Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/P4ySjAPkjveTGCq5ibeX8HF6ISU.roa
File: P4ySjAPkjveTGCq5ibeX8HF6ISU.roa (raw, json)
Hash identifier: vzIR/A8CWKLT8JwkF/4CIHicuL5jLyx62uSJ3eFx1yM=
Subject key identifier: 3F:8C:92:8C:03:E4:8E:F7:93:18:2A:B9:89:B7:97:F0:71:7A:21:25
Certificate issuer: /CN=4aa7df0a05bdf2ab5f060405d78d2fda00fa9cbf
Certificate serial: 02316C90
Authority key identifier: 4A:A7:DF:0A:05:BD:F2:AB:5F:06:04:05:D7:8D:2F:DA:00:FA:9C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqffCgW98qtfBgQF140v2gD6nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/P4ySjAPkjveTGCq5ibeX8HF6ISU.roa
Signing time: Sat 01 Jan 2022 16:11:17 +0000
ROA not before: Sat 01 Jan 2022 16:11:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34425
IP address blocks: 193.107.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36793488 (0x2316c90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa7df0a05bdf2ab5f060405d78d2fda00fa9cbf
Validity
Not Before: Jan 1 16:11:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f8c928c03e48ef793182ab989b797f0717a2125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:a5:76:a2:d1:c1:e3:19:c8:2c:17:93:40:
10:de:2e:21:62:d7:4c:8e:71:78:e3:a7:33:b4:59:
f0:3d:b6:55:d0:dd:7c:4f:16:2a:b6:de:0b:cf:ee:
23:2a:a5:9c:21:b4:6e:58:e8:c4:2d:0e:12:f8:d1:
a6:7c:5d:f2:c6:fc:c4:0c:90:26:49:02:43:4e:ce:
29:98:b1:5a:f9:fe:c6:cf:c5:62:02:70:64:37:e3:
e4:eb:ca:d3:27:52:e7:66:88:78:ff:44:cf:db:40:
17:69:59:77:35:46:3f:2e:a7:e7:28:33:95:6f:80:
4e:2d:d5:2f:b2:95:c1:ce:4f:c4:29:64:59:97:95:
3c:b5:bb:eb:7a:90:4d:b2:5a:66:3d:ca:10:5b:25:
c0:ac:94:ac:88:01:c1:f2:2f:cf:5f:91:56:b1:11:
8e:43:e8:b0:44:2c:23:ad:de:ca:d8:e3:38:bf:36:
5e:b7:2a:87:90:7c:b4:21:09:5d:bc:87:c7:26:61:
38:b1:46:54:cf:11:31:ef:18:41:18:17:89:ee:c4:
6d:9d:05:6f:b4:20:e4:19:0b:89:7c:72:29:dd:ef:
61:0a:6b:a2:f9:1b:fc:bb:d6:ba:10:cf:32:45:9a:
6f:ea:4b:e4:9d:bd:8d:2a:96:2b:11:06:79:4b:65:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:92:8C:03:E4:8E:F7:93:18:2A:B9:89:B7:97:F0:71:7A:21:25
X509v3 Authority Key Identifier:
keyid:4A:A7:DF:0A:05:BD:F2:AB:5F:06:04:05:D7:8D:2F:DA:00:FA:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqffCgW98qtfBgQF140v2gD6nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/P4ySjAPkjveTGCq5ibeX8HF6ISU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/SqffCgW98qtfBgQF140v2gD6nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b7:b5:8f:f7:da:1c:df:c6:9b:91:68:31:37:1b:69:43:5a:
67:01:9b:73:eb:4d:65:e8:7b:20:e1:4a:66:e3:15:78:cf:cf:
07:04:35:bf:79:c3:4c:f5:15:84:9f:90:31:60:3d:f0:3a:00:
9a:a0:2a:78:0e:e5:48:58:48:46:90:86:a6:2a:b7:0a:02:7a:
ba:b6:a1:fa:75:61:f0:55:9c:17:c1:83:96:08:bb:67:15:e1:
2d:00:5c:f1:78:d3:df:c1:fb:b7:1f:72:19:61:87:90:74:8e:
7c:62:f0:70:93:c1:8b:70:a4:3b:61:8c:92:e3:4e:ba:11:f7:
41:b1:d6:5e:aa:fc:44:35:d8:40:d9:e7:59:a3:50:15:0a:aa:
dc:5f:21:f7:b0:46:6d:63:fd:77:41:84:fc:9c:ba:1c:54:7b:
3d:c7:5d:65:c5:cc:3a:a7:60:6e:1f:c0:42:48:65:5f:54:23:
75:48:fd:c4:ab:b2:b3:ea:91:4a:b4:59:75:c6:0a:7b:a4:f8:
39:d9:c3:42:a0:58:9a:fb:21:5e:08:c3:ff:52:ca:a7:b9:be:
71:4b:b0:7c:ed:aa:1c:b1:60:a3:9e:f8:a5:49:c3:05:bf:bb:
1e:33:bd:97:a8:60:e0:b3:ca:85:81:c5:ee:35:f3:bb:2c:26:
9f:55:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:29 2024 by rpki-client on console-ams.rpki-client.org