Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/i_HJtgD2UZ3p6ChSPsDTQtzQleI.roa
File: i_HJtgD2UZ3p6ChSPsDTQtzQleI.roa (raw, json)
Hash identifier: lgUTDNdnAIx3aopgK5t11DOF2IO8nxLdlgHhgnIbFYw=
Subject key identifier: 8B:F1:C9:B6:00:F6:51:9D:E9:E8:28:52:3E:C0:D3:42:DC:D0:95:E2
Certificate issuer: /CN=c43256a81911d13cd80c53673e0517ff225c6d08
Certificate serial: 01870958CBED9A4F095F0775B8AD16ABE5BE
Authority key identifier: C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/i_HJtgD2UZ3p6ChSPsDTQtzQleI.roa
Signing time: Wed 22 Mar 2023 12:43:46 +0000
ROA not before: Wed 22 Mar 2023 12:43:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212396
IP address blocks: 193.228.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:58:cb:ed:9a:4f:09:5f:07:75:b8:ad:16:ab:e5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43256a81911d13cd80c53673e0517ff225c6d08
Validity
Not Before: Mar 22 12:43:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bf1c9b600f6519de9e828523ec0d342dcd095e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:a1:b6:aa:81:83:ec:7c:1e:ee:d7:e3:05:
ab:72:e0:f6:9e:74:a4:40:a7:93:99:80:6f:21:04:
6e:41:60:02:84:bf:47:23:e1:d3:53:ab:6d:2b:60:
38:e7:b6:8a:63:06:dd:b0:89:9b:af:66:04:1f:28:
4f:2c:05:d0:c6:bb:29:c3:28:b6:70:56:54:28:1a:
62:22:28:b8:fd:ba:82:aa:c7:12:67:95:a9:fc:c1:
f3:27:f0:a8:bd:40:43:85:00:48:c0:37:c1:c3:81:
0b:be:9b:20:a3:13:cb:73:ba:b4:0d:fd:c4:68:9e:
a8:23:a3:98:83:26:33:fc:40:ff:e2:b9:a5:13:e0:
65:1e:84:a6:b3:28:58:c8:84:f6:da:05:42:50:1a:
c5:61:3c:7d:30:5d:40:21:fa:fc:4c:2e:26:4f:20:
6c:e2:17:bb:56:a3:da:1c:06:0e:0b:75:21:b2:d0:
8d:f8:f4:6e:b3:82:bc:da:6f:0b:cd:d6:34:66:fa:
84:4b:1d:54:4c:ae:73:fb:06:a9:68:52:f9:08:a3:
0c:9b:cb:a4:02:dd:72:7b:d6:57:dd:91:28:36:35:
e6:02:ac:d6:b9:b2:5d:dd:63:ce:51:7d:24:b0:7b:
fb:a1:8f:3c:2a:c6:49:d6:46:3b:3b:d5:c3:fc:35:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F1:C9:B6:00:F6:51:9D:E9:E8:28:52:3E:C0:D3:42:DC:D0:95:E2
X509v3 Authority Key Identifier:
keyid:C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/i_HJtgD2UZ3p6ChSPsDTQtzQleI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b4:bd:59:e5:1e:ca:81:45:9d:a4:88:3b:1b:62:26:c9:af:
92:6a:ce:19:2e:9b:65:1c:ce:c1:9a:69:f0:87:46:30:c1:c0:
6b:7e:54:d6:2e:45:42:c4:32:46:07:1b:b2:84:77:cc:f6:45:
59:9b:21:84:3e:47:3b:9f:35:b0:f9:02:f6:8a:e5:7a:88:68:
22:b8:b6:2b:7d:77:6c:5c:da:1a:43:1e:2b:fc:b1:82:d7:84:
f3:28:87:6e:64:ac:74:53:46:96:8b:c4:51:52:42:cf:ff:e6:
ba:5b:af:e3:13:c3:fb:2b:fd:d5:06:d9:73:20:2a:6b:71:56:
ef:de:87:55:a3:ca:68:12:37:97:d2:43:c5:db:94:fc:9a:01:
07:b9:0c:b6:74:a3:2b:f7:b1:de:9d:5d:6a:a3:91:7b:a4:46:
04:7d:11:60:03:f4:98:2d:8c:a9:da:35:a7:de:54:f3:da:ca:
2b:87:23:49:1f:d6:46:51:61:e3:8c:f5:81:b1:47:f8:70:4f:
a2:83:d2:94:a5:1c:9a:6f:54:a6:4a:09:c7:5b:66:e9:ba:8a:
07:45:a9:2c:9c:89:20:3b:1a:22:9b:87:db:11:73:1b:aa:68:
e7:61:b7:ce:33:31:19:ad:13:28:3d:71:08:53:5e:48:95:84:
b1:9e:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:41 2023 by rpki-client on console-ams.rpki-client.org