Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/IQVul4iV-ZjjutKiJL7XN7aE-lI.roa
File: IQVul4iV-ZjjutKiJL7XN7aE-lI.roa (raw, json)
Hash identifier: ivXm+G0z4sKxTuqdumH0SJ4AaprVlhkz/RMUbkikuIM=
Subject key identifier: 21:05:6E:97:88:95:F9:98:E3:BA:D2:A2:24:BE:D7:37:B6:84:FA:52
Certificate issuer: /CN=93e08a0dcb7266ab09770a44fde6233f0e10c950
Certificate serial: 01856D41AD82D6FB47F270B42A6005D3B9AC
Authority key identifier: 93:E0:8A:0D:CB:72:66:AB:09:77:0A:44:FD:E6:23:3F:0E:10:C9:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-CKDctyZqsJdwpE_eYjPw4QyVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/IQVul4iV-ZjjutKiJL7XN7aE-lI.roa
Signing time: Sun 01 Jan 2023 12:14:58 +0000
ROA not before: Sun 01 Jan 2023 12:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 193.141.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:ad:82:d6:fb:47:f2:70:b4:2a:60:05:d3:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e08a0dcb7266ab09770a44fde6233f0e10c950
Validity
Not Before: Jan 1 12:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21056e978895f998e3bad2a224bed737b684fa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7b:f7:88:c6:5b:77:e9:0c:96:bb:3a:17:aa:
a1:2d:8f:27:61:20:41:5a:2b:b0:8c:76:3e:9e:04:
9c:1f:db:a0:ac:7f:65:0d:85:3d:d3:fe:f5:43:82:
f4:7b:d3:86:ef:b0:b3:db:66:76:35:db:5e:a6:4e:
7d:54:c8:88:0e:1a:ab:a6:7e:15:5b:55:24:16:42:
1b:2f:5a:41:61:72:bb:2f:97:7d:15:68:d8:d8:e8:
92:e1:bd:c9:a1:41:76:be:1b:4c:d5:d2:4f:c7:d2:
d7:77:4d:88:6a:9a:f7:48:79:59:fb:f2:53:f3:5b:
2e:3c:06:d8:21:bc:e8:75:ae:ec:e0:92:4e:70:99:
65:07:c5:ec:8c:0d:f5:0d:e3:a0:45:47:b2:86:04:
5c:ef:be:66:8f:6e:26:9a:5c:1d:0e:c0:f2:09:b6:
a0:dc:37:5e:d5:3f:f8:ea:5a:bc:9e:5a:e2:27:f0:
93:13:9d:25:6d:cb:66:e2:51:6b:4f:c0:ce:b2:2c:
18:31:6e:3c:78:06:10:1f:d4:f7:46:6f:a7:a4:f6:
ed:09:25:93:c2:eb:7a:72:40:28:77:a9:4c:01:7d:
bf:4f:b9:c7:7a:c7:93:1f:1a:d1:2e:a9:e7:41:92:
68:a4:e8:1b:76:95:64:60:13:c6:3e:88:98:11:e6:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:05:6E:97:88:95:F9:98:E3:BA:D2:A2:24:BE:D7:37:B6:84:FA:52
X509v3 Authority Key Identifier:
keyid:93:E0:8A:0D:CB:72:66:AB:09:77:0A:44:FD:E6:23:3F:0E:10:C9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-CKDctyZqsJdwpE_eYjPw4QyVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/IQVul4iV-ZjjutKiJL7XN7aE-lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/k-CKDctyZqsJdwpE_eYjPw4QyVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.53.0/24
Signature Algorithm: sha256WithRSAEncryption
07:4e:6e:dc:86:f5:eb:7d:c2:ee:0b:83:3b:a9:16:e8:32:62:
78:27:35:77:81:cd:44:17:47:c8:47:e2:a7:e7:6a:0f:94:cb:
de:11:bf:01:2c:51:33:48:eb:ea:77:bf:15:9e:26:4e:fc:b8:
ff:cf:67:49:29:f6:22:a6:a8:8c:b6:ad:cd:1e:5e:48:38:ea:
d5:8e:9a:e0:f3:9c:11:4b:0d:0e:73:9b:6d:52:66:52:f7:75:
5d:03:2c:5d:cd:9d:c6:c3:ab:f3:ef:ee:34:fd:dd:60:99:5c:
98:2b:63:eb:86:34:3e:ef:4d:be:3e:3b:f4:2c:96:a7:38:c8:
ff:80:50:56:c6:ca:5d:ce:8a:5c:82:03:7f:03:9d:0f:9d:05:
9b:3b:3e:5a:6a:08:6a:22:c9:27:00:d1:0f:60:c1:1e:6c:c1:
62:cc:1d:5a:40:d6:1f:55:e2:48:99:4f:4b:2d:44:04:4b:d1:
3c:c7:5f:32:06:4e:27:62:09:97:2b:17:ad:3a:75:97:8a:ca:
06:f8:9f:13:b0:14:02:25:fd:83:86:39:41:a5:b5:75:73:ab:
1f:5f:a8:b3:4f:be:e2:15:4e:b7:bd:2c:43:ad:28:cf:3d:d5:
fc:07:e5:ce:fb:ba:4a:fc:c8:61:e8:81:ff:a8:85:7e:14:22:
a9:d4:a3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:31 2024 by rpki-client on console-ams.rpki-client.org