Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/241a77-46f7-4821-be9f-9ff0f52f10e8/1/ZNwM-fViuGe7uppEAjuE-lOuY_8.roa
File: ZNwM-fViuGe7uppEAjuE-lOuY_8.roa (raw, json)
Hash identifier: Z3MNGzwq1BVbQsGv0BY+SnL7r5SL3FgFq+aZsSMBzuY=
Subject key identifier: 64:DC:0C:F9:F5:62:B8:67:BB:BA:9A:44:02:3B:84:FA:53:AE:63:FF
Certificate issuer: /CN=fff621042cbd0ca8e5d9eb1a334b41a4381cea18
Certificate serial: 018368D3B6CD106B6733EEE3F99FEB8BF656
Authority key identifier: FF:F6:21:04:2C:BD:0C:A8:E5:D9:EB:1A:33:4B:41:A4:38:1C:EA:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YhBCy9DKjl2esaM0tBpDgc6hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/241a77-46f7-4821-be9f-9ff0f52f10e8/1/ZNwM-fViuGe7uppEAjuE-lOuY_8.roa
Signing time: Fri 23 Sep 2022 05:30:48 +0000
ROA not before: Fri 23 Sep 2022 05:30:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 193.8.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:68:d3:b6:cd:10:6b:67:33:ee:e3:f9:9f:eb:8b:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff621042cbd0ca8e5d9eb1a334b41a4381cea18
Validity
Not Before: Sep 23 05:30:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64dc0cf9f562b867bbba9a44023b84fa53ae63ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:2e:cb:06:40:cf:c9:2e:90:f5:e3:7e:f2:
23:34:0f:50:36:a9:ac:dc:6f:81:58:fc:d4:a2:1e:
3e:14:28:1d:bb:31:99:04:6f:5f:2c:ad:3f:eb:b6:
a6:3a:08:05:35:c9:3b:10:17:9e:f8:04:c9:7d:74:
eb:74:6d:f5:a9:c2:79:46:3f:09:9e:d4:0b:1f:c3:
16:9f:8c:3e:65:9c:ce:70:e8:0e:13:32:84:ed:39:
ac:7b:e0:60:42:4c:98:8e:56:aa:fb:6e:ba:60:e8:
8d:60:21:09:ce:64:cd:be:25:b0:e9:df:59:91:af:
64:19:87:66:90:f2:1b:1f:a5:66:0a:ed:87:c1:18:
8f:0d:53:c8:0c:a0:a3:72:6e:d5:e4:28:42:35:b6:
dd:6f:b2:96:1e:40:0b:9b:9d:0c:33:77:86:31:12:
0f:0b:ec:0d:50:6f:32:61:37:a0:53:1e:a5:41:c5:
44:84:ec:69:30:4c:b9:bf:9c:fa:9e:89:f6:89:01:
dc:b7:d9:50:49:a1:a9:35:f4:a6:a6:f3:c4:04:5b:
de:3b:2e:cb:c8:72:a7:f5:1c:96:83:82:6c:2f:6e:
c6:f5:65:7e:68:c3:7f:e8:5f:b6:b3:3d:34:39:06:
81:c9:46:7d:60:8a:5c:34:cb:3e:43:cb:2b:dd:79:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:0C:F9:F5:62:B8:67:BB:BA:9A:44:02:3B:84:FA:53:AE:63:FF
X509v3 Authority Key Identifier:
keyid:FF:F6:21:04:2C:BD:0C:A8:E5:D9:EB:1A:33:4B:41:A4:38:1C:EA:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YhBCy9DKjl2esaM0tBpDgc6hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/241a77-46f7-4821-be9f-9ff0f52f10e8/1/ZNwM-fViuGe7uppEAjuE-lOuY_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/241a77-46f7-4821-be9f-9ff0f52f10e8/1/__YhBCy9DKjl2esaM0tBpDgc6hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f4:d1:b1:b3:63:e8:3c:17:19:15:66:58:7d:4c:07:a2:fc:
5b:1c:29:5f:4c:82:8f:aa:43:c1:24:c4:e3:c0:ca:63:cc:e6:
00:6a:22:50:1b:13:49:a9:67:ff:51:d1:53:de:4c:c9:e0:b4:
04:df:c7:9a:37:ab:db:7f:82:6d:87:21:2f:f0:74:a6:d6:79:
46:3a:51:40:9b:aa:f5:9d:e0:d0:cf:94:3d:aa:e6:04:03:c7:
f8:95:56:8a:e1:6b:ce:2d:da:b0:f9:b6:d3:a6:44:bb:0c:a1:
b2:e5:3c:c7:c9:0d:e8:78:f5:ff:07:35:5e:94:57:ea:e2:a4:
b2:20:ff:f9:94:91:0d:ba:4d:d9:25:f6:ad:1c:45:8f:96:78:
f0:22:c5:32:07:6a:09:1e:a9:b8:5f:ab:94:35:96:80:6e:ab:
12:2a:16:92:b5:08:91:38:3b:ba:0b:68:b5:ca:2c:9d:ec:71:
10:da:a9:a9:1b:98:b3:86:42:b2:92:89:b3:1d:cf:dd:b1:f5:
bf:8a:c6:92:28:65:90:71:ea:60:2d:23:a3:ac:02:34:9f:74:
9c:e4:b1:4a:3f:b1:d4:b4:4b:68:db:20:d0:86:16:18:32:37:
2d:c8:d1:7d:72:fb:89:cb:20:67:30:90:6f:c0:1a:63:8e:fe:
48:ab:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org