Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/oZNkoVA1m8pJHem5C8P9z2wuyys.roa
File: oZNkoVA1m8pJHem5C8P9z2wuyys.roa (raw, json)
Hash identifier: 90KgKy8c9BoROCAd2+hUSmFlj1SDIIT1SAaG+kI3NRE=
Subject key identifier: A1:93:64:A1:50:35:9B:CA:49:1D:E9:B9:0B:C3:FD:CF:6C:2E:CB:2B
Certificate issuer: /CN=d24c656cd92aef05969d5af6096be0df98acc370
Certificate serial: 01856B936C8D74793609CDAD9E2DA2130CD9
Authority key identifier: D2:4C:65:6C:D9:2A:EF:05:96:9D:5A:F6:09:6B:E0:DF:98:AC:C3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kxlbNkq7wWWnVr2CWvg35isw3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/oZNkoVA1m8pJHem5C8P9z2wuyys.roa
Signing time: Sun 01 Jan 2023 04:25:01 +0000
ROA not before: Sun 01 Jan 2023 04:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 193.3.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:6c:8d:74:79:36:09:cd:ad:9e:2d:a2:13:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24c656cd92aef05969d5af6096be0df98acc370
Validity
Not Before: Jan 1 04:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a19364a150359bca491de9b90bc3fdcf6c2ecb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:52:2f:7b:4c:30:24:20:8d:02:47:67:3a:
13:95:84:b5:a0:47:af:fd:40:c0:39:17:da:22:57:
35:18:b9:6d:5b:42:4b:5a:0b:34:70:47:1e:df:fd:
40:35:a3:ab:7e:46:89:de:57:c7:29:37:85:6e:2c:
4a:e0:88:7e:f7:a0:8b:94:f3:7f:29:5d:ea:ee:e3:
61:7b:14:f4:ed:9d:14:88:0e:2d:b7:a6:50:b8:1f:
20:f7:95:b5:f2:1c:8b:9c:df:81:27:cc:1f:f4:05:
10:11:1e:4b:88:ef:02:3f:db:00:70:dc:37:a2:2b:
60:b3:e5:5b:52:4e:d2:27:23:c9:48:99:cd:95:a7:
ae:03:76:d4:13:85:c3:1c:93:98:9d:b9:ba:fb:b6:
70:b0:04:13:f4:56:33:9a:e2:61:40:17:1d:a0:11:
6e:10:35:86:3c:8a:41:f9:bf:00:60:2b:c9:06:6a:
b6:fa:bb:12:3d:a3:04:e6:96:7c:08:75:25:ba:4c:
2e:c1:31:cd:1d:94:e7:dd:a7:0e:69:08:cf:c9:fa:
d4:94:b0:1d:72:f6:65:5f:b7:06:a0:f4:ed:06:b9:
9a:30:c3:46:12:ce:be:01:ce:c9:aa:05:50:f3:d5:
d9:ea:26:fb:b7:e7:ff:19:72:ef:d5:62:0d:d8:ed:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:93:64:A1:50:35:9B:CA:49:1D:E9:B9:0B:C3:FD:CF:6C:2E:CB:2B
X509v3 Authority Key Identifier:
keyid:D2:4C:65:6C:D9:2A:EF:05:96:9D:5A:F6:09:6B:E0:DF:98:AC:C3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kxlbNkq7wWWnVr2CWvg35isw3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/oZNkoVA1m8pJHem5C8P9z2wuyys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/0kxlbNkq7wWWnVr2CWvg35isw3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8d:9b:4f:90:38:7b:74:b1:2a:93:96:cb:12:8b:5a:c7:aa:
a1:49:cc:51:ba:25:b2:4b:7c:63:63:74:2a:26:cb:9b:b4:3c:
04:a4:51:ad:ec:08:66:c0:b4:16:92:d4:98:6d:17:6b:50:84:
85:8b:58:f3:7a:e0:50:94:cf:dd:99:25:74:b2:1e:d8:82:fc:
3b:6e:38:e5:8b:08:94:dd:75:8c:2e:1d:6b:e3:82:ac:a4:76:
92:4a:bc:72:c8:91:f1:c6:e5:b6:62:3d:3b:f3:aa:16:b2:de:
55:7b:ea:c8:1d:e7:63:d9:ec:fa:8d:98:15:31:85:8f:af:33:
7d:14:44:dc:b4:fd:fe:03:4d:17:f5:6d:53:05:42:51:b7:00:
9f:2d:b3:76:8f:24:81:de:c0:9a:1d:5b:b5:73:f3:1f:f5:03:
54:00:b4:c2:2d:11:06:c3:fa:a4:c8:7b:c2:a4:7f:d9:5b:fa:
04:03:aa:05:84:57:28:4f:a0:26:69:f8:42:e2:01:66:21:5e:
d1:37:2e:4d:a8:a5:fc:6a:46:c3:d9:05:7c:0c:b4:c9:52:89:
15:e7:a1:1c:de:05:b0:84:b9:df:44:82:4c:70:84:a7:5e:41:
57:9b:09:74:a3:64:26:15:5b:5f:a8:16:12:6f:6a:b7:6c:73:
5a:dd:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 13:38:12 2023 by rpki-client on console-ams.rpki-client.org