Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/jSIdROxnIr3YVkm02x81Q_-hlwc.roa
File: jSIdROxnIr3YVkm02x81Q_-hlwc.roa (raw, json)
Hash identifier: Q51Xmkdb7TGv8xmV2rvaDr4lOAsdXhyw1aVT7s7Usz0=
Subject key identifier: 8D:22:1D:44:EC:67:22:BD:D8:56:49:B4:DB:1F:35:43:FF:A1:97:07
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01852F61F1A1DBD896873745AC0EB0909E04
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/jSIdROxnIr3YVkm02x81Q_-hlwc.roa
Signing time: Tue 20 Dec 2022 11:53:46 +0000
ROA not before: Tue 20 Dec 2022 11:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 193.111.116.0/24 maxlen: 24
193.142.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:61:f1:a1:db:d8:96:87:37:45:ac:0e:b0:90:9e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 20 11:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d221d44ec6722bdd85649b4db1f3543ffa19707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:34:6f:39:5c:1c:f5:ea:1d:4a:a7:5a:56:
0c:84:f6:9d:26:ad:4e:d8:54:f5:e5:63:5e:3b:2b:
3b:c3:c7:06:8d:06:b5:61:9e:d8:08:cc:e7:da:1c:
28:6d:f8:3a:c9:ba:f8:38:bb:a5:59:51:de:94:44:
ac:7e:14:62:24:64:d9:49:d9:f7:38:da:56:8e:a3:
32:12:de:c9:46:ec:9e:ff:56:79:4a:f0:18:a9:be:
f0:17:8e:96:23:71:e5:23:ed:ae:c6:eb:13:fd:dc:
34:98:5a:b9:82:ba:34:a7:0e:2f:ca:73:77:8b:c3:
8a:cd:fa:3a:ee:94:e5:47:31:a0:e0:b4:2f:b6:71:
3a:da:35:d5:a4:f7:c7:ed:17:77:ff:15:71:da:6a:
64:b6:83:36:e8:55:c4:0e:2b:b6:7e:70:62:c3:eb:
42:b7:da:d2:44:53:0c:e0:39:02:4a:8a:7f:8e:f6:
30:b4:e6:aa:4d:57:87:ad:9f:eb:1f:26:7b:6c:62:
31:1a:9c:ec:13:dc:1f:a8:2c:74:c8:eb:5f:7e:67:
a1:cf:18:5e:7b:cd:76:30:b1:ac:b2:36:56:9b:1b:
dd:50:11:fc:f4:1e:43:f1:7a:e7:7a:8e:c0:68:23:
16:88:99:bd:c0:50:4b:46:fa:e1:e2:e9:1b:27:a7:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:22:1D:44:EC:67:22:BD:D8:56:49:B4:DB:1F:35:43:FF:A1:97:07
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/jSIdROxnIr3YVkm02x81Q_-hlwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.116.0/24
193.142.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ca:f9:41:da:0a:a3:97:35:13:99:28:22:12:00:0d:2e:0a:
34:41:0f:41:89:55:cf:05:8b:ce:f5:b9:af:45:0d:4a:d5:80:
b6:dc:5e:59:e8:6e:b0:24:28:b6:8f:d5:ef:95:7d:32:e2:21:
f1:d1:0f:f0:fc:07:c3:38:a7:78:ea:31:41:b2:0d:29:77:fd:
05:df:f5:fc:30:f2:8c:06:ee:a0:73:e7:fb:45:dd:10:2c:7e:
b5:08:8c:65:f0:46:30:6e:e1:b4:32:77:62:77:85:85:6e:00:
a9:16:e6:cb:a1:4c:e6:d2:d2:8c:25:40:c1:10:52:16:5f:92:
21:cc:2c:66:43:35:ea:d2:27:bc:3c:3d:3e:26:0f:d5:2c:1b:
a4:e6:69:a4:f5:65:78:b6:eb:f2:42:e8:55:e8:d1:50:a1:eb:
3f:0e:77:df:ef:ab:e4:39:09:bd:b1:c8:ff:58:02:52:26:d3:
6a:4a:54:57:c5:c3:57:13:11:18:5d:3a:cf:21:e3:36:22:ae:
76:bc:13:e3:b0:c6:91:29:f6:bb:c5:17:c5:ce:72:67:d4:c0:
d2:a9:23:68:4a:71:91:3d:46:ff:1b:5a:f5:1b:ab:f9:c3:83:
8a:38:2a:a8:e2:e6:db:84:1a:84:18:7c:d8:16:06:43:e9:b6:
a1:0f:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org