Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/JyTXBn1Bn9oA53zLhrtASYL5JlU.roa
File: JyTXBn1Bn9oA53zLhrtASYL5JlU.roa (raw, json)
Hash identifier: t6yWPuxt0L+OlpjA5my0hXmO9zAYmn16Dutkg9GXz9A=
Subject key identifier: 27:24:D7:06:7D:41:9F:DA:00:E7:7C:CB:86:BB:40:49:82:F9:26:55
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01821763AA1F0BD0B9783EB39BFFD0B2A28C
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/JyTXBn1Bn9oA53zLhrtASYL5JlU.roa
Signing time: Tue 19 Jul 2022 16:56:23 +0000
ROA not before: Tue 19 Jul 2022 16:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 193.151.180.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:63:aa:1f:0b:d0:b9:78:3e:b3:9b:ff:d0:b2:a2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 19 16:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2724d7067d419fda00e77ccb86bb404982f92655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:0a:31:f7:a0:a4:77:f5:c5:ff:b3:aa:9b:
f8:44:b8:5c:64:b3:36:db:15:3e:8e:e3:43:e1:81:
c3:29:1e:c9:67:21:b6:14:34:8b:82:0d:14:44:6e:
bb:b1:15:5b:23:7e:95:9c:f5:54:39:45:f1:82:41:
02:7e:17:4b:6a:3e:1c:e2:2f:ea:66:b1:2b:24:05:
18:f1:b2:02:49:2f:9d:4a:3f:30:df:9c:4f:ef:9c:
53:d1:3d:80:f1:b0:ec:ba:2e:16:68:54:17:29:1e:
c6:a8:84:38:0c:66:cb:91:46:22:0a:88:4c:89:21:
62:ee:11:9a:28:a1:83:e9:2d:b1:f9:9a:bc:26:f5:
66:34:8c:9e:6c:6f:ac:46:5d:1b:a4:71:46:a9:d0:
99:b3:5b:de:82:1d:be:53:dd:4e:8e:da:93:d6:ef:
62:22:f2:d0:0b:20:58:21:88:00:7c:49:a5:d8:91:
0e:75:61:5a:7d:32:ea:84:49:66:dd:8b:ee:4c:1e:
5c:af:c4:63:e9:ae:89:5a:72:e7:cc:74:91:23:ed:
44:9d:f6:42:66:da:e2:e6:b5:43:f0:1f:29:a0:b7:
09:42:d4:79:a7:27:05:63:7c:a3:b7:95:08:b1:99:
b6:88:de:09:c4:d2:74:ec:31:79:80:a2:0e:2c:ee:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:24:D7:06:7D:41:9F:DA:00:E7:7C:CB:86:BB:40:49:82:F9:26:55
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/JyTXBn1Bn9oA53zLhrtASYL5JlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.180.0/24
194.104.156.0/24
194.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:72:8c:09:31:e0:bb:9d:5f:b9:d6:40:e1:62:9b:8f:cb:90:
4d:e9:1c:ce:77:9f:8f:b9:77:42:ce:f7:9c:26:00:1c:50:09:
a9:d5:bd:32:d4:b3:21:c4:7c:61:cf:09:28:3d:d3:a8:af:76:
05:85:62:af:d6:6c:2b:e2:b2:11:e9:2f:5d:a1:96:10:84:97:
11:28:d1:9a:4e:9d:3c:2c:21:45:6f:f0:7a:93:6e:d1:28:5b:
2f:58:f2:43:2e:10:f9:39:68:7a:a4:73:1a:f7:98:61:ed:16:
56:aa:e5:cd:26:01:07:a0:c5:fe:b7:45:6c:8d:03:6d:7a:f6:
d5:49:66:ac:c1:b9:8e:6b:e4:15:7a:97:c1:68:10:3b:5a:45:
b3:ad:e8:ad:f1:cb:c9:da:05:63:a3:a2:f8:35:4d:10:15:22:
32:fe:ec:5d:cf:a2:2a:0c:fa:d4:6c:87:df:c6:4c:72:2f:8d:
09:36:07:91:93:77:e5:eb:29:5c:d0:29:8e:30:f7:0f:c0:c3:
f2:25:2b:46:a2:1f:05:1d:95:ce:61:3c:52:e5:21:fc:4b:32:
d0:a3:6b:ca:89:0f:38:ba:71:ca:f8:ce:cf:a2:e7:af:0a:4c:
a5:ca:35:ba:6a:9c:50:37:94:5e:8a:cf:08:9b:a9:58:cc:62:
7d:56:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org