Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/5adDL3XVldEjP7DefY32EF8fQpc.roa
File: 5adDL3XVldEjP7DefY32EF8fQpc.roa (raw, json)
Hash identifier: c/GoUhGYgmb6aJrM60aAWis3g2tGn7ZtTogk5u1enk4=
Subject key identifier: E5:A7:43:2F:75:D5:95:D1:23:3F:B0:DE:7D:8D:F6:10:5F:1F:42:97
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE941DE2E79DD7ACF24DC5686389C9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/5adDL3XVldEjP7DefY32EF8fQpc.roa
Signing time: Mon 02 Jan 2023 09:44:50 +0000
ROA not before: Mon 02 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 193.109.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:94:1d:e2:e7:9d:d7:ac:f2:4d:c5:68:63:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5a7432f75d595d1233fb0de7d8df6105f1f4297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:95:a4:7f:da:29:35:00:49:b9:3e:8d:53:1f:
f4:35:46:af:b4:14:d6:d5:b8:07:12:29:db:03:1e:
8b:95:8d:21:c0:1b:88:42:51:63:01:de:c5:01:dd:
07:ef:b0:16:24:ef:74:f3:f3:05:b9:57:11:0b:06:
9d:75:e5:85:75:5d:9b:b8:87:7a:a8:d0:71:05:2f:
20:4c:2e:e2:80:44:91:0a:98:49:c0:96:63:d3:12:
b7:c2:18:dc:f6:51:9f:52:c7:cd:cb:ad:a5:87:f1:
34:a2:33:e5:72:e2:3c:5e:0b:8c:94:48:e0:0f:c1:
ff:6a:46:8c:fc:5d:b9:a4:ea:a5:d1:56:cc:5b:93:
e3:53:41:a5:51:1e:ba:b2:10:9d:e6:78:6a:af:ef:
56:eb:5e:9f:9e:b1:c6:2f:2a:2c:d2:eb:21:14:13:
8e:60:c3:3b:61:c6:c8:5e:b1:9f:58:c7:cf:0e:45:
bd:cd:7c:31:c8:eb:dd:13:4b:0d:b6:a5:fe:72:3d:
d0:59:2b:b9:a1:c2:65:30:98:7d:c1:b8:0c:d0:f9:
60:08:bd:a1:1b:2e:fa:da:75:d8:d8:36:8d:81:94:
a1:9e:61:ac:e6:c6:16:5c:bd:9a:81:29:de:0c:cd:
f6:45:29:d8:f3:12:b7:64:97:6c:30:08:6b:e1:a6:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A7:43:2F:75:D5:95:D1:23:3F:B0:DE:7D:8D:F6:10:5F:1F:42:97
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/5adDL3XVldEjP7DefY32EF8fQpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.193.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:97:ab:ad:48:85:9e:4c:b6:ba:f9:b6:50:a3:b7:c5:dc:9e:
91:11:c8:2a:e7:d8:a9:37:83:ac:2b:15:8a:66:58:99:35:1b:
88:3c:20:08:04:50:3d:13:e3:53:20:18:50:93:cc:44:8f:72:
7b:2b:83:cb:99:84:11:8d:cc:55:a0:cc:d7:92:f5:d6:24:68:
15:9d:77:28:5e:b0:f0:88:9e:f3:73:01:c3:47:74:3b:30:0e:
5d:79:48:98:c2:a8:65:60:89:5b:09:c1:3b:13:6b:6e:7d:e0:
b1:18:1c:0d:2a:d2:57:13:7e:e6:11:ff:2f:c0:b8:53:58:d9:
a5:3c:76:d3:a1:08:62:70:3b:c5:9d:e9:bb:12:71:1a:d0:e7:
5b:d0:46:12:9a:d5:99:ad:dd:a6:95:ad:dd:64:04:8f:08:e2:
c1:e3:ae:76:25:ed:87:df:88:3b:76:0b:6b:f3:d0:e9:8d:71:
c7:0c:fb:94:d5:32:59:73:71:c0:36:e7:19:c5:24:01:27:a5:
c0:a4:32:f6:16:33:00:76:aa:83:db:84:49:fc:dd:ab:29:37:
71:39:eb:9b:b8:58:f3:86:46:1a:d4:dd:58:23:ed:3f:b8:36:
3e:2a:cd:1d:35:7a:fa:80:9f:16:68:47:d2:fb:95:17:13:f8:
2d:cd:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org