Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/0duPYR8R_3Il4bmkjPd1A1br1GY.roa
File: 0duPYR8R_3Il4bmkjPd1A1br1GY.roa (raw, json)
Hash identifier: zhJ3v32A2CZR1q27hcW7DS/dH3WXBW/Xql5IFFD/yH0=
Subject key identifier: D1:DB:8F:61:1F:11:FF:72:25:E1:B9:A4:8C:F7:75:03:56:EB:D4:66
Certificate issuer: /CN=0672be0a174c6a9373c2509ba8fb146260b04430
Certificate serial: 02E66D
Authority key identifier: 06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/0duPYR8R_3Il4bmkjPd1A1br1GY.roa
Signing time: Thu 03 Feb 2022 16:40:53 +0000
ROA not before: Thu 03 Feb 2022 16:40:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.163.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190061 (0x2e66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0672be0a174c6a9373c2509ba8fb146260b04430
Validity
Not Before: Feb 3 16:40:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1db8f611f11ff7225e1b9a48cf7750356ebd466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:ae:e6:54:8e:70:3a:f5:ca:9c:a7:48:13:
66:29:d0:71:97:81:2a:4d:97:7c:6e:8c:b9:e6:10:
10:1a:98:22:60:eb:cb:d7:5a:dd:7b:5f:0f:eb:5f:
3f:58:ae:5a:ef:e9:49:f8:6d:76:d5:d1:ac:db:2a:
cd:c6:43:51:c1:5f:7e:5d:64:fb:71:e4:95:65:35:
56:21:06:e8:b6:43:74:5e:b9:cf:4f:24:eb:75:1c:
39:10:8f:54:cb:4c:e7:fe:f4:d4:84:a6:b9:0e:39:
60:0c:f3:da:be:3b:e9:06:cb:24:de:a6:cc:3b:69:
92:7f:9e:61:c5:54:ac:52:02:2c:6f:fc:c5:9e:ba:
f5:c8:fe:f2:a9:d3:c6:4a:4b:f4:97:28:e5:01:38:
e8:59:53:52:5c:0b:8d:d8:85:f8:04:1d:64:7e:fd:
b4:91:c2:32:73:e1:27:e1:df:2e:02:3c:ed:5f:b7:
99:ef:23:56:4b:32:2b:94:57:23:a9:25:9d:4b:21:
4c:36:fc:7c:3b:9c:2e:b5:cc:59:ee:b9:91:78:89:
ac:81:e7:46:a7:e3:62:a1:aa:35:53:c4:c8:c1:3a:
78:b6:8b:af:9f:92:c2:8d:41:fd:c7:7f:88:c7:fc:
d6:58:c8:75:cd:ab:a2:cd:02:1e:9f:f2:cf:79:07:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:8F:61:1F:11:FF:72:25:E1:B9:A4:8C:F7:75:03:56:EB:D4:66
X509v3 Authority Key Identifier:
keyid:06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/0duPYR8R_3Il4bmkjPd1A1br1GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/BnK-ChdMapNzwlCbqPsUYmCwRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.45.0/24
Signature Algorithm: sha256WithRSAEncryption
80:76:88:95:3a:05:4b:6e:5a:25:88:52:fb:cb:aa:d0:e7:41:
8d:fe:e5:f6:4b:15:0a:56:1f:32:9a:52:86:07:d3:df:d5:55:
13:1c:2b:01:8e:5e:36:37:e4:17:0e:b4:3e:b9:3c:a1:7f:a8:
71:9a:63:64:a9:e9:1e:13:98:63:da:38:bb:0c:73:02:56:de:
e0:a8:bc:a7:90:3c:fb:e1:cd:70:00:cd:2d:0b:75:98:5a:74:
8a:79:41:29:bf:de:e3:6e:b0:f5:64:95:cf:f0:ca:ea:5a:a0:
83:2c:cc:19:6c:c1:9e:ad:57:20:0b:3f:63:8c:f9:8c:f6:d5:
ad:d9:91:c0:ba:ad:74:8a:8c:56:42:52:de:9c:bd:99:47:f9:
ea:f1:ff:a2:89:2e:61:93:07:bf:35:92:9b:de:51:93:70:1e:
45:0b:88:a0:11:35:0a:90:22:b3:7f:6b:ec:0a:55:19:a3:30:
54:71:ec:4f:84:ea:cf:87:5b:f8:58:2c:8f:3d:e7:d1:cb:00:
c8:65:bd:69:7c:75:82:e6:e0:5d:5d:cb:c9:be:2f:77:f2:30:
df:d6:fd:5e:e7:23:ea:88:23:43:22:7a:d0:cd:bb:c0:8c:90:
64:c3:2e:88:7b:1a:3a:cd:0d:b2:c4:4d:bc:35:ca:b9:d7:3c:
4d:3c:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:50 2024 by rpki-client on console-ams.rpki-client.org