Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/MMHziuq_-7OcW2ZsPd1Lr4JNP6I.roa
File: MMHziuq_-7OcW2ZsPd1Lr4JNP6I.roa (raw, json)
Hash identifier: 9uqHtFWyBuRluDMmWScLvGWiEpgtaerQHy6tocvQRgA=
Subject key identifier: 30:C1:F3:8A:EA:BF:FB:B3:9C:5B:66:6C:3D:DD:4B:AF:82:4D:3F:A2
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01885FDE0149F3B615DEA882456045FC5208
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/MMHziuq_-7OcW2ZsPd1Lr4JNP6I.roa
Signing time: Sun 28 May 2023 00:59:24 +0000
ROA not before: Sun 28 May 2023 00:59:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:de:01:49:f3:b6:15:de:a8:82:45:60:45:fc:52:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 28 00:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30c1f38aeabffbb39c5b666c3ddd4baf824d3fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:75:d6:cf:c9:b8:e9:68:4e:80:cc:e7:a7:
11:c3:7f:0e:f9:8e:13:64:7e:32:be:6d:b3:41:d1:
2a:2e:5e:24:b2:c7:01:f8:0b:c6:e8:05:05:e6:9e:
a6:b1:71:6f:11:31:37:f6:db:26:37:bb:2c:a9:35:
13:31:07:38:24:d6:07:59:5c:e5:fe:06:2b:85:55:
a4:23:b9:6e:1e:0a:e6:b3:b9:6c:3c:3a:6c:a2:30:
7e:1d:32:d8:f0:39:3d:ca:43:66:a6:ef:97:b4:a2:
00:83:47:d2:a2:cd:41:dc:3a:7c:72:e4:c2:4b:2a:
be:3e:f8:5e:1e:2a:89:8f:10:a5:0f:96:40:a3:2e:
e1:6b:4e:ef:f7:33:22:bc:bc:59:15:14:3e:0c:ea:
8d:4e:cc:0d:4e:f9:b1:38:3c:dc:a2:58:dd:87:1c:
af:6a:33:88:f9:c9:7c:f1:be:64:49:fa:16:da:0b:
22:a2:d3:2b:9c:5b:f3:71:0d:21:21:b2:1d:42:c7:
39:bf:6a:03:b1:9f:40:0c:e3:a2:a7:c1:b9:51:ee:
3c:71:38:8c:d6:c9:56:00:f3:80:dd:0b:de:2d:43:
1b:89:bf:12:6e:5d:6e:d0:39:7d:6d:df:7e:55:42:
1d:e0:ed:c1:7c:5b:e2:b8:a7:d1:21:c1:2d:15:fb:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:F3:8A:EA:BF:FB:B3:9C:5B:66:6C:3D:DD:4B:AF:82:4D:3F:A2
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/MMHziuq_-7OcW2ZsPd1Lr4JNP6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c1:d8:17:95:1a:9b:ca:be:cd:8f:1b:aa:86:4d:ee:ac:bc:
55:ea:56:cb:a1:39:c6:a6:00:c5:d9:6e:b9:d2:9a:22:94:7d:
42:60:22:03:a8:7e:80:4d:f5:a3:93:0a:a0:54:e1:af:af:e2:
5e:79:39:50:93:f9:ff:9d:e4:bd:05:4d:9f:4f:dc:eb:84:8a:
1d:7b:b5:3c:ff:17:5d:35:1a:48:ec:3a:5e:a8:9c:47:54:2c:
c7:05:e2:fd:74:37:34:6c:45:e7:3b:3f:be:73:39:12:80:e0:
92:e0:94:bb:87:06:d4:7b:96:39:f1:8d:c8:06:be:b1:86:80:
e5:a1:a9:fd:2d:26:60:83:6b:50:1a:c0:73:40:3b:de:2d:f1:
92:a3:0b:ed:b7:30:61:c1:3b:d7:4d:96:45:1c:1d:ef:d0:cb:
54:13:b1:76:ae:73:aa:d5:32:ee:4b:58:28:86:ac:a8:26:b6:
d8:4b:f1:89:de:26:63:ac:5d:d1:51:db:b8:0e:22:13:31:af:
5b:34:18:4a:8c:8a:fe:5c:b4:7d:8e:8b:ef:ee:dd:7c:b2:07:
b2:f8:c7:e8:a3:98:19:f5:28:d1:00:07:99:8b:05:35:98:5c:
bb:de:9e:ce:64:fe:73:1b:5f:63:26:a0:40:01:af:80:60:2d:
ac:26:0d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org