Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/1ajcngSMhhsIet1KJGdkbUhDVPc.roa
File: 1ajcngSMhhsIet1KJGdkbUhDVPc.roa (raw, json)
Hash identifier: vaep+0/XwZCCRHBp3kgq9URdZXuzNUHryrnlCuB039g=
Subject key identifier: D5:A8:DC:9E:04:8C:86:1B:08:7A:DD:4A:24:67:64:6D:48:43:54:F7
Certificate issuer: /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial: 018BFF733295C92786334FDC3314979C0348
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/1ajcngSMhhsIet1KJGdkbUhDVPc.roa
Signing time: Fri 24 Nov 2023 03:50:21 +0000
ROA not before: Fri 24 Nov 2023 03:50:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215970
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:73:32:95:c9:27:86:33:4f:dc:33:14:97:9c:03:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Validity
Not Before: Nov 24 03:50:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5a8dc9e048c861b087add4a2467646d484354f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:68:59:48:04:62:14:e2:65:01:5f:ac:27:
25:0a:c4:63:eb:66:75:46:c9:fc:6d:0a:54:63:14:
b7:f3:aa:a2:3f:30:90:bd:6c:31:e1:91:36:b8:70:
e9:96:2d:84:58:5d:0f:c1:c4:0b:cf:32:ed:d9:c4:
5d:84:87:28:2c:b3:e3:88:23:21:28:62:21:5f:a1:
76:15:22:8d:d1:51:0b:b2:e0:79:80:65:cf:31:da:
7f:58:73:fe:2a:28:4b:3a:93:8b:3f:65:a8:83:d6:
0e:f3:87:92:80:86:b1:c3:f5:aa:6e:d9:19:0a:69:
d0:fb:e9:03:6c:12:a9:96:a8:f2:6f:53:c6:9d:92:
85:21:82:d1:fc:a9:68:73:9d:ee:d4:a3:bc:ba:0e:
91:94:1e:13:5e:41:e1:69:b1:e3:99:71:85:91:23:
f1:8a:4e:1e:14:c8:c6:72:28:4c:65:3c:9c:d4:f9:
1c:3b:03:fc:10:5d:97:1b:78:a1:19:d2:d0:99:4d:
f9:2b:a0:c1:3c:47:a9:22:5d:10:d6:0a:1d:cf:17:
5d:a4:69:ae:da:ec:7d:a7:3f:fe:5d:f4:f1:00:6a:
a1:6b:0d:a5:5a:36:94:2f:61:c7:40:0b:2d:f8:a7:
1d:9a:02:19:57:4e:a9:c2:ac:ee:e6:bd:e1:3f:a9:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A8:DC:9E:04:8C:86:1B:08:7A:DD:4A:24:67:64:6D:48:43:54:F7
X509v3 Authority Key Identifier:
keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/1ajcngSMhhsIet1KJGdkbUhDVPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5a:7c:f8:28:b3:fe:f8:cd:67:70:06:9b:49:28:a3:98:a7:
de:d9:d8:35:7d:46:d2:41:6a:23:73:93:e5:d4:bf:2b:02:f5:
cd:9a:97:13:b4:47:7b:5f:b5:17:04:f2:b2:8f:fc:d9:d7:f0:
e9:bf:52:c9:c1:5f:85:62:4e:78:9e:a2:48:4d:4b:8e:6d:98:
af:28:30:52:65:a4:90:31:cf:63:fe:d2:81:e5:70:09:1e:77:
5e:b3:d8:32:e8:97:4a:bc:55:c2:21:26:a9:09:4e:2e:20:29:
cd:06:97:65:9e:ea:3a:88:97:24:1b:ca:6d:b9:aa:ec:b4:55:
ac:6f:50:99:7c:f5:43:23:d3:f2:e0:da:a3:13:b4:4f:d7:d9:
86:b6:6e:98:f8:ed:2d:08:21:be:a2:50:07:ce:a5:ac:f1:09:
ec:7c:41:98:13:98:80:b6:78:ed:70:5e:f3:6d:ae:32:67:91:
06:96:e2:be:eb:5d:37:97:36:4b:92:1c:f0:1e:75:87:ed:e9:
38:e3:61:5e:48:11:fa:cf:2e:b5:72:53:fd:f5:d7:14:db:a3:
3c:cc:71:d0:84:37:14:09:62:27:ba:80:1f:7f:83:60:3a:8d:
ae:f3:85:a7:23:6f:0e:54:f1:22:38:5c:f5:17:6a:66:52:c9:
94:94:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org