Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6Tno3IXDqW-V9NshTDUCRnTgLQE.roa
File: 6Tno3IXDqW-V9NshTDUCRnTgLQE.roa (raw, json)
Hash identifier: RRxMQCDR2WtK0RaURA9xBv1KsAeNY0rvkodtC1ZN9Cg=
Subject key identifier: E9:39:E8:DC:85:C3:A9:6F:95:F4:DB:21:4C:35:02:46:74:E0:2D:01
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 04062A6A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6Tno3IXDqW-V9NshTDUCRnTgLQE.roa
Signing time: Sun 27 Mar 2022 17:15:47 +0000
ROA not before: Sun 27 Mar 2022 17:15:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 193.164.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67512938 (0x4062a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 27 17:15:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e939e8dc85c3a96f95f4db214c35024674e02d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:af:d0:b8:db:24:96:10:ba:a6:38:0e:0d:
3c:38:42:13:3d:bd:93:3d:bd:4d:fc:d9:6c:e3:f7:
11:5a:4b:5f:b3:d6:d8:d7:ce:c8:c6:2f:b6:bf:a2:
50:6d:77:1b:e9:53:49:ef:85:74:91:eb:98:8a:83:
83:a9:38:51:8d:e1:1e:45:2a:2b:5f:6a:fe:46:20:
ea:c6:5f:85:33:b7:d9:4a:0a:8d:d9:67:9a:8b:71:
1f:b8:0a:cf:38:b9:2b:bb:84:f3:2c:72:7e:38:a2:
42:00:78:7f:e5:51:e7:e4:0e:6c:7a:4d:ef:02:74:
3f:bf:e7:b2:a9:f9:12:53:f1:3d:46:e9:fd:1e:e3:
3e:ee:a2:4b:42:be:8d:f3:06:6b:4e:87:61:a7:29:
09:3e:71:f0:82:58:2c:06:48:15:cd:1b:08:53:c1:
2e:98:9c:62:cd:59:66:9f:f9:65:0d:70:c4:f9:67:
9f:96:e1:de:02:19:3f:1a:55:ae:46:93:c8:01:19:
b8:93:c9:aa:bb:0f:d2:86:4b:e3:5a:aa:49:79:71:
53:57:a7:5e:2f:6d:c5:d3:bb:ae:70:6c:c5:4e:06:
44:fa:b2:cf:d3:f1:68:23:32:a1:fa:db:cf:42:e0:
49:0c:ee:91:14:f3:9b:db:70:97:4c:9e:64:ba:36:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:E8:DC:85:C3:A9:6F:95:F4:DB:21:4C:35:02:46:74:E0:2D:01
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6Tno3IXDqW-V9NshTDUCRnTgLQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b6:4e:3f:65:96:c9:cb:29:e8:15:b8:dd:c6:94:f2:b4:99:
6e:b4:2f:1e:23:e4:40:94:a2:92:77:e8:d4:f2:5e:f9:33:46:
f6:1f:47:1d:cc:a3:f8:23:92:09:fe:31:d0:f1:e7:d6:d9:4f:
a2:d8:ca:5d:be:4a:e0:e6:1d:f7:bc:8e:07:46:32:5c:8f:96:
38:a5:01:aa:e3:fb:d2:e7:fd:c4:11:c7:cf:4d:ad:ed:46:55:
1e:d4:07:13:96:95:b3:83:71:ce:42:9c:b5:31:b3:97:92:0b:
96:af:67:45:00:85:3c:4c:e8:32:c6:3f:49:a6:6f:ea:09:db:
37:7c:c0:76:03:76:25:f6:88:ce:e5:99:77:49:41:9b:40:f2:
76:73:41:59:9d:39:fd:05:e9:84:25:01:d2:10:d3:f6:24:ab:
f5:16:b0:cb:c6:dd:48:9a:b2:ba:80:6e:b3:81:79:79:de:d3:
ce:ae:f2:89:1f:33:a7:ac:f5:e8:e1:13:c6:7c:28:e3:ad:b4:
aa:e1:ff:1d:17:c3:e9:33:2c:ef:77:fd:07:89:7a:20:2f:d2:
d9:57:d4:04:7a:73:ff:6b:15:01:4b:71:e8:be:d6:2b:35:89:
74:d0:11:bb:22:0c:8e:32:d8:f2:fc:c6:a8:49:a7:a5:29:48:
58:1e:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org