Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/cpXA28Pe4eHgdF-GnwhL-5_xYOI.roa
File: cpXA28Pe4eHgdF-GnwhL-5_xYOI.roa (raw, json)
Hash identifier: vD57dCKZTS1VwpPT4tJxYaETBbXwWvVraL0lySWIxi8=
Subject key identifier: 72:95:C0:DB:C3:DE:E1:E1:E0:74:5F:86:9F:08:4B:FB:9F:F1:60:E2
Certificate issuer: /CN=4725e461a868fcb30f740b9d838c8b425f8a229f
Certificate serial: 01856F8B9E5C0A813E23B95C298B27D0AFB4
Authority key identifier: 47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/cpXA28Pe4eHgdF-GnwhL-5_xYOI.roa
Signing time: Sun 01 Jan 2023 22:54:59 +0000
ROA not before: Sun 01 Jan 2023 22:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 193.202.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:9e:5c:0a:81:3e:23:b9:5c:29:8b:27:d0:af:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4725e461a868fcb30f740b9d838c8b425f8a229f
Validity
Not Before: Jan 1 22:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7295c0dbc3dee1e1e0745f869f084bfb9ff160e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:52:bb:ca:34:cd:23:4e:0a:ef:ac:34:22:
35:e6:2f:81:ad:ee:cc:54:5e:8c:9a:92:de:9d:11:
59:50:ed:56:5e:e5:45:db:ec:cc:2d:05:74:04:b1:
11:38:43:27:13:d3:ea:00:df:8c:19:4e:28:94:a6:
28:ba:d8:31:f2:ed:33:9f:38:60:d5:e6:8f:f2:41:
8f:34:4a:23:af:53:e0:d7:11:81:73:f1:d6:7b:6c:
68:93:24:63:13:2d:35:00:ed:71:07:80:7e:f7:bc:
84:2a:c6:96:44:50:86:b2:b2:b7:dc:05:72:bc:18:
6b:b9:f4:41:9f:32:07:6e:d3:78:bd:83:77:b7:ae:
f1:fb:44:2b:c3:33:8e:60:91:d3:a2:a9:9c:c2:54:
85:a6:ba:e6:d8:ac:c8:2e:56:c5:ed:9f:96:17:6b:
5f:85:67:c2:d1:4a:8a:d2:8d:85:de:0e:1c:e8:6c:
a9:f0:30:9f:f1:ec:49:22:c9:0e:cc:e3:3e:a0:fb:
96:2d:10:37:0e:6f:8a:54:22:9f:ac:84:3f:53:a1:
36:47:b2:42:6c:19:00:84:77:d0:fb:9b:9c:cc:90:
02:2c:ee:6b:e9:1c:89:66:9a:b0:16:91:e9:58:7e:
42:ef:ac:d7:b6:01:db:5a:81:31:1a:f4:4a:ac:23:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:95:C0:DB:C3:DE:E1:E1:E0:74:5F:86:9F:08:4B:FB:9F:F1:60:E2
X509v3 Authority Key Identifier:
keyid:47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/cpXA28Pe4eHgdF-GnwhL-5_xYOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/RyXkYaho_LMPdAudg4yLQl-KIp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
55:97:ee:63:be:62:81:59:a7:ae:11:ac:47:08:89:22:22:b4:
3b:76:f2:cc:2b:0a:37:61:17:f4:1a:40:3c:73:6b:f2:0b:73:
a2:6a:84:59:92:62:f5:41:69:d7:44:a7:59:4f:75:67:f3:bb:
cc:85:26:b7:04:2a:57:f4:0d:9f:be:14:c8:26:94:e6:e9:c3:
7a:76:15:b0:2e:58:2a:2f:3e:ac:45:90:1f:fd:8f:8e:d3:e2:
53:e0:23:84:ff:69:6d:43:28:b5:1f:39:2e:2c:6b:14:25:18:
bf:23:47:72:bf:96:b7:ac:ba:b3:31:82:ce:32:81:6f:67:46:
46:86:8b:bc:a5:9c:b2:bc:90:06:c4:bc:a8:b3:5e:37:20:44:
0a:9c:5a:4d:e7:76:4d:6b:85:a7:43:da:21:7f:bc:1c:5d:84:
73:9e:de:a8:11:62:6b:3e:59:79:e3:f8:f1:ce:a3:c7:81:03:
0f:4d:ac:25:dc:a3:2a:53:21:38:32:cb:3a:78:54:c5:e0:49:
8e:80:a2:26:9f:43:6b:0a:e4:7f:00:0c:b4:cf:ea:ef:c2:24:
3f:12:f7:c3:44:c2:23:93:b8:56:10:23:47:d5:d0:e4:35:57:
e3:bf:70:5c:a3:7a:03:6e:2d:42:64:0c:9f:f6:50:98:b9:7f:
bd:34:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:14 2024 by rpki-client on console-fra.rpki-client.org