Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/bLRMz2GlMx8VKc392KiXkMNHt28.roa
File: bLRMz2GlMx8VKc392KiXkMNHt28.roa (raw, json)
Hash identifier: WlccaTgUF72Dfrw4sEjgaDx1lYxvZWv6MLwUxhMTHak=
Subject key identifier: 6C:B4:4C:CF:61:A5:33:1F:15:29:CD:FD:D8:A8:97:90:C3:47:B7:6F
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184E635FFDAD3FC96E1ACDED3D9A26459CE
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/bLRMz2GlMx8VKc392KiXkMNHt28.roa
Signing time: Tue 06 Dec 2022 06:53:29 +0000
ROA not before: Tue 06 Dec 2022 06:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 193.176.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:35:ff:da:d3:fc:96:e1:ac:de:d3:d9:a2:64:59:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 6 06:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cb44ccf61a5331f1529cdfdd8a89790c347b76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:56:ce:51:06:a8:38:8c:9f:5b:1e:14:5e:
ee:69:da:58:9a:ac:e2:9f:9f:c0:f9:c3:9d:f7:78:
61:19:76:76:81:4a:10:b6:61:07:45:3e:ba:4a:f0:
1b:d5:e4:4f:23:68:db:0a:41:94:3c:1c:c1:f9:3f:
26:ce:e8:40:11:60:4b:f2:db:57:21:38:52:f5:76:
e5:7d:d0:4d:66:a6:db:3d:6b:b6:5f:89:fd:20:ea:
a2:84:b2:64:0d:84:f1:46:47:1f:e9:dd:0a:21:b9:
0a:61:ff:78:69:e7:dc:14:29:4f:b0:55:b6:5a:e7:
19:d5:f8:cc:13:be:ac:22:89:eb:86:92:2e:05:ec:
f2:ee:d2:27:76:99:61:00:d8:db:cc:ae:77:4d:71:
fc:a3:44:6c:dc:92:79:73:78:98:30:ba:1c:db:83:
ed:75:02:ae:66:5a:9b:ce:e2:9c:ae:66:e0:79:41:
ae:d7:82:c6:33:72:c3:c3:55:1f:df:03:03:77:11:
09:07:9e:49:a7:fa:f5:9a:49:c6:88:39:be:6d:b9:
63:fd:dc:fd:ed:c0:e4:21:1f:4f:58:a2:32:6c:b5:
cd:e8:dd:9d:2d:66:84:53:54:0a:99:b4:b1:07:35:
90:86:7b:d7:35:b7:8c:7c:4b:99:71:28:b8:fb:b5:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B4:4C:CF:61:A5:33:1F:15:29:CD:FD:D8:A8:97:90:C3:47:B7:6F
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/bLRMz2GlMx8VKc392KiXkMNHt28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.129.0/24
Signature Algorithm: sha256WithRSAEncryption
55:51:90:aa:a8:27:15:15:99:34:b0:11:46:77:07:86:48:af:
b7:c2:85:3a:3a:36:01:7d:d6:3f:b9:cc:ee:99:89:80:a0:f0:
f6:d9:c0:3d:91:a8:de:3d:43:90:15:04:ef:15:c7:5e:36:87:
e6:0e:7f:45:7a:ae:da:6b:aa:0e:e3:30:24:84:3e:18:cf:56:
1e:a4:2b:8c:1a:ce:6c:3b:af:9c:5d:31:ec:2b:4c:54:05:f1:
27:2d:ca:a1:68:56:cb:43:cd:c5:b5:c5:93:5a:94:68:d1:fc:
e7:99:d3:33:75:2b:42:94:ff:00:67:fe:43:f4:28:7e:17:79:
4c:75:48:81:ea:11:1b:27:53:dc:b7:2d:b4:53:e8:b8:fc:6c:
ad:8a:91:ac:6f:f0:7a:52:80:b5:42:78:37:39:12:96:b1:14:
37:d1:09:56:ee:d5:5e:f6:af:49:a9:b0:e4:12:36:cb:03:2b:
ed:d5:33:dd:f1:21:f1:39:84:c9:18:73:ee:49:a6:90:c7:a9:
37:02:b9:bd:92:7d:a3:b5:18:7d:4a:7c:10:d8:61:16:c7:2a:
13:ac:b2:7c:66:cc:84:15:c5:99:a1:ae:d4:c1:a1:71:03:ad:
bd:aa:bb:17:44:14:5c:50:69:3f:66:43:31:45:79:d8:4d:82:
00:c9:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org