Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/1ckTbo863f7T6Lbqd-1xhfOd3mU.roa
File: 1ckTbo863f7T6Lbqd-1xhfOd3mU.roa (raw, json)
Hash identifier: ZPzbg1XpHKNYyQQrG9ijTNDNpdWzTkmKa1APibehmc0=
Subject key identifier: D5:C9:13:6E:8F:3A:DD:FE:D3:E8:B6:EA:77:ED:71:85:F3:9D:DE:65
Certificate issuer: /CN=3c7d334181cc6a3553f758b7b70e370f2d8b1c0a
Certificate serial: 0181ED4634789526207218AA828020A96E40
Authority key identifier: 3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH0zQYHMajVT91i3tw43Dy2LHAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/1ckTbo863f7T6Lbqd-1xhfOd3mU.roa
Signing time: Mon 11 Jul 2022 12:40:09 +0000
ROA not before: Mon 11 Jul 2022 12:40:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.203.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:46:34:78:95:26:20:72:18:aa:82:80:20:a9:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7d334181cc6a3553f758b7b70e370f2d8b1c0a
Validity
Not Before: Jul 11 12:40:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5c9136e8f3addfed3e8b6ea77ed7185f39dde65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:e2:f4:44:6c:20:e7:9a:97:fc:9b:bf:b4:
f4:f6:2d:0d:6a:e8:cd:93:b4:d1:ca:ab:2f:e8:8d:
5f:19:41:69:da:97:57:fd:07:71:da:16:7d:e6:d4:
b1:29:d4:e9:3b:2f:1c:cc:24:a1:61:43:65:a2:5f:
c3:44:99:ff:b4:97:5b:4f:ed:5c:01:0b:f5:74:95:
5e:82:ca:bf:f8:0b:58:53:46:a4:86:c9:b7:2f:1a:
1a:7e:8b:f7:cd:ab:e8:36:26:47:2a:f3:be:7a:93:
a9:f7:0e:0e:0f:ba:a9:d5:71:51:b1:8f:fd:37:b6:
a5:7d:dc:b4:a2:ec:58:4e:f4:73:2b:b4:f2:c1:35:
09:f0:77:4c:4f:6e:57:b8:b9:b6:8b:37:84:40:89:
71:4c:bc:0f:83:c2:84:5f:e7:ad:08:8a:0c:58:ed:
e5:a0:e6:2e:8f:6a:45:2f:5a:4e:50:57:29:87:79:
b5:27:5c:b8:12:b6:d6:11:dc:95:d6:a8:c2:bd:46:
1c:fb:42:53:c8:ab:88:04:04:0e:9f:84:13:3a:44:
fd:4b:13:49:05:60:43:88:8f:2f:a7:a5:fd:86:ef:
1f:53:85:c7:75:bc:16:3b:95:cd:a0:e9:f1:82:b9:
9f:c9:36:8e:6b:15:b6:57:b1:d0:e3:35:fe:58:b1:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C9:13:6E:8F:3A:DD:FE:D3:E8:B6:EA:77:ED:71:85:F3:9D:DE:65
X509v3 Authority Key Identifier:
keyid:3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH0zQYHMajVT91i3tw43Dy2LHAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/1ckTbo863f7T6Lbqd-1xhfOd3mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/PH0zQYHMajVT91i3tw43Dy2LHAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.127.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2f:ee:0e:4f:8b:be:42:b8:6e:d5:67:9b:4d:b8:a1:75:e6:
78:8a:d6:fa:64:11:03:66:d3:e7:3a:d5:66:fb:81:31:68:bc:
6a:f4:47:8e:f6:78:b0:bb:2a:d5:26:00:9f:f8:19:01:46:67:
9d:90:87:ca:4d:dd:5b:79:0b:62:67:06:c7:de:8d:2c:f3:e1:
b5:b7:61:3f:e3:f4:2e:a1:fc:63:d4:80:a6:e2:0f:d2:8a:9d:
d5:3a:b6:43:0d:33:2a:5b:b3:1d:b5:ec:7b:5b:c6:81:6e:43:
c3:b9:1a:f2:06:fb:76:47:d8:97:18:c3:6d:42:b7:35:91:a7:
3b:2b:f7:c1:ac:c0:ab:9b:e3:c3:9d:66:9c:f0:97:e7:34:7c:
50:56:25:33:62:01:a0:13:3d:b5:95:4d:cb:3e:d4:60:47:2f:
fe:f6:ad:01:43:85:3b:46:dd:b5:5b:d7:1a:bf:3f:2e:2e:41:
47:ae:df:a3:93:fb:ee:e2:f1:76:4b:a1:12:2f:82:4e:ec:0f:
f1:81:32:4e:2b:31:94:f3:5d:d2:4b:ea:a9:f1:3d:a5:a1:93:
40:cb:f4:1a:17:ba:72:70:ca:01:e3:4d:a9:dc:f1:55:04:5d:
f8:7f:f1:05:97:7d:b2:25:f5:2c:46:56:30:fb:28:d4:be:a7:
2e:1a:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:29 2023 by rpki-client on console-fra.rpki-client.org