Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/BDw__CEfTe9_PZ_4vUtlxP05KOk.roa
File: BDw__CEfTe9_PZ_4vUtlxP05KOk.roa (raw, json)
Hash identifier: Q5xIG8Omh0jH9Stzauuwee6joPrl4WP3e74yfdDuEU8=
Subject key identifier: 04:3C:3F:FC:21:1F:4D:EF:7F:3D:9F:F8:BD:4B:65:C4:FD:39:28:E9
Certificate issuer: /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial: 018CC5014608F20F81955AC534FD8287ABFA
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/BDw__CEfTe9_PZ_4vUtlxP05KOk.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215906
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:46:08:f2:0f:81:95:5a:c5:34:fd:82:87:ab:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=043c3ffc211f4def7f3d9ff8bd4b65c4fd3928e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:d4:3c:6a:d4:6a:84:91:16:2b:bd:8a:66:
e7:0f:95:16:8d:bb:39:1f:a0:56:5a:88:17:45:a7:
41:e2:31:94:b9:c0:f1:ff:17:fd:28:70:f5:03:33:
c3:13:13:04:29:ac:32:4e:a7:fa:69:4f:45:a0:cb:
d8:2a:24:4a:8a:03:64:85:bc:92:22:95:b7:05:db:
9f:2d:59:29:22:54:0e:cd:73:9e:d5:b8:96:0a:a4:
00:84:3d:c9:0f:64:8a:e3:b3:53:1b:0b:fd:88:b4:
d0:dd:b6:4a:e7:ec:74:15:16:cf:b4:15:e2:1f:0b:
7b:ef:54:a1:03:99:88:cc:a2:e3:3f:df:c8:6c:15:
d8:93:cb:68:f1:84:aa:bf:31:a9:2b:de:13:91:df:
b9:e0:f9:27:77:c4:13:24:a6:7d:9d:8c:7b:8a:a8:
c4:8b:7c:5f:0f:79:c2:ad:42:dc:ac:c6:df:e2:39:
7e:8a:96:4f:28:fc:2a:6e:1f:20:ee:c2:e0:b6:98:
ca:10:88:91:ed:a5:e0:4d:69:3e:11:96:fe:1b:fb:
17:19:39:da:0a:b1:a6:2f:a4:e9:db:5b:5e:ba:16:
de:0e:67:31:d6:56:b7:ad:4c:44:76:82:78:ae:f3:
ab:4e:c6:80:f7:47:71:7b:e6:b3:cd:ef:df:70:33:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3C:3F:FC:21:1F:4D:EF:7F:3D:9F:F8:BD:4B:65:C4:FD:39:28:E9
X509v3 Authority Key Identifier:
keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/BDw__CEfTe9_PZ_4vUtlxP05KOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b1:39:5e:3d:e9:d7:8f:b5:e6:02:73:fc:87:e1:f6:f0:6a:
fe:16:dd:4d:1c:72:b3:d4:05:23:c5:d1:f7:65:46:e0:37:a8:
2a:7b:13:58:57:da:81:ad:d5:80:44:10:04:16:65:45:8a:0b:
2e:8f:24:46:11:ec:ee:02:0d:f1:7b:e3:c7:01:f8:38:59:c5:
27:f4:23:26:b0:27:1d:ad:ff:c6:91:ef:6b:22:66:93:4c:23:
51:19:49:7d:0a:68:5c:5f:f3:96:93:d0:2a:e6:22:78:52:d3:
40:b6:cf:c3:61:d0:4c:76:11:e5:5b:bf:10:39:0b:71:a6:1d:
55:17:ac:fa:b2:cd:c0:22:2a:29:2e:b0:b4:91:88:16:cc:5f:
8e:e3:bb:df:6e:e0:2a:33:e3:87:0d:e1:f8:dc:b5:66:1f:8d:
9b:5c:57:16:0c:cd:b6:b9:3f:e0:31:a0:40:1a:df:5d:78:6b:
aa:35:e7:34:7f:d4:b2:93:db:a1:77:4f:be:60:3d:b3:3e:60:
52:30:5e:f3:61:70:75:7a:9b:cd:38:f1:c6:59:8b:20:29:84:
3c:ff:b6:3f:4b:07:94:3c:db:c9:b5:31:e0:bf:04:c6:a2:f8:
c4:da:36:7b:11:01:cd:65:9a:59:6d:c9:ee:51:ac:69:f3:21:
fd:0b:af:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:48 2024 by rpki-client on console-ams.rpki-client.org