Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/Cn_pDVh8kdX_Gi0ROVKLQ_mdy5U.roa
File: Cn_pDVh8kdX_Gi0ROVKLQ_mdy5U.roa (raw, json)
Hash identifier: Q03Jnm7oD+9Ze+2EkdCqyQ5IHm95vp5GbBbml60CZFs=
Subject key identifier: 0A:7F:E9:0D:58:7C:91:D5:FF:1A:2D:11:39:52:8B:43:F9:9D:CB:95
Certificate issuer: /CN=0672be0a174c6a9373c2509ba8fb146260b04430
Certificate serial: 02795A
Authority key identifier: 06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/Cn_pDVh8kdX_Gi0ROVKLQ_mdy5U.roa
Signing time: Thu 03 Feb 2022 16:40:52 +0000
ROA not before: Thu 03 Feb 2022 16:40:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 193.163.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162138 (0x2795a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0672be0a174c6a9373c2509ba8fb146260b04430
Validity
Not Before: Feb 3 16:40:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a7fe90d587c91d5ff1a2d1139528b43f99dcb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:e4:b7:63:9f:4d:e2:95:4c:a6:71:60:73:
5b:e0:d0:66:dc:ce:41:79:06:94:e8:e9:ce:d1:11:
ca:15:ec:dc:5a:84:98:ba:82:6a:cf:07:c4:3f:5d:
f9:2f:ae:d3:1f:8b:59:50:03:f0:bd:9d:6d:a3:62:
49:64:bc:bd:25:5a:bd:38:30:35:b3:87:d3:52:b6:
42:dc:8f:43:4b:5f:6f:98:35:53:dd:fb:4c:96:56:
15:52:33:29:61:0e:01:6a:b3:36:6c:d4:9a:20:17:
02:ed:a5:14:79:29:06:29:78:3d:6c:e4:fe:8a:36:
0f:5d:d3:51:bc:08:3e:12:9d:7c:fc:14:3f:0b:54:
3a:79:ce:6a:ff:98:9d:89:44:d5:9d:0a:3a:6e:1a:
c8:6d:d6:40:30:35:bf:4d:62:97:51:c2:87:0b:4c:
84:89:3d:2e:37:47:f2:d7:74:c9:d3:7e:af:fd:34:
d0:f1:aa:d1:10:b9:a4:a0:86:b4:c6:ad:bf:a8:f9:
e2:b0:7e:9e:a5:d6:29:15:5f:6b:ea:b7:da:2b:cd:
95:a3:68:af:56:5a:76:7c:24:60:5d:2e:ab:2c:71:
c3:f6:d1:e2:78:8f:ef:b3:6b:3c:e1:00:01:b2:8e:
bb:eb:41:f1:06:fb:7e:a9:84:14:b8:ac:46:3d:a4:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:E9:0D:58:7C:91:D5:FF:1A:2D:11:39:52:8B:43:F9:9D:CB:95
X509v3 Authority Key Identifier:
keyid:06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/Cn_pDVh8kdX_Gi0ROVKLQ_mdy5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/BnK-ChdMapNzwlCbqPsUYmCwRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ba:bd:16:06:f4:31:7c:b6:9c:42:9d:96:57:7b:5c:a2:d1:
49:53:4e:4d:8d:73:1c:50:e1:07:30:6d:c4:ec:a1:2f:a1:78:
97:68:07:4e:ee:a0:ac:e8:7d:35:3f:c8:31:4a:93:16:55:fc:
ef:3a:2d:b0:e1:ca:1f:42:4b:fb:67:0e:c9:29:68:cd:f6:18:
e2:bf:c9:81:ad:98:6a:82:dd:14:c0:08:06:ec:d5:e7:4c:8a:
21:04:90:6d:5d:e2:57:41:cf:25:6d:f8:55:37:da:f3:98:00:
eb:d3:ee:49:3e:bd:ea:90:94:07:cf:26:f5:35:a1:47:ad:19:
fa:e2:c8:4b:24:7d:e9:0e:2b:aa:a1:c2:e9:ee:82:c8:3f:ad:
e8:75:76:4b:ad:65:9f:90:22:ac:5a:bc:12:09:90:6b:b8:2c:
61:00:7f:ea:45:b3:b6:3b:6e:73:f8:b3:02:bd:5d:0a:41:c2:
9c:35:7f:14:8b:89:b0:16:02:2e:e2:fa:a8:b4:ee:22:2c:81:
9e:28:61:89:e4:0e:9f:d5:91:e2:2e:9e:fe:3e:d5:2c:fa:0a:
f9:5e:71:49:33:58:57:94:99:57:ae:54:39:8d:d5:76:c4:a9:
46:b8:4e:fd:e3:47:0b:b0:94:9a:cb:ad:a4:cc:e7:61:63:a4:
3b:ef:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:10 2024 by rpki-client on console-fra.rpki-client.org