Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/1Zx7vsXoV476zDMp9vXPyUg_IDQ.roa
File: 1Zx7vsXoV476zDMp9vXPyUg_IDQ.roa (raw, json)
Hash identifier: MDsmfIZul1a9TCXYB9kPDkAfliUkp6SRZIo0QmYP0o4=
Subject key identifier: D5:9C:7B:BE:C5:E8:57:8E:FA:CC:33:29:F6:F5:CF:C9:48:3F:20:34
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE9804B281A776D7C184E2F2DC0FD3
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/1Zx7vsXoV476zDMp9vXPyUg_IDQ.roa
Signing time: Mon 02 Jan 2023 09:44:51 +0000
ROA not before: Mon 02 Jan 2023 09:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 193.109.194.0/24 maxlen: 24
193.109.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:98:04:b2:81:a7:76:d7:c1:84:e2:f2:dc:0f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d59c7bbec5e8578efacc3329f6f5cfc9483f2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:1e:58:03:c9:8e:07:3b:3d:10:d7:58:1b:
cd:5c:35:de:90:41:fc:50:7a:36:1a:08:2e:ed:cc:
2e:68:b3:86:1e:27:b3:7a:b4:30:7d:e3:a4:3b:fd:
f7:cf:e4:12:07:00:bb:71:a2:0b:f9:8e:09:05:79:
e9:fe:40:f8:f2:ef:46:6d:f5:6f:46:22:bc:ab:37:
78:8b:8b:6f:cd:d2:43:46:45:98:98:df:20:03:9f:
38:6f:ec:44:81:f7:2c:23:91:77:5a:22:bb:95:e4:
be:8e:af:68:6c:0b:c7:9f:5a:da:38:a9:45:0a:d8:
8e:1e:ad:84:c9:82:e1:6b:e3:13:80:17:2e:fd:9c:
03:7c:b0:50:95:dc:1e:24:ce:e8:af:82:90:d8:f9:
b2:3e:b9:7d:09:e9:09:c5:16:09:a8:09:4a:a6:ca:
c3:6c:3c:68:f8:ef:2f:33:03:06:79:05:95:db:f2:
04:b7:be:37:29:b3:68:9b:81:0b:c4:95:fd:f9:59:
e7:b7:44:c4:5b:7f:ec:7c:fe:b8:4e:64:74:11:df:
5f:15:54:a2:cc:b4:39:b9:58:89:ef:ac:6b:04:45:
82:6a:78:7d:9c:e8:6d:8f:52:03:db:d4:0f:5e:1f:
36:63:a5:68:6a:99:b5:1c:67:04:0f:83:b0:b4:28:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:7B:BE:C5:E8:57:8E:FA:CC:33:29:F6:F5:CF:C9:48:3F:20:34
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/1Zx7vsXoV476zDMp9vXPyUg_IDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.194.0/24
193.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f8:ad:26:61:44:83:04:13:ea:b4:bf:76:35:0e:fb:e6:bd:
d7:dd:f1:35:ca:e0:e9:55:5b:8a:71:cb:b2:b8:b1:c5:4e:47:
6a:11:c9:23:be:e9:e6:1e:10:49:a9:89:5d:52:35:31:57:26:
60:5b:57:e5:f8:23:6c:9b:df:69:a3:3f:91:25:15:e0:a6:e4:
2f:76:ae:1e:0b:8c:93:db:bb:f3:c7:19:ea:95:2c:2e:af:73:
a2:8a:8a:38:64:84:df:a8:53:3c:8f:55:83:31:53:20:a3:1b:
36:37:79:a9:49:54:1b:c2:8a:b4:63:38:70:08:fd:ab:d9:3f:
d9:89:bb:a7:91:16:39:6d:44:00:b3:a3:91:64:39:3f:fd:95:
d1:9e:f6:13:60:e4:ae:33:de:da:e4:a1:02:ae:c6:b4:43:e1:
6a:6e:99:51:98:5e:d5:15:bb:c6:24:77:eb:74:a2:3f:20:db:
d4:85:01:b3:da:85:7c:35:e3:ec:0e:a7:80:4c:ab:70:84:6c:
28:7a:41:0e:31:c9:1e:89:d4:4c:4b:35:f0:b7:d4:df:c1:88:
02:4b:b8:2d:e1:03:f2:ee:62:1d:2d:5d:21:3e:56:41:14:7a:
e2:5d:22:92:ad:e4:db:85:3f:ea:d8:8e:60:f7:06:40:53:03:
42:0f:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:46 2024 by rpki-client on console-fra.rpki-client.org