Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/f8h-mo0D-rqqnBXwY8GVyt-GBPU.roa
File: f8h-mo0D-rqqnBXwY8GVyt-GBPU.roa (raw, json)
Hash identifier: SXlXgFFS3KiF3k0UaKmPbzw8mMBXZLiuUgirYewjgcI=
Subject key identifier: 7F:C8:7E:9A:8D:03:FA:BA:AA:9C:15:F0:63:C1:95:CA:DF:86:04:F5
Certificate issuer: /CN=21dedb57e56dfb8d97712ee3651cb58106a940a9
Certificate serial: 0205F68D
Authority key identifier: 21:DE:DB:57:E5:6D:FB:8D:97:71:2E:E3:65:1C:B5:81:06:A9:40:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id7bV-Vt-42XcS7jZRy1gQapQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/f8h-mo0D-rqqnBXwY8GVyt-GBPU.roa
Signing time: Sat 01 Jan 2022 08:54:23 +0000
ROA not before: Sat 01 Jan 2022 08:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 193.238.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33945229 (0x205f68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dedb57e56dfb8d97712ee3651cb58106a940a9
Validity
Not Before: Jan 1 08:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fc87e9a8d03fabaaa9c15f063c195cadf8604f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:81:c9:95:d6:c3:8b:cd:30:63:b3:c8:64:
5d:ee:f4:c8:18:fb:18:f2:fb:72:b8:c4:d6:d8:3e:
98:61:b3:3a:22:05:c9:18:2d:ac:94:b1:d3:78:e8:
1b:96:d0:98:73:8b:1e:b7:0f:08:30:c4:0c:79:ef:
dd:ab:d0:87:01:58:00:db:5e:3f:1b:e9:45:f3:c0:
02:70:73:10:4e:28:a9:78:1c:9c:3e:58:67:c5:f5:
92:c0:89:8d:f4:57:e5:63:92:21:b5:9e:dc:29:87:
16:4e:37:8d:99:13:38:68:f8:c5:a1:83:3e:28:c9:
ea:b0:f4:d9:d3:11:69:83:41:46:c6:2a:68:1d:fb:
64:a8:08:e4:cc:ad:3b:09:43:e8:74:88:87:7f:21:
a4:4a:d6:c9:1f:94:ee:df:69:92:e1:25:8a:8b:a7:
26:06:01:3f:c6:cc:a1:7f:4a:30:f5:f6:d0:58:19:
68:c6:26:11:5c:a4:da:28:0f:d3:61:f8:5f:39:b7:
76:df:0c:11:32:60:10:75:da:2f:16:2b:1e:a2:19:
63:3d:70:9c:90:4d:48:0a:8e:f1:08:ca:a8:aa:a6:
6c:fb:57:d0:e1:0f:42:0d:e7:6e:34:b8:ba:e8:e8:
70:20:67:f6:e5:f2:47:b6:c7:9a:92:69:05:ad:ff:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:7E:9A:8D:03:FA:BA:AA:9C:15:F0:63:C1:95:CA:DF:86:04:F5
X509v3 Authority Key Identifier:
keyid:21:DE:DB:57:E5:6D:FB:8D:97:71:2E:E3:65:1C:B5:81:06:A9:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id7bV-Vt-42XcS7jZRy1gQapQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/f8h-mo0D-rqqnBXwY8GVyt-GBPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/Id7bV-Vt-42XcS7jZRy1gQapQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
26:51:fa:12:1a:0b:76:17:c5:a9:ac:01:c6:df:df:e9:df:87:
c8:0b:79:be:76:6b:c8:c2:ba:74:d7:91:d1:d5:0d:d9:ee:4f:
86:14:45:65:39:9f:b3:f0:4e:f8:f5:a5:bd:46:2a:2d:f2:57:
78:f2:54:ad:ce:3d:1b:e9:f0:9a:be:4d:82:23:de:73:d8:dd:
59:e4:a9:fa:18:19:a2:8b:6c:dd:62:0c:64:bd:81:c8:ff:60:
bf:62:bd:c9:16:cb:c6:ae:ce:28:25:f4:db:ce:b6:d8:b0:c6:
e4:52:34:8e:33:6f:29:0d:6b:d8:65:b8:ef:01:1a:9b:3b:dc:
9e:b0:3d:c2:f8:46:47:a6:24:3a:cb:7a:9f:e3:b0:a4:be:f6:
c0:3e:64:f5:38:23:9e:b1:c5:ea:9c:c3:3a:5b:6c:55:ff:70:
6c:c7:94:36:f2:63:c1:59:8a:15:16:3e:af:c4:73:c4:67:30:
26:98:ed:f6:60:7b:91:e8:76:c2:79:b3:ef:b8:a9:b0:b1:f7:
f4:e0:5e:2c:c1:90:2d:8c:3c:ed:26:b9:63:fc:da:ee:13:82:
5e:4e:13:e2:82:03:ad:8c:65:fd:ab:78:26:cf:e3:8d:a9:3a:
f5:3d:9c:be:7f:f4:11:5c:8e:54:d8:e2:87:c1:1d:41:b7:af:
d4:fb:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:52 2024 by rpki-client on console-fra.rpki-client.org