Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/yr2eYeRvNorEBgMtrUfBpXx5mdY.roa
File: yr2eYeRvNorEBgMtrUfBpXx5mdY.roa (raw, json)
Hash identifier: HAKjBRC401FY44zOJd0agaRFQ2tFvhFLnMN14+aGOEs=
Subject key identifier: CA:BD:9E:61:E4:6F:36:8A:C4:06:03:2D:AD:47:C1:A5:7C:79:99:D6
Certificate issuer: /CN=c43256a81911d13cd80c53673e0517ff225c6d08
Certificate serial: 01856C4140053299F8150B7143BE37F6F341
Authority key identifier: C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/yr2eYeRvNorEBgMtrUfBpXx5mdY.roa
Signing time: Sun 01 Jan 2023 07:34:53 +0000
ROA not before: Sun 01 Jan 2023 07:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 193.228.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:40:05:32:99:f8:15:0b:71:43:be:37:f6:f3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43256a81911d13cd80c53673e0517ff225c6d08
Validity
Not Before: Jan 1 07:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cabd9e61e46f368ac406032dad47c1a57c7999d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:3d:90:97:fa:d0:e5:59:6e:df:86:fb:26:
65:d6:34:a8:b5:72:84:1a:4e:d0:96:cd:4d:25:1a:
e5:84:64:65:06:e9:08:43:12:1e:88:7b:37:1d:f0:
c3:1f:d0:1f:bc:17:9e:2c:91:8e:69:c7:d9:6b:b2:
b2:d4:78:03:b6:86:74:ab:30:5c:26:c8:4e:3a:fc:
69:05:b4:3a:a7:ed:be:20:13:cc:e4:44:67:db:73:
1c:de:51:92:6b:7d:c2:c6:2d:6d:8a:bd:2c:8c:41:
ff:f8:2c:a8:34:bf:00:72:21:ea:72:21:93:be:4e:
65:f8:6a:30:4c:4b:1e:f4:e8:f1:7c:65:93:b3:7c:
2c:83:af:f0:da:ab:fa:38:39:8e:86:3c:6b:8c:0c:
7c:45:43:08:5e:c8:4a:c3:c1:e5:ff:47:af:17:97:
87:55:09:fd:65:ec:df:4c:da:2e:a6:0e:82:a6:e3:
bc:11:64:56:af:92:60:19:52:e0:63:66:e7:62:3a:
f8:1e:3d:10:f5:4e:e4:42:cd:d7:3e:2f:28:88:15:
66:b7:c7:9f:77:f6:89:46:f1:33:7d:bf:f0:d1:5c:
31:6a:27:79:57:9d:a1:f8:6f:f2:29:e3:09:20:9f:
cf:16:df:3a:dc:36:82:eb:f3:c7:00:1e:cb:88:27:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BD:9E:61:E4:6F:36:8A:C4:06:03:2D:AD:47:C1:A5:7C:79:99:D6
X509v3 Authority Key Identifier:
keyid:C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/yr2eYeRvNorEBgMtrUfBpXx5mdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.224.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4b:5b:26:56:19:cc:74:73:70:0a:fd:4a:86:aa:5b:13:86:
5d:6b:2d:22:27:27:e6:88:03:41:a6:d1:ad:22:c2:60:b7:83:
3f:89:5c:ef:15:43:6d:94:11:50:b6:8f:04:3f:e9:d7:d0:ac:
db:2e:5b:d0:85:82:39:67:bf:7d:46:80:4c:b5:56:d2:dc:90:
ed:24:27:c1:57:d4:8c:53:17:68:79:c9:14:b7:fc:bd:51:91:
09:49:27:98:0a:40:a8:fe:10:ca:0d:dd:16:20:0d:c9:08:3b:
96:a2:dc:14:77:8b:65:af:da:3c:9f:d8:fc:68:19:e4:d2:03:
cc:ee:f5:98:94:93:01:ff:60:76:b6:a0:a6:89:dd:f7:f8:c5:
a7:cf:0c:09:d6:cc:70:6d:17:39:d2:8a:ec:f6:9a:ea:e0:72:
3d:bd:ef:53:4a:6f:01:2f:ac:1e:3e:35:9c:15:33:a7:4c:67:
bd:62:48:b5:ac:4b:a7:41:f5:91:1f:46:47:b5:7a:02:b5:e8:
76:08:ab:8d:f8:17:99:bd:ea:4f:19:e2:29:24:eb:33:72:93:
74:c0:12:82:fe:88:0d:61:ec:62:9a:31:bf:a5:06:96:a7:8e:
cf:25:da:ce:f4:7c:5c:a9:69:e4:21:a1:76:16:11:92:97:7f:
eb:9a:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:41 2023 by rpki-client on console-ams.rpki-client.org