0:6c:39:5c:92:33:aa:83:ff:
38:5c:37:1a:34:60:83:30:b5:30:b7:02:1b:30:5a:c0:20:88:
09:c7:a1:b6:2e:a7:f8:e9:44:6f:56:d7:2d:a1:39:4b:07:9d:
5a:b6:ca:db:28:25:1b:63:22:1e:9f:db:04:b2:e9:bf:d2:76:
7e:aa:d4:17:ee:8c:42:b1:ba:36:93:a9:98:d8:ed:f9:7e:3d:
b7:56:17:ac:2e:cb:22:b0:41:bb:e6:1d:b8:21:b7:cd:06:9b:
cc:cd:3a:35:0f:32:0d:16:fe:d6:05:af:98:ad:f2:7d:fc:b8:
3c:04:1e:eb:91:34:20:91:6d:77:da:56:a7:ec:00:b7:9f:8f:
42:c0:92:88:e8:be:e1:e7:fe:89:e8:59:36:f3:2c:85:21:b0:
9f:b0:61:98:e5:4e:d4:01:21:4a:3b:d7:a3:20:a4:40:7f:a0:
51:7f:8a:ac:9b:5f:b3:88:ac:f6:86:a4:71:6f:3d:6a:21:41:
ab:c3:a5:a8:b4:62:43:ef:a6:6f:38:09:cf:95:94:8e:dc:23:
03:68:1c:69:1e:9f:b3:e8:f6:8f:e4:5c:b3:2c:e4:bc:d5:f9:
69:06:64:27:42:30:5a:66:a2:e6:d0:ed:6a:a1:4a:7d:c3:9d:
98:f3:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:15 2024 by rpki-client on console-ams.rpki-client.org