Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/frsrd0rw3YEn7lJkjud32FlH9dQ.roa
File: frsrd0rw3YEn7lJkjud32FlH9dQ.roa (raw, json)
Hash identifier: 1JUeaf8zS237wxAtAIZQd4TlPEKbdDTyPa+CYRYPi78=
Subject key identifier: 7E:BB:2B:77:4A:F0:DD:81:27:EE:52:64:8E:E7:77:D8:59:47:F5:D4
Certificate issuer: /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial: 0186AB870F42542658F425C441A8E33CF1B9
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/frsrd0rw3YEn7lJkjud32FlH9dQ.roa
Signing time: Sat 04 Mar 2023 07:30:00 +0000
ROA not before: Sat 04 Mar 2023 07:30:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:87:0f:42:54:26:58:f4:25:c4:41:a8:e3:3c:f1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Validity
Not Before: Mar 4 07:30:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ebb2b774af0dd8127ee52648ee777d85947f5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8b:e6:80:76:5c:da:73:f4:c4:f6:81:80:f0:
19:2a:c3:c1:ec:58:4c:a4:4a:f9:1e:41:cc:d8:2a:
ba:a8:30:80:38:c3:5e:97:1a:c8:f8:1a:9f:59:13:
b2:8d:f6:d0:10:9f:42:e0:83:b6:b6:c1:f7:ff:33:
2d:04:fe:d8:19:2b:03:e7:60:ce:4b:c4:e6:1c:e0:
d1:fa:d1:b5:f9:0a:9a:e4:f2:29:6f:27:7e:b5:f7:
6b:d9:37:c0:cb:a3:a0:95:21:cd:c3:66:9d:3a:6e:
ff:0d:e7:f1:14:1e:6a:82:69:bd:c4:67:e1:17:d3:
54:00:9a:d6:20:56:9d:9e:2b:bd:4a:6d:66:40:a0:
a7:36:74:c9:6f:39:ce:39:1c:79:ea:6a:0a:c2:cf:
1c:ef:36:e0:70:0f:99:a0:68:4b:1d:ad:95:61:94:
0f:f7:41:d0:c8:a5:06:17:cd:6d:75:2b:ee:05:68:
f6:3a:64:2a:9f:24:3a:fc:66:3c:77:8c:91:f4:b9:
db:aa:c8:a4:a1:f4:47:aa:e4:65:f2:bb:73:fc:2b:
a0:40:2d:bb:81:1e:b9:56:f8:88:c5:5d:2a:38:98:
ab:81:6b:fe:cf:6b:4f:2b:05:28:f9:02:df:0b:68:
bc:da:44:52:da:4b:18:0f:5d:96:46:d7:12:58:fb:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:2B:77:4A:F0:DD:81:27:EE:52:64:8E:E7:77:D8:59:47:F5:D4
X509v3 Authority Key Identifier:
keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/frsrd0rw3YEn7lJkjud32FlH9dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:9f:d7:f9:d5:49:e9:20:c3:2e:b1:15:23:cb:45:35:55:b7:
fe:0a:28:78:0f:62:ee:68:22:b8:08:81:08:51:0f:ef:99:38:
1c:3f:48:9b:25:e9:b5:11:43:aa:5a:91:34:d3:ca:35:8c:63:
cf:be:15:ec:51:22:8e:1d:fb:65:7f:8b:6b:52:d5:20:d1:78:
23:e8:e5:ea:a6:f8:ab:69:51:c5:31:6c:4b:d3:a6:a4:05:d8:
b9:a9:b7:95:f6:b5:dd:4d:f0:c2:70:f7:54:3c:c0:ad:5e:9d:
ad:2a:9e:8f:cf:bd:4f:f0:fb:33:17:50:8e:b6:57:1e:df:7e:
82:89:ed:65:0d:9e:c7:22:77:e1:f1:17:7a:e3:0b:50:ad:17:
d2:ac:f9:7d:93:2b:63:87:a4:93:80:d6:4d:3c:bb:c3:2d:e8:
b7:2a:a7:63:d1:57:e5:18:cb:4f:d1:cc:c4:d0:e7:1d:f0:18:
e4:fe:89:0d:03:a1:d1:87:11:a0:87:49:f1:51:e8:33:1e:0a:
42:d0:64:b9:a1:32:bd:06:2c:e9:a4:97:5e:ec:b5:59:6d:8d:
57:54:00:08:41:b0:b7:99:14:16:84:dd:bf:52:f1:54:99:14:
be:d6:58:29:e3:a0:94:7d:ab:2a:2d:96:03:12:ce:6a:88:bd:
d9:bb:86:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org