Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/NpFdnHgumq9iZQIWZk-eRcsGveE.roa
File: NpFdnHgumq9iZQIWZk-eRcsGveE.roa (raw, json)
Hash identifier: 8gHPmlIH7su+LKVPtJ5Zw3KAeqSgQG3x8WOXrc331vA=
Subject key identifier: 36:91:5D:9C:78:2E:9A:AF:62:65:02:16:66:4F:9E:45:CB:06:BD:E1
Certificate issuer: /CN=c43256a81911d13cd80c53673e0517ff225c6d08
Certificate serial: 01824AE9A88EA5A63F966F0ACEBC0997723E
Authority key identifier: C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/NpFdnHgumq9iZQIWZk-eRcsGveE.roa
Signing time: Fri 29 Jul 2022 17:03:23 +0000
ROA not before: Fri 29 Jul 2022 17:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 193.239.146.0/24 maxlen: 24
193.239.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:e9:a8:8e:a5:a6:3f:96:6f:0a:ce:bc:09:97:72:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43256a81911d13cd80c53673e0517ff225c6d08
Validity
Not Before: Jul 29 17:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36915d9c782e9aaf62650216664f9e45cb06bde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:bd:78:59:09:0f:b4:a8:a3:ac:43:9e:b8:
fe:8a:7b:9a:70:a5:63:68:e5:15:1e:10:8d:81:6d:
73:74:ae:7a:5b:b4:0e:0c:58:31:d1:7d:55:57:ff:
df:1a:a4:94:cc:54:df:f2:e8:a7:ad:45:59:13:d9:
0d:ff:cd:81:ef:2a:db:43:e0:1b:d8:e3:17:3f:88:
a3:ea:c3:e4:31:be:fa:0f:c3:e4:48:a9:c9:03:ad:
5d:15:37:3c:e5:77:0e:bc:c3:0a:81:f7:06:6f:84:
00:23:76:a1:17:90:b4:32:d4:7a:b1:e1:8d:de:5e:
71:e7:6a:b8:7a:b9:db:b8:8e:a8:0a:cd:2b:8c:a4:
21:81:e9:a9:c9:1d:81:e4:5e:de:7d:b6:d7:32:64:
f2:c5:25:ba:8d:d3:8e:d1:3a:41:bc:82:f9:e0:0b:
d2:74:5f:0d:66:0b:47:a7:2a:89:3d:80:39:d7:c9:
72:9a:2f:a4:7b:c9:54:d1:23:43:04:09:b3:57:a4:
da:d3:34:d4:65:0d:98:8e:95:c6:7e:32:29:4f:60:
11:c9:c4:2c:11:89:71:13:7a:98:ce:fe:a1:90:7c:
5e:b8:59:2c:98:52:60:99:de:66:db:4e:ef:cf:77:
f9:36:ec:3f:1d:cd:ae:d7:54:df:b3:0a:ac:f5:de:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:5D:9C:78:2E:9A:AF:62:65:02:16:66:4F:9E:45:CB:06:BD:E1
X509v3 Authority Key Identifier:
keyid:C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/NpFdnHgumq9iZQIWZk-eRcsGveE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.146.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:71:d6:bc:b7:f9:b6:f7:8a:e7:1a:e3:78:5d:39:d9:2c:10:
f9:06:2c:85:b5:66:1d:45:b6:6f:33:5a:47:f0:38:22:b3:d2:
c4:5d:4e:89:08:fc:5e:6b:10:74:f1:23:75:d0:d8:e4:ae:25:
53:3d:8b:3f:bd:51:94:09:60:6e:8c:3c:92:8f:bc:fd:55:92:
ab:67:b3:3b:28:ab:03:b3:9b:be:07:b0:88:a1:ea:e6:44:ed:
d3:12:67:bc:ed:f4:74:72:43:66:27:32:6c:03:ff:8a:02:61:
34:e3:37:4f:6d:d2:f5:70:74:fb:be:97:b6:c0:56:f0:1c:bc:
74:d1:d8:c5:9b:3f:bf:e8:ce:0c:51:cc:a2:31:81:21:87:40:
4e:67:bd:7c:9e:02:8b:81:28:ea:93:93:76:eb:9b:0d:5e:a9:
85:fd:25:06:03:3a:84:bf:91:e9:24:d4:81:c3:f6:73:4a:90:
27:48:4e:5e:5a:bb:d6:c5:9b:da:20:a9:46:ac:83:a4:a8:ac:
70:be:37:b3:e5:57:e4:55:00:41:c3:b5:9c:2f:5b:ff:59:4f:
6b:e9:21:46:13:ac:88:83:25:9a:82:ce:fd:26:a6:7d:de:38:
fc:d9:db:b9:44:41:48:01:cb:dc:b8:74:7d:b7:20:24:51:58:
c1:06:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:58 2023 by rpki-client on console-fra.rpki-client.org