Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/vkyrPNrwoeHWyKIJuADQruVBf2o.roa
File: vkyrPNrwoeHWyKIJuADQruVBf2o.roa (raw, json)
Hash identifier: hL8cSBNx1SolhVTeYArj7LZIQndPgwdtxhKdzWpVJwg=
Subject key identifier: BE:4C:AB:3C:DA:F0:A1:E1:D6:C8:A2:09:B8:00:D0:AE:E5:41:7F:6A
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184700ABED2017F6322FB25E48A2703EA8B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/vkyrPNrwoeHWyKIJuADQruVBf2o.roa
Signing time: Sun 13 Nov 2022 08:11:03 +0000
ROA not before: Sun 13 Nov 2022 08:11:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53667
IP address blocks: 193.25.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:70:0a:be:d2:01:7f:63:22:fb:25:e4:8a:27:03:ea:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 13 08:11:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be4cab3cdaf0a1e1d6c8a209b800d0aee5417f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3f:1d:f1:06:1d:66:30:f2:62:c0:7a:86:3d:
41:f9:f0:b3:44:b0:a5:bb:83:20:c9:9d:0d:51:b2:
4b:1c:88:5c:a9:82:d6:6c:93:1a:ed:9d:f2:ce:45:
e6:34:ee:c3:a7:10:3e:c2:e7:14:ee:53:50:43:2a:
13:9d:66:cb:d0:71:c3:1d:cd:15:7c:2d:ed:77:c5:
f6:2a:86:d7:b1:77:3b:3b:51:42:2c:67:ea:08:aa:
3c:b3:5f:16:1e:e1:f3:41:84:51:96:d3:73:7c:14:
57:28:47:79:c4:3a:03:c5:46:5f:c3:66:d6:0b:85:
73:34:cc:96:8f:5f:42:ce:7c:4f:74:01:5f:3f:e1:
36:52:fc:10:3f:e4:a2:b9:a1:75:0c:22:a4:d0:7c:
1e:23:27:b9:2d:3e:9c:0d:3a:1f:b5:03:d4:d5:71:
f0:5d:99:79:ab:27:8a:dd:10:d3:4d:03:69:d1:1a:
42:9b:e4:8e:c3:d5:2e:ec:30:5f:a5:12:fc:81:fd:
ef:26:23:f4:6f:08:f5:47:64:32:8c:a0:93:e8:29:
cb:6f:9d:92:63:2a:59:27:9a:82:80:99:7f:a8:76:
cb:f6:ce:3f:9f:70:6d:f5:a0:6f:4e:dd:72:37:54:
25:ca:d6:f5:6d:60:95:b6:af:47:7b:9b:94:7e:f4:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:AB:3C:DA:F0:A1:E1:D6:C8:A2:09:B8:00:D0:AE:E5:41:7F:6A
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/vkyrPNrwoeHWyKIJuADQruVBf2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2a:39:b0:46:ae:0b:17:51:07:a9:7f:51:9e:97:2b:6e:de:
1a:08:b1:36:1b:dd:22:51:2d:85:62:be:51:c8:07:57:a0:92:
03:ad:71:fe:7b:a1:57:9a:a1:d4:1c:bf:7e:d4:0f:d1:41:e7:
ae:75:a0:0a:d6:1c:1f:19:53:33:0c:a8:49:5c:bb:b3:46:7a:
72:ea:66:59:2b:73:a4:15:27:33:5b:be:c8:f6:33:c5:65:21:
e2:e5:1e:7f:c1:ce:b4:44:8a:d1:9e:f3:3b:f8:62:53:c1:e6:
41:2f:b0:1d:93:e9:6a:ff:db:67:c3:bf:9e:b8:30:f3:77:47:
fd:c0:d5:41:fa:a5:9a:f5:0f:ef:51:a9:bd:35:c3:eb:67:ce:
3d:b9:32:0f:31:9f:b8:d5:40:c7:b0:17:b2:2b:50:ae:e4:ad:
0b:22:ef:79:cd:e1:e1:bb:07:69:36:bb:a6:37:9f:7b:83:f1:
c8:0f:b9:57:6b:ce:b4:a3:11:fc:48:d5:0e:5f:f9:6d:23:37:
e6:37:2a:c1:11:2d:a1:b6:bc:e7:92:77:d8:42:96:c3:c1:d9:
27:ce:2e:36:6d:d1:ec:29:cb:00:2a:bb:9f:cb:4c:c2:50:ac:
4e:6d:b3:35:d8:c8:ed:bd:b1:50:af:29:a5:fb:d9:e9:ed:a2:
33:e0:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org