Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/cxYc9OSKga3MpsK4SgHckun8egc.roa
File: cxYc9OSKga3MpsK4SgHckun8egc.roa (raw, json)
Hash identifier: Xex5j/4fsjtzs0yjCJOL9FmoH9/auaK6odqOy/29bsE=
Subject key identifier: 73:16:1C:F4:E4:8A:81:AD:CC:A6:C2:B8:4A:01:DC:92:E9:FC:7A:07
Certificate issuer: /CN=a89c840d1ef0cd52dcf5faa65335a5dd5054c465
Certificate serial: 018CC4932216DB41028516CEA3BC3802850A
Authority key identifier: A8:9C:84:0D:1E:F0:CD:52:DC:F5:FA:A6:53:35:A5:DD:50:54:C4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJyEDR7wzVLc9fqmUzWl3VBUxGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/cxYc9OSKga3MpsK4SgHckun8egc.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28682
IP address blocks: 193.243.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:22:16:db:41:02:85:16:ce:a3:bc:38:02:85:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a89c840d1ef0cd52dcf5faa65335a5dd5054c465
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73161cf4e48a81adcca6c2b84a01dc92e9fc7a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:77:55:ac:ee:33:27:31:28:dc:64:b4:9e:
58:6a:b5:0e:4f:12:55:7d:04:70:4e:b4:62:2f:a3:
f9:ed:e5:67:10:32:9e:a5:b8:6d:ec:a9:5e:2c:e5:
26:c4:b3:35:28:1c:f0:24:1b:8b:c9:f6:5a:fc:f7:
cc:1b:b1:63:15:db:88:39:21:b7:e4:29:3f:98:b9:
74:2b:49:41:eb:b8:6e:ff:10:5a:4e:08:3c:82:c6:
43:6a:4b:e5:e0:01:c2:a9:c9:91:75:f9:08:58:83:
06:fa:40:0a:11:b7:5e:3a:aa:a6:27:6c:40:cc:7e:
14:28:a3:81:6f:14:77:c1:e6:69:0e:29:c8:70:93:
df:da:1d:d2:31:eb:95:b2:e9:a2:f0:5f:2f:85:6b:
39:6b:a2:dc:d7:90:9f:21:1a:5a:91:9f:f7:1b:40:
e4:d9:53:51:55:39:3c:16:e7:14:67:eb:12:26:be:
0b:4e:c9:fb:5a:0e:80:5a:41:79:6b:95:c5:db:aa:
32:84:92:34:fe:2f:14:d0:ef:02:62:b4:98:18:d4:
e2:bd:8a:aa:d2:cb:df:89:9f:65:e9:e4:f7:1d:09:
73:c9:60:a1:df:13:94:61:bd:41:54:eb:30:ea:ac:
63:3b:85:83:eb:25:28:a6:6b:d6:54:00:ce:c7:28:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:16:1C:F4:E4:8A:81:AD:CC:A6:C2:B8:4A:01:DC:92:E9:FC:7A:07
X509v3 Authority Key Identifier:
keyid:A8:9C:84:0D:1E:F0:CD:52:DC:F5:FA:A6:53:35:A5:DD:50:54:C4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJyEDR7wzVLc9fqmUzWl3VBUxGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/cxYc9OSKga3MpsK4SgHckun8egc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/qJyEDR7wzVLc9fqmUzWl3VBUxGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:8e:30:59:49:77:2d:3c:6c:6f:93:69:b3:1c:d4:0e:d0:4c:
17:9f:96:ef:89:05:c8:36:3d:e6:95:a9:b2:fa:0c:d2:85:c0:
ef:0a:20:d4:cd:42:3b:69:02:de:73:d8:82:a9:be:6e:41:37:
54:e4:a9:55:1b:d1:fc:e8:66:04:90:e0:61:31:f8:98:04:fc:
cd:12:95:9b:96:2b:ed:d5:71:fb:1e:ce:94:c6:a2:58:69:3a:
a0:a0:0c:55:ba:2f:67:fc:bc:c3:67:6b:46:b3:b0:04:10:6c:
be:88:38:38:c8:80:92:b0:37:e4:2b:69:1f:dc:f4:95:06:0b:
54:72:62:7e:15:f9:06:08:d2:c7:94:0b:cc:01:6f:c6:0b:12:
7f:a2:b3:aa:46:ae:a5:96:2c:75:9d:6c:2b:cf:bc:16:db:e2:
b3:55:a5:ec:96:c5:d7:5b:97:06:80:25:5c:84:02:5d:56:cc:
54:fb:6a:d1:e4:59:9d:18:43:ed:2e:a3:20:4c:3e:ca:2d:be:
9e:2e:a4:cb:af:bc:71:fa:e3:9c:65:96:0f:e7:07:52:fa:cb:
ca:cd:0b:b4:03:67:a1:85:27:ea:eb:ef:46:bb:e9:d5:f1:60:
d0:7e:81:9a:2c:96:04:ed:32:91:a5:74:63:bd:a8:a1:8f:47:
09:f5:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:16:12 2024 by rpki-client on console-ams.rpki-client.org