Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/X9Jb7bY0EM42T_Nq1mpurIU9uDY.roa
File: X9Jb7bY0EM42T_Nq1mpurIU9uDY.roa (raw, json)
Hash identifier: ERKNKHeltKZ+n9No09tSGWfJkj074iFLk5Ks7xJ7kSk=
Subject key identifier: 5F:D2:5B:ED:B6:34:10:CE:36:4F:F3:6A:D6:6A:6E:AC:85:3D:B8:36
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01832C0402F813380C4D8F3E9647CFA24638
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/X9Jb7bY0EM42T_Nq1mpurIU9uDY.roa
Signing time: Sun 11 Sep 2022 10:06:43 +0000
ROA not before: Sun 11 Sep 2022 10:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3
IP address blocks: 193.176.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2c:04:02:f8:13:38:0c:4d:8f:3e:96:47:cf:a2:46:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 11 10:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fd25bedb63410ce364ff36ad66a6eac853db836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6a:65:e6:06:b2:ce:a7:26:ae:b5:d8:52:c2:
02:65:8b:a4:10:78:77:43:fe:93:d2:bd:68:c8:0f:
88:84:5d:87:92:09:88:7b:59:01:9e:97:06:6b:8b:
ec:65:a4:b2:e5:93:a4:c7:87:95:34:1a:bb:9a:d8:
97:cc:4a:fd:15:ca:c1:a5:5d:1e:9c:a7:4b:38:c4:
e1:ae:1a:1f:2d:31:1e:46:7a:08:34:06:24:d9:55:
dc:75:55:4a:0f:10:0f:a4:ee:4c:3e:03:42:1e:f2:
a0:a6:0b:4b:70:1d:ee:37:04:5c:7d:4c:01:5c:8b:
e7:24:11:2d:35:b5:c4:2d:66:53:39:02:60:24:cf:
47:2a:2b:68:ec:00:38:fd:47:55:33:9e:50:e1:3d:
23:bb:b8:ac:9a:33:2f:b7:96:49:a9:ba:19:31:8c:
45:25:99:6e:f2:6a:77:f1:4c:99:8e:a2:b1:f7:cd:
f2:8c:c0:87:44:d5:c5:87:e1:a3:9b:91:5d:f6:9f:
23:b9:e1:58:6a:54:9e:88:ec:a7:c9:83:10:ee:e2:
d6:31:15:f7:45:b9:33:d0:c7:b6:e4:b9:91:7a:bc:
b3:b8:fd:b9:7f:d7:dc:9d:44:e6:a7:e1:d2:56:64:
4e:d3:b7:35:c6:86:a4:d4:2b:d7:1a:54:1c:ee:0f:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:5B:ED:B6:34:10:CE:36:4F:F3:6A:D6:6A:6E:AC:85:3D:B8:36
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/X9Jb7bY0EM42T_Nq1mpurIU9uDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.128.0/24
Signature Algorithm: sha256WithRSAEncryption
32:80:8a:f8:ca:ef:9f:a5:d8:c6:8d:53:01:0b:21:0e:c1:11:
79:fa:e2:f9:a1:07:c2:e7:90:1e:1b:08:a1:23:23:6f:c8:a5:
4c:18:67:22:ef:8c:2f:66:3f:b8:41:df:12:82:f0:69:1b:f2:
e6:bf:be:9c:09:39:fd:0e:2d:c7:fd:74:67:54:6c:f3:5d:38:
c2:ee:13:42:ab:51:e1:09:25:2d:9b:d3:2c:ec:20:62:40:08:
6d:8a:ed:42:3f:19:ce:37:ce:24:13:c0:62:dc:34:19:f9:4f:
97:cb:78:70:63:c6:67:a5:b0:2e:7c:85:aa:d4:6b:92:aa:4c:
c7:19:d7:5e:e4:e8:7b:a0:2e:62:1c:be:3b:bc:f7:d4:15:f0:
ed:5b:40:b1:9d:3f:6f:57:41:2e:36:46:07:2a:8e:a0:b6:b0:
61:d9:ae:6f:a7:82:38:c6:cf:69:f5:22:42:ef:d8:20:3c:79:
36:f2:b5:d0:23:67:25:34:f7:5e:a4:d2:fb:bd:17:e7:84:05:
e1:64:f6:f1:3d:d9:55:56:04:80:c0:c9:ad:51:c1:1a:b6:27:
05:61:39:dc:a0:3d:66:9b:e1:71:8e:9c:6d:ea:82:04:3a:70:
10:3f:3c:80:83:a7:e9:16:7e:04:52:aa:4e:82:fb:5d:ba:6c:
6e:a3:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org