Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/2NuyiE8BWgwVAxkdS14XIQunYB8.roa
File: 2NuyiE8BWgwVAxkdS14XIQunYB8.roa (raw, json)
Hash identifier: crPArSo6OpGkTeKRxFWWOPoQ7j75PrRXTw4xrLEIvaI=
Subject key identifier: D8:DB:B2:88:4F:01:5A:0C:15:03:19:1D:4B:5E:17:21:0B:A7:60:1F
Certificate issuer: /CN=f664945458d3b4d67c1b644082d3754d6690834f
Certificate serial: 0184F8C17B30698B70EF2CC9586412DAF383
Authority key identifier: F6:64:94:54:58:D3:B4:D6:7C:1B:64:40:82:D3:75:4D:66:90:83:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mSUVFjTtNZ8G2RAgtN1TWaQg08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/2NuyiE8BWgwVAxkdS14XIQunYB8.roa
Signing time: Fri 09 Dec 2022 21:19:00 +0000
ROA not before: Fri 09 Dec 2022 21:19:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 193.93.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f8:c1:7b:30:69:8b:70:ef:2c:c9:58:64:12:da:f3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f664945458d3b4d67c1b644082d3754d6690834f
Validity
Not Before: Dec 9 21:19:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8dbb2884f015a0c1503191d4b5e17210ba7601f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:a2:bf:7c:37:41:3a:37:67:5c:ab:e7:9d:
ae:e6:d5:c0:f2:2d:9b:4f:37:6b:0a:ec:b7:70:45:
11:87:4b:b8:7c:ae:2a:6a:02:ec:22:6f:16:80:6c:
e5:03:0c:60:df:03:6b:fc:8e:f1:91:fa:e2:2f:7e:
09:38:45:2c:d6:4e:8e:1d:41:03:09:76:c2:48:c1:
c3:3f:46:81:17:24:00:72:45:36:e0:0a:74:8e:58:
36:16:60:af:73:ba:1a:4a:13:ee:10:f7:43:ee:d4:
a7:52:55:6a:3e:5c:b9:82:05:d5:d5:b8:34:3c:e2:
da:d2:ec:f6:a1:c1:05:59:cb:b3:ab:de:54:e3:66:
b8:88:ae:2b:36:b7:5a:13:9f:64:05:8a:ac:8d:79:
d1:8d:97:17:3b:df:77:d2:63:9d:8b:ff:f1:7d:a9:
29:4e:3f:f5:79:cb:b8:cb:d3:ba:55:24:79:42:6d:
c3:7b:24:ef:5e:94:2d:4d:c8:89:98:7d:ee:e7:65:
f4:9d:66:98:17:8e:64:38:eb:d6:6e:a7:4a:34:03:
a2:93:42:04:05:1e:46:f4:81:e6:79:8d:b1:de:34:
3d:a1:99:58:e8:b5:c6:27:fc:66:ed:c3:42:06:25:
b4:f4:ba:dc:e3:45:39:9d:6d:8a:35:30:6e:7d:26:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DB:B2:88:4F:01:5A:0C:15:03:19:1D:4B:5E:17:21:0B:A7:60:1F
X509v3 Authority Key Identifier:
keyid:F6:64:94:54:58:D3:B4:D6:7C:1B:64:40:82:D3:75:4D:66:90:83:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mSUVFjTtNZ8G2RAgtN1TWaQg08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/2NuyiE8BWgwVAxkdS14XIQunYB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/9mSUVFjTtNZ8G2RAgtN1TWaQg08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.152.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f6:3a:d5:a8:c4:69:2d:09:a5:8a:8b:e1:d4:ae:09:48:d5:
4b:ce:70:fd:a1:b6:aa:15:6e:e7:bc:10:70:1f:50:77:4a:4e:
d6:58:42:91:dc:ea:59:80:91:c4:10:6d:47:c7:7e:28:0a:36:
aa:aa:2c:1d:a0:e0:29:7c:78:3a:78:96:6c:c0:b6:30:1b:5c:
e4:f2:95:86:ee:e7:ce:1a:cd:bc:e3:c5:7f:b6:dd:66:07:7e:
b1:ab:46:1b:33:f4:a6:ec:37:40:23:36:25:9f:16:0c:15:ed:
7e:16:f0:d1:40:a0:86:85:ea:1c:47:1e:2b:a9:73:68:3c:4c:
6e:e9:b4:be:50:29:7d:5d:b7:dd:7f:cc:a3:73:8e:03:ce:f8:
42:8d:b3:85:31:0c:dc:0f:5e:f4:0f:25:d8:3e:17:60:43:f1:
2c:fe:f8:96:f7:2a:e6:24:9e:34:d9:a2:65:1a:77:ca:99:e6:
9b:3e:b6:ea:9f:90:e9:2a:9a:1d:b8:84:a0:2a:39:f8:7a:8d:
c4:f1:15:6f:01:66:00:7d:0c:a7:91:8f:1d:3b:a0:e5:ae:33:
5f:71:7e:d0:d8:6f:28:f5:9c:e1:dc:23:83:2d:3d:22:a3:59:
d8:ad:76:e7:d3:47:24:54:21:a7:44:20:e9:b2:71:7d:60:d4:
87:3c:9c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:03 2024 by rpki-client on console-fra.rpki-client.org