Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/85d5f3-49b0-4eab-b85f-aca2a26e045a/1/09dmY1I6EvTIcfPWmzrZYqM13uY.roa
File: 09dmY1I6EvTIcfPWmzrZYqM13uY.roa (raw, json)
Hash identifier: WJqjOtfzuLinNaSrHks8f7/yfdKSI+3vxXAcrydNG/c=
Subject key identifier: D3:D7:66:63:52:3A:12:F4:C8:71:F3:D6:9B:3A:D9:62:A3:35:DE:E6
Certificate issuer: /CN=2ca3ccc92fdf3bd3f988126a5786963569306157
Certificate serial: 018570D5375B06237A6E79FA32B49A70A5F1
Authority key identifier: 2C:A3:CC:C9:2F:DF:3B:D3:F9:88:12:6A:57:86:96:35:69:30:61:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKPMyS_fO9P5iBJqV4aWNWkwYVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/85d5f3-49b0-4eab-b85f-aca2a26e045a/1/09dmY1I6EvTIcfPWmzrZYqM13uY.roa
Signing time: Mon 02 Jan 2023 04:54:59 +0000
ROA not before: Mon 02 Jan 2023 04:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200370
IP address blocks: 193.56.59.0/24 maxlen: 24
193.56.61.0/24 maxlen: 24
193.56.107.0/24 maxlen: 24
193.56.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:37:5b:06:23:7a:6e:79:fa:32:b4:9a:70:a5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca3ccc92fdf3bd3f988126a5786963569306157
Validity
Not Before: Jan 2 04:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3d76663523a12f4c871f3d69b3ad962a335dee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:06:86:95:b0:df:58:a9:c3:4b:65:c2:72:
d9:a4:fd:fb:42:50:b8:3b:5c:27:28:ef:9f:af:9c:
5d:1b:90:bd:b2:e0:4c:4f:2c:58:22:f3:6e:39:16:
f1:dd:97:64:ce:c1:75:f3:7f:7c:41:bc:a9:fd:36:
1d:a8:29:b2:cb:76:99:58:d8:7c:66:49:46:d2:0e:
cf:57:2c:38:0c:36:0f:e5:0b:c6:46:b3:39:82:6e:
a6:57:00:58:44:06:f3:a7:ac:05:7b:ce:21:eb:b2:
05:29:4d:58:2b:f0:13:0c:fc:72:c3:d7:f2:23:a4:
92:85:7e:70:a9:7b:87:38:0f:29:f1:73:77:c1:3c:
ee:7a:26:59:01:57:30:2c:fa:52:ba:b3:97:d4:c2:
82:f6:98:be:24:e2:25:e5:47:4a:b9:20:9e:c1:a7:
2d:61:ca:5c:e4:63:2a:48:93:12:ab:cc:86:e8:df:
0e:d8:cf:51:6c:37:0b:57:59:c0:97:06:ef:66:37:
f1:3c:a1:e8:26:00:ad:7a:19:77:c5:29:4f:aa:cb:
d2:f5:3d:46:65:d6:3c:fb:7f:ab:1d:96:5a:1e:1e:
81:56:dd:53:61:c9:d8:fa:6a:50:6f:85:d2:c6:1a:
fe:ca:1b:98:c6:4e:67:1f:2c:40:83:ea:02:09:a1:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:66:63:52:3A:12:F4:C8:71:F3:D6:9B:3A:D9:62:A3:35:DE:E6
X509v3 Authority Key Identifier:
keyid:2C:A3:CC:C9:2F:DF:3B:D3:F9:88:12:6A:57:86:96:35:69:30:61:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKPMyS_fO9P5iBJqV4aWNWkwYVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/85d5f3-49b0-4eab-b85f-aca2a26e045a/1/09dmY1I6EvTIcfPWmzrZYqM13uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/85d5f3-49b0-4eab-b85f-aca2a26e045a/1/LKPMyS_fO9P5iBJqV4aWNWkwYVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.59.0/24
193.56.61.0/24
193.56.107.0/24
193.56.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:55:d7:12:cf:ca:db:a8:7b:0f:08:fc:56:96:96:66:14:aa:
69:a8:e7:0b:a9:88:c3:3d:49:08:82:79:08:1a:56:03:cd:c9:
09:45:f1:09:73:cc:90:4a:5e:45:65:3e:98:a4:3b:b0:b3:f1:
e0:14:89:7a:3b:63:e1:bb:59:fd:a6:c5:10:a1:96:5f:29:f4:
25:ca:ec:3a:95:9f:75:0d:65:ab:2a:e0:36:f3:4c:8e:4b:be:
13:00:cb:e2:cb:e3:09:64:74:27:55:b0:6b:f2:d3:df:5d:44:
3d:c1:36:76:04:96:10:16:f0:8a:aa:75:2b:8e:8d:3d:c8:7d:
f0:eb:88:4d:ea:66:f5:8b:59:34:d9:43:8b:c6:2a:63:9b:e3:
7f:58:37:80:21:c9:4d:cc:11:0f:86:ad:98:c5:f1:e8:52:03:
90:f2:77:c2:69:8d:22:78:60:69:34:11:6a:88:51:f4:70:d4:
af:8c:a4:91:bd:9e:26:69:94:2a:ce:28:ad:bf:15:d9:c5:78:
b7:52:96:26:23:5d:5a:2f:f8:f4:3b:29:80:0a:7b:05:75:f0:
d3:b3:2d:b5:a8:79:5b:01:60:94:b4:b1:5d:bb:30:a4:78:20:
68:ec:74:a2:a9:81:e7:a5:f6:48:93:b5:6f:1f:cb:25:4b:1b:
11:63:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:22 2023 by rpki-client on console-fra.rpki-client.org