Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/YmQhTbv6Qg32vd7p88RWrdBYf4k.roa
File: YmQhTbv6Qg32vd7p88RWrdBYf4k.roa (raw, json)
Hash identifier: Jsre99pT6MopcVxUGKem4/iDgZOam5U1jjOz7S3Ljxc=
Subject key identifier: 62:64:21:4D:BB:FA:42:0D:F6:BD:DE:E9:F3:C4:56:AD:D0:58:7F:89
Certificate issuer: /CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Certificate serial: 018CC5006B2254FCB3039FB8AD5DBD451353
Authority key identifier: 95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/YmQhTbv6Qg32vd7p88RWrdBYf4k.roa
Signing time: Mon 01 Jan 2024 12:29:48 +0000
ROA not before: Mon 01 Jan 2024 12:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 193.56.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6b:22:54:fc:b3:03:9f:b8:ad:5d:bd:45:13:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Validity
Not Before: Jan 1 12:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6264214dbbfa420df6bddee9f3c456add0587f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a9:eb:40:b6:d5:77:86:c0:88:98:7d:09:f6:
67:15:34:c0:fa:94:1a:2b:a5:2a:18:f5:88:36:95:
a3:29:00:c1:21:c1:6a:5b:16:e0:68:ec:13:8d:6d:
45:d8:1c:09:04:d6:10:d1:56:11:9c:67:03:6d:ce:
d2:35:31:d7:3d:fa:df:5a:06:88:5a:d9:00:0b:94:
87:be:01:2a:e6:23:9a:fb:16:1d:6e:7c:bd:4d:28:
42:ca:4b:17:ad:9e:89:59:78:77:a3:0d:ad:70:9b:
e9:12:0e:08:2c:86:02:d6:84:5a:e6:ac:b0:05:7d:
6e:7b:b9:f5:08:ce:33:c6:fe:37:5b:d0:05:12:d5:
e0:39:52:6d:bd:82:67:3c:bc:d1:a6:60:ae:36:bf:
fc:24:5f:b0:e2:66:40:f3:21:02:be:ac:5e:3f:57:
cd:ff:4e:2d:72:f6:8c:33:de:46:b5:51:aa:9a:4a:
1c:6a:3c:0f:82:12:e1:83:19:70:1a:ff:28:5a:b4:
71:a9:fe:5f:63:47:19:a0:93:62:ed:83:1b:fe:a7:
e0:6d:90:43:4c:bd:9e:d4:4d:0b:64:e4:78:65:89:
b0:59:a5:15:65:db:e1:32:62:69:39:b8:5e:58:48:
3e:91:23:d0:57:37:0c:99:17:7f:bb:7d:f9:a9:f0:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:21:4D:BB:FA:42:0D:F6:BD:DE:E9:F3:C4:56:AD:D0:58:7F:89
X509v3 Authority Key Identifier:
keyid:95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/YmQhTbv6Qg32vd7p88RWrdBYf4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/lRyLQG6CmacpTdciRXD8MrYp3Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.116.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c2:69:29:ee:71:6f:9d:b4:79:3e:dd:c3:d3:47:f9:b8:b7:
e5:f9:d0:24:58:bf:7d:93:51:1f:6c:6f:1f:77:37:9a:ed:27:
9e:4c:29:a2:32:60:e5:27:9b:d8:27:7e:7a:d4:41:a9:41:16:
a0:ad:cc:d6:1f:00:2d:db:55:96:dc:e4:79:59:b9:05:66:dc:
3b:19:d4:1e:fa:c6:56:90:03:61:77:e8:4a:72:cd:09:7b:37:
dd:17:97:2f:2a:c8:36:9b:5d:84:e1:b7:f1:f2:4b:4d:6b:66:
56:13:12:4c:1c:01:be:79:33:94:98:85:91:59:35:4d:53:50:
b0:ce:a7:54:a5:9a:34:9f:d6:79:ef:82:21:50:37:e2:3d:77:
14:1f:26:4f:4b:2a:7c:ae:71:c6:d2:0c:64:35:d7:27:d5:52:
ac:ba:08:d0:00:d2:1f:06:60:b8:1f:06:f4:07:c5:57:3a:2b:
cc:7c:e0:8b:ac:84:3c:d3:ac:7a:96:54:56:89:10:1a:5f:b7:
b2:6e:af:54:4b:84:59:20:e2:7d:ae:0c:b3:e1:9d:ef:db:74:
30:99:1f:3c:31:b4:14:17:c1:b8:61:4f:a0:3d:f8:6d:8a:ca:
cf:79:07:0f:f0:1d:16:75:7c:0e:61:50:86:e8:50:3d:9d:4c:
70:11:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:17 2024 by rpki-client on console-fra.rpki-client.org