Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0rfx9wnhjHeujxV25m6obe4VzUc.roa
File: 0rfx9wnhjHeujxV25m6obe4VzUc.roa (raw, json)
Hash identifier: jguyoxnXPrkprMceXWYilivpxroOBRlkAe9MhGmWrbc=
Subject key identifier: D2:B7:F1:F7:09:E1:8C:77:AE:8F:15:76:E6:6E:A8:6D:EE:15:CD:47
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01835E8D6E97E1D2D26B8EB5ACBBD4B3B392
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0rfx9wnhjHeujxV25m6obe4VzUc.roa
Signing time: Wed 21 Sep 2022 05:37:50 +0000
ROA not before: Wed 21 Sep 2022 05:37:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 193.151.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5e:8d:6e:97:e1:d2:d2:6b:8e:b5:ac:bb:d4:b3:b3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 21 05:37:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2b7f1f709e18c77ae8f1576e66ea86dee15cd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:0b:fb:13:3d:88:c7:a3:82:1c:70:30:d9:
dc:b8:0e:45:c5:26:00:6d:b1:d1:67:8e:86:68:8e:
50:d1:dc:d7:21:52:0f:08:34:5e:67:4f:5f:d1:e6:
0b:9e:0d:8f:0c:0e:42:89:f5:d3:e8:d3:1a:03:d4:
75:d2:13:5b:0b:3a:d7:d1:3e:11:4e:5d:29:9c:8e:
7a:eb:5b:52:79:44:2a:6b:1b:c3:d6:14:94:d3:18:
04:47:bc:6a:6d:a6:20:ad:73:a9:fe:89:b1:9f:fa:
5e:db:74:f5:96:3d:54:2f:90:d3:9e:08:d4:98:24:
53:c8:3b:49:c7:7e:c4:66:d5:5f:fa:b7:c0:b0:1d:
77:92:d1:bc:2e:3d:7d:fd:c0:b9:3b:1d:53:7b:c6:
00:7a:52:a6:3a:12:23:19:61:db:3b:2c:43:31:55:
49:f6:4a:57:e3:ea:45:1f:8e:28:0b:c2:53:7d:79:
4f:98:59:9a:c7:0d:61:82:9a:01:28:0a:da:b9:8f:
ee:86:ba:f8:b1:eb:9e:8a:23:36:62:69:73:25:fd:
66:40:97:70:ef:4c:a0:dc:7f:69:93:4c:c2:d2:ef:
12:46:ec:4f:f9:1c:5a:93:11:f0:30:6a:30:6a:fd:
28:b0:8e:29:a9:dd:2d:7f:f3:6c:3c:ca:e6:55:85:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:F1:F7:09:E1:8C:77:AE:8F:15:76:E6:6E:A8:6D:EE:15:CD:47
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0rfx9wnhjHeujxV25m6obe4VzUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.183.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:b7:33:13:6b:f1:1e:dd:f4:ce:dc:6d:29:4b:57:b0:c2:b9:
b9:37:ef:a1:51:1e:a0:c2:58:b7:84:97:a9:67:a9:43:83:26:
eb:8d:a9:98:49:91:5e:a3:58:4f:cf:b5:3d:9f:c8:18:3d:e5:
2e:b2:8d:8d:e7:d9:df:60:4c:37:c9:f6:95:f4:ca:05:06:fa:
64:19:9b:3c:9d:97:3d:57:c3:98:46:a3:b5:b8:dd:84:1a:46:
73:48:24:e5:f0:d8:40:9d:d8:07:5f:f2:50:03:05:c9:6a:05:
40:4a:71:c2:0e:8a:83:81:3d:78:52:0e:dd:c5:e4:a5:a5:61:
be:d1:79:9f:02:50:45:26:ad:d3:03:58:6f:9d:69:3b:d4:76:
dc:93:37:33:6b:f5:a4:13:e5:74:dc:1e:e5:0f:fb:6f:97:77:
a8:d7:e9:4b:75:05:9a:c2:da:24:e5:99:ab:1f:bf:b1:96:eb:
f1:87:66:b0:42:cc:14:53:a5:6e:4e:0e:29:68:28:e4:e2:39:
bf:c8:5c:91:6a:c7:43:d2:cc:41:0e:8b:fc:c5:4f:1c:05:14:
eb:0f:67:90:40:c7:4b:de:92:9d:67:97:12:f7:be:22:62:e5:
b7:3c:e6:02:c7:2b:30:73:81:54:16:5b:64:a9:de:45:ce:0c:
77:13:74:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org