Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/qh9eQXgWSDHoTFsyyu8S0Uadvo4.roa
File: qh9eQXgWSDHoTFsyyu8S0Uadvo4.roa (raw, json)
Hash identifier: 4xCR8ty9kNLBAMJhC0sK1WZTj3ZLZGwTPiEsJobL7LM=
Subject key identifier: AA:1F:5E:41:78:16:48:31:E8:4C:5B:32:CA:EF:12:D1:46:9D:BE:8E
Certificate issuer: /CN=7973123521d75d8d31c99058e869e996b917b278
Certificate serial: 01856F8B76DA81B261C01617BC2663862AD0
Authority key identifier: 79:73:12:35:21:D7:5D:8D:31:C9:90:58:E8:69:E9:96:B9:17:B2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMSNSHXXY0xyZBY6GnplrkXsng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/qh9eQXgWSDHoTFsyyu8S0Uadvo4.roa
Signing time: Sun 01 Jan 2023 22:54:48 +0000
ROA not before: Sun 01 Jan 2023 22:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.37.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:76:da:81:b2:61:c0:16:17:bc:26:63:86:2a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7973123521d75d8d31c99058e869e996b917b278
Validity
Not Before: Jan 1 22:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa1f5e4178164831e84c5b32caef12d1469dbe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:66:b5:72:dd:4b:a8:7a:7d:ab:3d:61:27:
ec:25:13:52:7f:5e:cd:88:13:6b:0e:5d:3c:1c:5f:
15:d9:7a:e9:a3:b1:6b:b1:2b:f7:c1:e7:c8:eb:22:
81:cb:cf:ac:5b:9a:7f:97:a3:0a:e3:05:be:65:17:
e4:d4:1a:96:21:37:ab:9f:6f:49:41:5e:08:60:eb:
c1:d1:26:f4:ef:2e:35:f1:f1:29:f4:70:28:e5:70:
a0:92:60:74:5e:bc:19:29:2a:7b:3c:e5:d7:c6:b7:
56:66:1d:e1:a6:72:fb:e8:83:f4:6f:74:12:95:d1:
c0:30:0f:23:91:bb:f6:57:f5:f8:08:6a:f5:11:5b:
88:1c:6e:c6:5f:14:6a:b4:cf:e7:8c:16:9e:b2:75:
61:be:4a:2f:7c:75:12:e7:24:2e:b1:cd:d2:be:6d:
32:ca:16:12:7c:91:7a:19:20:06:3c:87:d7:4e:02:
af:41:ef:7d:a6:1b:29:c1:7d:18:2b:e7:a8:a6:50:
03:c1:03:51:98:59:7d:76:a1:52:ca:98:7d:84:cf:
c5:39:80:b5:bf:c0:94:fb:0a:f0:ad:20:04:41:bb:
90:ac:96:c6:f2:06:f5:35:cd:c1:fc:11:6a:f8:0a:
9b:e2:14:bc:6e:d7:99:f0:eb:a4:b6:4e:cf:c7:0f:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:5E:41:78:16:48:31:E8:4C:5B:32:CA:EF:12:D1:46:9D:BE:8E
X509v3 Authority Key Identifier:
keyid:79:73:12:35:21:D7:5D:8D:31:C9:90:58:E8:69:E9:96:B9:17:B2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMSNSHXXY0xyZBY6GnplrkXsng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/qh9eQXgWSDHoTFsyyu8S0Uadvo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/eXMSNSHXXY0xyZBY6GnplrkXsng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c9:ef:6f:a6:10:1b:d8:e8:ac:6a:90:bf:94:b5:af:17:9d:
b3:de:7a:e3:84:8c:09:0d:f2:22:a0:10:bc:f0:90:b8:3c:b3:
54:58:f6:fa:4b:48:0b:44:7a:17:2b:14:cb:6e:40:02:c0:ca:
6a:e1:d8:d7:43:5a:f9:f0:e8:ed:f8:6f:3a:e6:95:4c:26:d4:
36:65:90:32:60:88:ae:39:fe:1a:6a:a4:5a:46:e2:33:39:3b:
31:21:3b:75:db:f9:ac:08:f9:ff:57:b6:a7:48:9a:5b:1d:13:
e9:ae:83:f1:24:ee:b5:06:6b:5c:23:3e:9a:6b:a6:81:af:31:
6f:38:06:04:04:e0:0a:2d:47:0e:9a:75:de:27:4c:1f:1d:74:
5d:cd:c7:f0:18:d4:26:73:92:7e:a6:ca:0e:c0:94:16:72:60:
03:82:f7:2f:66:67:16:66:0a:df:e1:57:be:46:5f:c1:2b:96:
e6:6f:64:98:8e:af:bd:f9:00:f3:48:d7:5e:53:ce:35:b3:82:
3c:6f:6c:f0:9f:1d:cc:8a:aa:8e:c8:ad:d4:27:36:0d:a9:38:
36:48:2e:35:a5:00:d8:06:61:5e:f0:8c:96:99:a3:f6:d7:a3:
42:26:b3:22:ae:77:10:8a:cb:51:81:ca:fb:f0:44:9e:76:12:
4b:69:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:19 2023 by rpki-client on console-ams.rpki-client.org