Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/CsXp523GNrriqyGAkuqyWwi4up0.roa
File: CsXp523GNrriqyGAkuqyWwi4up0.roa (raw, json)
Hash identifier: CSQUclIHltZTPd31PMpVfo2cvz5xGcuNDHv/S8Edc1c=
Subject key identifier: 0A:C5:E9:E7:6D:C6:36:BA:E2:AB:21:80:92:EA:B2:5B:08:B8:BA:9D
Certificate issuer: /CN=7c5d145fbb3c88b43d49f490b6bb39f86105517e
Certificate serial: 0189DB
Authority key identifier: 7C:5D:14:5F:BB:3C:88:B4:3D:49:F4:90:B6:BB:39:F8:61:05:51:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/CsXp523GNrriqyGAkuqyWwi4up0.roa
Signing time: Fri 18 Mar 2022 15:34:07 +0000
ROA not before: Fri 18 Mar 2022 15:34:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43366
IP address blocks: 195.28.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100827 (0x189db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5d145fbb3c88b43d49f490b6bb39f86105517e
Validity
Not Before: Mar 18 15:34:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ac5e9e76dc636bae2ab218092eab25b08b8ba9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:25:91:30:d1:fe:eb:71:21:cc:23:dd:0e:
26:be:59:05:e1:14:ee:79:f4:6f:1a:9b:f0:6f:fd:
42:30:ca:4e:28:8e:cd:f8:f9:e7:3c:fb:10:dd:f5:
b9:2c:f0:03:d7:c1:de:36:14:76:18:30:60:d0:e4:
df:e1:bb:5a:e3:c6:74:20:33:c6:54:b5:f3:4a:f3:
87:6a:36:2b:fc:0b:65:83:5a:f2:b7:3c:e9:cf:6e:
bf:e3:dc:ff:57:cf:25:07:f2:af:2c:76:2a:c6:4d:
5e:81:06:4d:1f:39:df:58:69:55:57:ad:30:cb:3b:
f9:a2:c3:42:8e:0e:bb:46:00:04:b7:9b:fc:d9:31:
50:3c:9b:18:17:e2:cd:9d:50:1d:94:83:1c:46:f7:
70:35:ae:25:ad:89:92:ba:ea:2d:de:e2:49:43:b5:
5f:a9:3e:c7:83:2b:be:e3:e3:33:ff:c0:8b:d9:1a:
2c:d3:dc:d4:66:e6:16:d2:cd:0b:3f:0c:0e:46:5e:
a6:52:63:6e:3b:8a:c7:cb:d8:b3:4d:f6:a2:71:65:
65:d1:17:39:c9:84:18:53:09:13:14:b5:a6:9f:b5:
71:f7:0b:33:da:f5:cb:3d:af:74:0a:37:33:a3:60:
e8:d5:28:e2:fe:6a:76:d1:c7:d2:cb:38:16:59:bf:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:E9:E7:6D:C6:36:BA:E2:AB:21:80:92:EA:B2:5B:08:B8:BA:9D
X509v3 Authority Key Identifier:
keyid:7C:5D:14:5F:BB:3C:88:B4:3D:49:F4:90:B6:BB:39:F8:61:05:51:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/CsXp523GNrriqyGAkuqyWwi4up0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.22.0/23
Signature Algorithm: sha256WithRSAEncryption
70:e0:7b:7c:f2:a3:37:7b:ab:55:c6:7c:52:8e:ac:ad:9a:7f:
e7:d0:f3:35:0c:2e:76:54:91:fb:bd:cd:0c:0b:59:53:78:2a:
86:82:0a:5f:54:15:67:cf:42:5d:c7:13:09:17:25:7c:dd:ad:
bb:6d:a3:14:bf:9d:0e:80:13:9b:ba:4b:ac:7d:b7:fd:29:5a:
05:04:6a:63:4a:af:9d:8b:9a:13:92:e9:9f:91:37:aa:a7:c8:
ef:35:95:8c:a3:ee:14:7f:5b:57:42:3c:18:e1:26:61:a5:54:
8b:55:a3:83:8d:42:9e:e1:a2:69:1f:cb:53:b5:70:df:fd:2d:
33:a2:2c:a3:20:c9:93:bb:29:5c:9a:cd:69:f8:5b:b3:15:bd:
2f:39:88:01:b7:a4:38:07:63:3f:a3:2b:f0:ca:66:a1:fc:ae:
13:19:13:75:1f:93:e1:3d:71:75:79:bf:6b:09:03:04:97:1f:
73:80:c6:e1:ec:2e:b8:39:91:f4:3b:d7:0a:d7:ec:b5:24:c2:
f4:b9:85:21:f9:db:25:8e:51:3c:7a:14:ea:77:a6:4d:d7:1b:
f2:c6:54:6e:1f:7e:49:fe:e5:e3:43:de:ae:95:56:81:a3:4b:
a6:46:58:a4:73:b9:bd:69:68:00:6e:ab:6a:65:52:0f:62:e6:
94:3f:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:03 2024 by rpki-client on console-fra.rpki-client.org