Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/olqHyX3N1QgVkejpzGEAvNHJ2gg.roa
File: olqHyX3N1QgVkejpzGEAvNHJ2gg.roa (raw, json)
Hash identifier: uDO8R2JVmdcGDJ+Vuq8V6zexelM9SUMVhzM3YJch3R0=
Subject key identifier: A2:5A:87:C9:7D:CD:D5:08:15:91:E8:E9:CC:61:00:BC:D1:C9:DA:08
Certificate issuer: /CN=ff9f111bba32bc1439743df23e14ddd87101eb5d
Certificate serial: 01882086B0E4365D7C6588E449017F4A3120
Authority key identifier: FF:9F:11:1B:BA:32:BC:14:39:74:3D:F2:3E:14:DD:D8:71:01:EB:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_58RG7oyvBQ5dD3yPhTd2HEB610.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/olqHyX3N1QgVkejpzGEAvNHJ2gg.roa
Signing time: Mon 15 May 2023 17:47:57 +0000
ROA not before: Mon 15 May 2023 17:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.163.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b0:e4:36:5d:7c:65:88:e4:49:01:7f:4a:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9f111bba32bc1439743df23e14ddd87101eb5d
Validity
Not Before: May 15 17:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a25a87c97dcdd5081591e8e9cc6100bcd1c9da08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:21:10:b5:84:8e:b2:e6:5f:fb:9d:7f:20:
2c:ae:5b:25:f6:8d:a0:52:83:d6:43:c4:34:fa:09:
91:89:eb:af:05:87:89:2f:ac:9e:c0:dc:fc:b8:bf:
1f:7f:fa:c7:75:ab:5e:f2:2d:87:66:ca:f3:4d:c8:
e8:83:1d:49:e3:f1:4c:95:ab:f7:c6:6e:8a:49:0f:
90:68:8d:0c:5d:bc:66:e7:c8:f9:69:f7:8b:e5:92:
67:46:af:58:d1:20:75:ee:1f:b0:f4:8a:96:12:ff:
98:ef:67:4a:24:6b:3d:21:51:bc:1b:53:ac:59:24:
73:6f:c4:a6:a8:10:48:19:c0:50:c7:2a:07:a2:82:
3d:28:43:db:32:a0:e3:99:1a:6b:93:2a:ac:1b:99:
f8:c1:e5:d9:e3:e9:6f:5d:b5:b0:68:99:04:c7:e4:
59:33:14:c3:05:f6:28:85:26:59:58:45:11:55:3c:
f0:6d:f6:02:fe:6e:b1:82:d8:3c:25:8b:55:07:1b:
8b:a9:61:48:69:63:4f:64:e6:da:6f:54:e1:d3:84:
00:3b:4c:0d:e3:75:a6:0e:b2:78:3a:c8:e7:54:54:
a9:d1:30:33:b7:91:d5:2c:7b:5b:b5:67:f1:11:cd:
bc:bd:dc:bc:84:ba:37:03:93:3c:b1:d3:cd:fb:d7:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:87:C9:7D:CD:D5:08:15:91:E8:E9:CC:61:00:BC:D1:C9:DA:08
X509v3 Authority Key Identifier:
keyid:FF:9F:11:1B:BA:32:BC:14:39:74:3D:F2:3E:14:DD:D8:71:01:EB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_58RG7oyvBQ5dD3yPhTd2HEB610.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/olqHyX3N1QgVkejpzGEAvNHJ2gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f5bee7-ef75-4c7f-8159-5fac71d74a35/1/_58RG7oyvBQ5dD3yPhTd2HEB610.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.192.0/24
Signature Algorithm: sha256WithRSAEncryption
62:49:cb:2f:d2:ee:c9:0d:13:12:e1:2d:09:9b:34:40:f0:9d:
3b:47:52:16:78:5a:d2:97:b0:50:b9:ed:99:19:c2:fa:4f:86:
32:f4:4f:e7:f7:91:84:f8:26:bf:34:8f:14:3e:7a:3a:54:ce:
50:d5:c2:86:6b:6e:66:8e:db:98:b3:f2:11:af:bc:6e:91:e4:
3f:b5:81:d0:f6:80:a8:b4:83:2f:41:b2:74:5b:83:99:29:9e:
63:40:d5:9a:dd:9c:7d:7a:e1:b6:93:04:f3:ab:a1:ef:6a:5e:
3e:40:b4:b4:7e:5d:15:1c:21:cd:79:ea:f8:aa:2c:ea:9a:2a:
22:ce:b6:6d:2a:dd:81:e3:de:47:38:5c:c1:de:98:6f:96:f0:
f0:08:d3:7f:3a:60:a7:6f:24:0b:dc:10:91:69:0f:7c:2b:8e:
0c:2c:21:bf:85:10:3b:36:f6:86:f0:89:54:fd:b9:56:bf:c5:
73:68:5e:28:3f:d5:ef:47:17:e8:91:52:60:bf:97:77:86:68:
d3:5f:11:6c:79:88:8d:49:8d:84:16:31:db:3e:ba:3d:87:4c:
b3:1c:6a:cc:e8:3a:0e:8c:bd:67:7e:65:a9:f0:ab:49:86:7c:
90:46:43:96:fc:80:15:9e:ac:d9:dc:a6:f1:02:29:e7:a3:ed:
2b:3a:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:53 2024 by rpki-client on console-ams.rpki-client.org