Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BQJHwnVHxE5PqKyyJgrUhhBD6wo.roa
File: BQJHwnVHxE5PqKyyJgrUhhBD6wo.roa (raw, json)
Hash identifier: CHZ5/HeYAXVeiNBPjVgf43Y96aItHVe9o1cGefnOOcU=
Subject key identifier: 05:02:47:C2:75:47:C4:4E:4F:A8:AC:B2:26:0A:D4:86:10:43:EB:0A
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183C5097B65D9857506D804727D836FF259
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BQJHwnVHxE5PqKyyJgrUhhBD6wo.roa
Signing time: Tue 11 Oct 2022 03:14:36 +0000
ROA not before: Tue 11 Oct 2022 03:14:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 193.176.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:09:7b:65:d9:85:75:06:d8:04:72:7d:83:6f:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 11 03:14:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=050247c27547c44e4fa8acb2260ad4861043eb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:ac:50:15:f2:77:b5:06:65:c4:5b:de:97:
77:a2:68:c3:30:2c:a9:3e:a0:20:48:81:e9:16:b3:
71:ee:47:bb:8f:9b:34:1d:8f:16:cb:5c:b7:92:a9:
6e:e0:32:ce:29:a9:d2:17:e9:5d:7d:05:b3:68:44:
29:65:72:3d:4f:52:0d:6b:da:74:fa:73:6d:6e:30:
4a:2d:65:b9:1a:87:b7:7f:86:7d:84:83:7d:91:6e:
42:e6:de:5d:c0:78:7e:60:50:86:a0:39:67:15:71:
06:bc:e1:ac:0b:be:19:f8:09:94:d0:3a:1a:8c:d4:
57:6e:2c:bc:e2:95:c2:e8:24:2a:de:f1:30:5c:db:
5f:7e:b9:23:ee:93:a0:a5:a5:fa:28:03:e0:62:14:
91:e7:2f:6b:7e:e2:e7:28:dc:04:1b:3a:cb:ca:e9:
4b:36:87:cf:ea:89:8e:21:64:39:ec:d7:b0:13:f5:
28:cf:d3:34:09:62:8a:13:54:7d:98:7d:3a:6d:a4:
0e:eb:1b:f9:47:3d:e8:69:38:60:7a:dc:35:a8:20:
91:b2:2d:6d:19:ff:91:30:77:3d:74:f0:50:ed:a4:
de:94:08:5a:b0:ee:c1:41:c9:d2:43:c9:03:b3:04:
b0:a1:24:07:71:5d:a2:74:84:6f:5f:74:29:19:07:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:02:47:C2:75:47:C4:4E:4F:A8:AC:B2:26:0A:D4:86:10:43:EB:0A
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BQJHwnVHxE5PqKyyJgrUhhBD6wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.128.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:73:2c:ae:10:04:7d:d8:04:e5:e6:39:42:a5:99:95:12:b8:
c2:8d:5d:7c:02:e6:8d:c3:6e:06:7e:ba:a3:84:5a:27:cc:00:
29:93:b5:e5:b7:17:e7:98:b9:e0:f0:42:94:33:a9:9f:c5:b0:
0e:30:0c:07:f9:48:8f:16:8b:a5:35:0e:39:a3:65:a0:c3:20:
86:b8:f3:11:74:44:ff:c6:3d:03:37:34:0e:a6:61:70:c7:a4:
ce:a4:b3:50:60:07:09:23:15:ca:a9:0b:81:07:5b:64:44:fb:
7c:31:f9:11:67:69:8c:df:92:83:7d:bb:e7:0f:82:32:67:40:
1f:7c:c2:4c:59:69:e6:88:62:f8:c1:c9:87:a2:0c:d0:ab:ce:
f4:d8:07:fd:51:81:9f:42:4b:44:05:a7:75:fa:99:4f:49:56:
ae:33:aa:4e:7b:f5:3a:f7:9e:ac:bb:dd:4c:48:6f:f2:df:c1:
5d:60:d7:87:5a:f7:d2:65:f9:18:48:d0:52:80:14:e4:da:33:
5b:57:29:4d:3c:b4:d7:33:8b:11:e4:06:ac:1f:da:cd:8a:17:
35:b4:78:3a:ae:1c:09:25:90:76:c4:1c:c5:ca:93:c0:37:77:
39:aa:a3:0e:f2:25:74:a7:6e:e8:14:6b:51:02:8c:cd:42:fe:
b4:73:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org