Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/tCtJh0IZfym3ws2sQ6I2DGSui9M.roa
File: tCtJh0IZfym3ws2sQ6I2DGSui9M.roa (raw, json)
Hash identifier: rlMzgdxK7qebGVbWumBuEk3exefpPjeGk7DwURjhBt8=
Subject key identifier: B4:2B:49:87:42:19:7F:29:B7:C2:CD:AC:43:A2:36:0C:64:AE:8B:D3
Certificate issuer: /CN=b2236dc4844b9e734a53a7034e8adc350cab950a
Certificate serial: 018571FA168FEC3DFFC5E328ED56C61B4B02
Authority key identifier: B2:23:6D:C4:84:4B:9E:73:4A:53:A7:03:4E:8A:DC:35:0C:AB:95:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siNtxIRLnnNKU6cDTorcNQyrlQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/tCtJh0IZfym3ws2sQ6I2DGSui9M.roa
Signing time: Mon 02 Jan 2023 10:14:53 +0000
ROA not before: Mon 02 Jan 2023 10:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59943
IP address blocks: 194.32.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:16:8f:ec:3d:ff:c5:e3:28:ed:56:c6:1b:4b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2236dc4844b9e734a53a7034e8adc350cab950a
Validity
Not Before: Jan 2 10:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b42b498742197f29b7c2cdac43a2360c64ae8bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:75:0c:cd:c8:b0:4e:c4:9d:61:5c:c4:06:
4f:44:8c:96:24:9b:68:17:25:cd:07:b0:1e:63:cf:
59:de:48:4b:af:95:74:1c:59:e9:c3:83:93:83:78:
ab:3d:8f:7d:7c:c2:40:47:93:49:1a:a2:75:29:ec:
0a:96:81:13:77:cf:b7:13:d7:49:a0:1c:df:fd:5e:
0f:e1:b7:e4:d9:87:b1:af:70:9a:27:5e:10:f3:22:
d9:76:43:49:26:6b:63:1a:66:1b:55:81:27:bc:d8:
b7:5b:13:d1:a1:44:8b:ca:d5:84:a9:01:21:04:b3:
af:1f:55:29:2f:3d:53:d1:b3:82:55:0d:a4:e3:2a:
04:b2:d4:72:de:37:a6:a5:d2:3f:c4:a7:a9:2e:c1:
9f:48:99:b9:10:c6:f2:bf:8d:44:c9:a7:ec:ad:91:
db:8e:5e:7c:6b:40:6d:b0:94:4c:01:05:53:f4:14:
d5:10:61:a4:ef:60:d0:c1:08:b8:23:9d:89:4b:e3:
b4:c6:db:79:22:65:e6:fa:27:46:55:61:94:da:9b:
90:64:b2:48:01:3e:c6:84:cb:b5:6d:87:4c:f5:09:
32:d3:5e:d8:d1:18:cc:41:06:7b:a8:58:f9:15:1b:
1a:79:a9:de:8a:04:13:f9:90:d1:a7:c3:de:b4:e0:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2B:49:87:42:19:7F:29:B7:C2:CD:AC:43:A2:36:0C:64:AE:8B:D3
X509v3 Authority Key Identifier:
keyid:B2:23:6D:C4:84:4B:9E:73:4A:53:A7:03:4E:8A:DC:35:0C:AB:95:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siNtxIRLnnNKU6cDTorcNQyrlQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/tCtJh0IZfym3ws2sQ6I2DGSui9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/siNtxIRLnnNKU6cDTorcNQyrlQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.152.0/22
Signature Algorithm: sha256WithRSAEncryption
64:39:8b:6a:56:4d:8c:c5:04:b7:a9:e4:2d:1e:e3:d5:cf:69:
43:b1:26:aa:ee:bd:35:23:aa:3a:62:e9:d6:ec:e8:af:91:32:
f7:38:4f:e4:63:3a:e7:26:14:13:fe:06:dd:c8:d0:70:ef:82:
f9:8d:9e:d8:d9:d6:4d:1b:5a:70:4b:50:71:19:d2:62:24:21:
fc:28:54:3b:fa:19:b7:49:16:45:6e:b8:f4:e4:d6:27:cf:37:
32:f6:d3:40:93:93:bc:9f:63:e9:d6:89:54:3b:ac:d7:f0:aa:
6f:4f:aa:36:6e:95:00:b8:27:8b:8d:a2:ec:18:3b:d2:c6:b4:
3d:ff:5d:f8:6e:0f:a9:de:c5:c6:ab:87:4d:be:f3:e6:c0:58:
98:e4:6f:b7:c7:64:37:16:71:77:0b:78:84:38:53:18:55:66:
99:2f:bb:2a:70:1d:86:18:84:82:14:67:c5:5d:aa:29:2d:63:
0b:05:14:2c:63:db:78:d9:72:f6:23:12:b9:04:a5:87:37:61:
ee:4f:1c:8e:88:09:34:e4:d4:b2:3b:5d:f5:94:e5:ef:ce:0c:
b4:c3:e5:bc:5b:96:42:0a:d9:8c:a5:23:23:77:73:87:02:e6:
1a:12:0f:d3:a7:7c:30:24:ec:a3:10:1d:6f:6a:e5:75:4a:81:
9a:80:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 12:50:31 2023 by rpki-client on console-fra.rpki-client.org