Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/aYsIKor3anhBVfZtSVhZREpWg7I.roa
File: aYsIKor3anhBVfZtSVhZREpWg7I.roa (raw, json)
Hash identifier: YPyELYqKfsmurrbqhTOr1XjIY57xkP8sn5n7URS0SJk=
Subject key identifier: 69:8B:08:2A:8A:F7:6A:78:41:55:F6:6D:49:58:59:44:4A:56:83:B2
Certificate issuer: /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial: 012502A3
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/aYsIKor3anhBVfZtSVhZREpWg7I.roa
Signing time: Sat 01 Jan 2022 08:03:11 +0000
ROA not before: Sat 01 Jan 2022 08:03:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49367
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19202723 (0x12502a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Validity
Not Before: Jan 1 08:03:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=698b082a8af76a784155f66d495859444a5683b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:61:74:f6:ff:53:d1:b3:35:45:80:b3:d0:
bc:eb:c9:9a:6d:2b:8e:59:49:99:b1:9b:7f:a5:50:
24:23:d9:55:51:d5:42:46:31:10:82:4c:5e:bf:32:
30:b3:26:c3:81:b1:73:a4:d4:a4:aa:51:21:33:ba:
57:c4:88:77:80:07:15:10:e5:46:92:5e:c1:0b:6f:
5a:a9:d0:61:cc:44:45:6f:25:35:58:ea:bb:59:55:
ca:16:3e:25:96:0a:c8:38:71:25:4d:da:3a:46:d9:
1d:97:2a:3b:7e:21:25:30:db:f3:6f:16:63:7e:cb:
14:fa:f7:68:dd:67:6e:e6:5f:4d:18:c1:eb:7b:34:
ee:23:8b:47:63:cb:ce:29:5b:c0:1b:1e:b6:51:85:
73:7c:db:4b:fd:7d:25:42:6e:a8:5f:83:e5:c6:a5:
0d:d5:71:02:28:a0:1c:4c:57:8f:78:12:69:27:27:
07:7c:45:a1:6a:8d:c3:39:b1:ea:84:e5:c1:c3:2b:
16:be:9e:4f:b2:50:9a:0c:e3:80:e1:21:a5:93:44:
04:3a:42:14:95:3c:06:29:a5:6f:a4:db:10:f8:45:
b3:c3:71:81:fc:78:80:8c:88:72:a3:9d:d2:af:e8:
38:3c:47:1b:f1:d3:e9:6b:ba:4d:a2:08:e7:45:a9:
40:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8B:08:2A:8A:F7:6A:78:41:55:F6:6D:49:58:59:44:4A:56:83:B2
X509v3 Authority Key Identifier:
keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/aYsIKor3anhBVfZtSVhZREpWg7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
06:61:6b:43:0a:e1:07:af:13:29:f6:ee:13:b9:f4:82:96:aa:
64:38:86:a5:1b:97:c1:52:3d:1d:41:88:cc:9a:f3:71:26:e6:
b3:21:01:9d:64:e8:8b:75:cc:93:ec:dc:6e:04:ba:8f:26:60:
da:e2:68:3a:39:35:0a:43:b3:85:5e:75:3a:67:92:d6:94:6c:
96:d8:97:b0:a6:27:d9:0b:db:24:c9:9a:01:60:a2:c7:f4:26:
32:36:96:87:25:18:f4:27:f3:33:86:5a:7d:27:6b:8c:ee:7e:
0d:95:6e:10:ba:53:2a:03:6e:ba:19:17:42:2b:b9:2f:ee:a3:
3b:f7:97:a7:9c:df:5a:a6:0d:0a:d7:6b:dc:36:1c:c6:37:8e:
5e:e2:8d:1a:92:cf:86:00:90:26:66:d4:68:5d:6a:39:54:f0:
56:da:84:1e:24:6f:52:a7:8f:2d:71:6b:39:2e:a2:d4:09:6a:
bf:07:4d:3b:d7:78:44:f4:e0:80:4b:6f:f9:a7:23:10:3d:08:
b6:dc:8e:75:90:7b:e8:7c:5e:e6:00:ce:4e:b6:26:dd:a5:49:
18:c9:74:f0:14:76:10:5a:7d:9d:a4:64:4e:03:20:4a:e1:51:
54:7b:04:00:06:1e:25:df:16:48:91:bc:70:68:8d:df:a7:4f:
d6:bc:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org