Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/ym2MKvIVt1GcCTj1PFDr1qdZnws.roa
File: ym2MKvIVt1GcCTj1PFDr1qdZnws.roa (raw, json)
Hash identifier: OqCUt5XLbhtbpVJGqUwJNwmiK10GxAdtd+BjzQ5nfbY=
Subject key identifier: CA:6D:8C:2A:F2:15:B7:51:9C:09:38:F5:3C:50:EB:D6:A7:59:9F:0B
Certificate issuer: /CN=93e08a0dcb7266ab09770a44fde6233f0e10c950
Certificate serial: E9D827
Authority key identifier: 93:E0:8A:0D:CB:72:66:AB:09:77:0A:44:FD:E6:23:3F:0E:10:C9:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-CKDctyZqsJdwpE_eYjPw4QyVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/ym2MKvIVt1GcCTj1PFDr1qdZnws.roa
Signing time: Wed 11 May 2022 21:53:02 +0000
ROA not before: Wed 11 May 2022 21:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 193.141.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15325223 (0xe9d827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e08a0dcb7266ab09770a44fde6233f0e10c950
Validity
Not Before: May 11 21:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca6d8c2af215b7519c0938f53c50ebd6a7599f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:3b:43:c4:82:ec:44:20:da:79:63:56:a8:
de:2f:73:e6:44:bc:7a:1e:a2:65:c4:4f:61:b8:e6:
be:42:44:1a:09:b5:6a:8d:fc:c1:24:f1:8d:54:4e:
97:cb:82:d4:43:ef:ea:fd:32:cd:5b:dd:9a:79:f8:
d3:d8:03:92:f8:b2:e0:f0:39:6a:8e:b7:b2:4a:b8:
8c:e4:99:1f:04:51:cd:20:47:aa:81:eb:f1:9a:79:
0b:6f:16:79:5e:b9:04:ac:51:7d:57:9a:3f:5b:5e:
2b:4d:ca:de:43:f3:33:ca:f2:55:73:a2:b5:c4:4c:
44:ee:47:c1:fd:f6:79:33:39:c9:d6:6a:f5:dc:e1:
88:79:2b:4a:cb:93:26:5c:7a:95:67:d3:0d:60:6f:
f8:ea:06:ab:4d:8e:1f:af:93:ad:85:86:f1:7d:23:
f2:de:82:30:7c:1a:b6:7c:8a:98:bd:85:27:7f:a5:
2e:db:4f:1e:6f:00:66:11:6d:ce:78:31:e6:69:a9:
bb:79:43:e0:20:76:b6:8a:16:61:ed:b3:a3:73:2c:
d4:20:ec:2d:cd:61:cd:07:0f:b0:34:e5:44:32:07:
c2:b4:7a:57:18:1c:d1:df:ba:56:93:9c:4d:14:92:
b2:c2:f1:47:38:5b:11:aa:b2:5c:9e:1a:4e:83:ee:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6D:8C:2A:F2:15:B7:51:9C:09:38:F5:3C:50:EB:D6:A7:59:9F:0B
X509v3 Authority Key Identifier:
keyid:93:E0:8A:0D:CB:72:66:AB:09:77:0A:44:FD:E6:23:3F:0E:10:C9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-CKDctyZqsJdwpE_eYjPw4QyVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/ym2MKvIVt1GcCTj1PFDr1qdZnws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/k-CKDctyZqsJdwpE_eYjPw4QyVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.53.0/24
Signature Algorithm: sha256WithRSAEncryption
90:35:3f:65:72:92:9e:89:f0:23:31:f1:3e:99:a0:40:95:39:
18:20:8b:d8:6f:a9:c6:f7:12:d7:3b:98:98:b7:1e:0c:7f:d7:
6c:08:56:43:9f:d6:cc:18:a7:45:f1:1f:11:4c:0f:6d:36:01:
0a:e1:2d:51:8e:5a:0f:f4:bb:75:d5:c6:5d:e7:8f:8d:87:63:
41:e5:ad:94:2d:ba:bb:d3:41:d6:cb:09:ed:f8:1a:6d:2c:23:
9b:5d:b7:9b:50:ea:76:cb:a1:fb:a4:ac:e2:dc:f8:be:1b:8c:
87:03:2b:1a:44:dc:fc:57:5b:df:36:69:77:57:16:e9:bc:20:
e9:0b:3d:17:8b:cb:72:97:45:40:13:84:84:f7:21:f3:4e:a4:
1a:1f:60:1f:fc:29:24:57:8a:a3:04:6a:f3:80:d3:c0:b6:f3:
82:e8:01:53:49:ed:df:26:fb:4c:1f:58:fb:92:39:a1:73:a1:
2e:e6:97:ea:55:3f:1f:a0:93:11:aa:73:9e:60:63:3d:d4:f8:
6a:40:63:77:cd:10:91:96:c1:88:75:8a:1b:06:f0:2a:4c:be:
46:62:bf:f6:3a:d9:ce:5a:1c:0c:54:79:89:97:55:1f:81:e7:
06:5d:29:0f:2d:7c:ad:60:60:5e:7e:19:f5:2d:00:97:f0:81:
67:e1:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:31 2024 by rpki-client on console-ams.rpki-client.org