Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/qnTNsiP5ZdXITvb6bLMG-uR9GSw.roa
File: qnTNsiP5ZdXITvb6bLMG-uR9GSw.roa (raw, json)
Hash identifier: 2empOHlrayRp9pOtZLK4AfYMMHnS/khOgoWjc9rqa9M=
Subject key identifier: AA:74:CD:B2:23:F9:65:D5:C8:4E:F6:FA:6C:B3:06:FA:E4:7D:19:2C
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: EBB1DC
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/qnTNsiP5ZdXITvb6bLMG-uR9GSw.roa
Signing time: Mon 30 May 2022 08:14:13 +0000
ROA not before: Mon 30 May 2022 08:14:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 193.57.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15446492 (0xebb1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: May 30 08:14:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa74cdb223f965d5c84ef6fa6cb306fae47d192c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:97:c1:82:41:44:d8:2e:c7:dd:ce:a5:6c:
5b:9f:97:f1:47:a5:2b:5a:bd:99:64:51:37:8a:ff:
f1:c7:8e:bd:e3:ea:f1:ba:25:5c:57:f0:de:ed:a6:
06:55:42:a0:a5:9e:48:d3:d1:6b:db:dc:25:0e:5c:
ab:d4:15:e7:84:1b:96:d0:b5:75:94:1f:a1:ca:9f:
9a:13:54:8a:54:cb:9c:e9:cb:e0:da:85:9f:81:92:
69:5e:6e:43:08:57:6c:a9:7c:8f:57:c3:3c:b0:8e:
58:f7:9d:7a:de:93:12:b9:1d:8b:0e:06:3c:d6:78:
12:d8:31:9b:13:cb:00:7f:02:af:27:34:c4:52:8b:
0d:e2:99:36:78:60:26:3f:1b:c9:2f:22:c4:dd:07:
7c:12:5a:db:c1:ad:58:31:d1:29:d5:ec:95:3a:e1:
79:9e:7d:82:02:b1:b4:f8:53:42:87:32:29:c3:a8:
59:ef:3c:6a:4b:aa:2d:26:bf:df:09:ae:e7:8d:83:
cb:46:79:45:a0:c6:16:38:cd:cd:f4:5e:a3:5a:80:
6f:23:96:38:35:38:b1:79:54:32:54:aa:f2:fe:35:
69:65:0b:fb:e9:68:60:ff:51:89:f3:e9:bd:7e:dc:
9c:96:22:27:0b:f7:01:5e:07:8f:fa:48:9e:37:8d:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:74:CD:B2:23:F9:65:D5:C8:4E:F6:FA:6C:B3:06:FA:E4:7D:19:2C
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/qnTNsiP5ZdXITvb6bLMG-uR9GSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5a:ea:ee:fb:f6:de:8b:0b:1e:bb:26:c2:98:de:2f:e8:fb:
21:ab:29:c5:ea:ad:c2:30:8d:df:9e:91:33:f8:68:14:53:a2:
ba:4b:0e:15:b9:29:6d:3a:56:a0:de:aa:b8:61:40:36:99:6a:
87:09:d0:97:39:12:b0:13:98:a0:6a:44:fb:e7:6f:26:f3:bc:
d9:12:70:75:4d:8a:31:60:42:7e:7b:5e:33:bf:36:90:cd:48:
2a:df:4d:ea:41:04:3f:e6:88:de:7d:a7:4d:a6:37:05:44:ee:
c2:c0:96:0a:d8:6b:4e:42:86:8c:72:d7:41:a8:3d:76:2e:44:
64:d9:22:d7:c7:63:de:b0:93:58:88:9d:a5:82:29:ed:93:c8:
4c:d5:52:e7:b4:40:5b:f5:23:2b:b9:c5:1f:ae:a0:97:b5:3f:
f0:cb:88:1b:14:e8:cf:f1:74:a2:ba:a0:ce:e8:13:d7:ea:bc:
f5:89:a6:d9:e3:3b:b5:7a:08:28:6b:55:01:55:b5:6b:32:b2:
7b:df:5e:81:32:77:e3:23:82:09:a5:ce:9d:ea:1c:c4:5b:2a:
38:14:f0:ff:41:3b:55:f9:7d:bb:f3:25:14:7c:05:20:7c:26:
47:58:b1:a3:f7:31:1e:ae:1e:9d:c4:8a:90:9c:ca:da:c2:de:
4b:cf:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:09 2024 by rpki-client on console-fra.rpki-client.org