Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/ZwEb4pEKYQs9NU95hmiWfyLYwh0.roa
File: ZwEb4pEKYQs9NU95hmiWfyLYwh0.roa (raw, json)
Hash identifier: ELBhXSVhMI10MEgf7uW6j8dqS+eQ/eURawudYHggMWQ=
Subject key identifier: 67:01:1B:E2:91:0A:61:0B:3D:35:4F:79:86:68:96:7F:22:D8:C2:1D
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE972623829990E00B45474DB7478B
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/ZwEb4pEKYQs9NU95hmiWfyLYwh0.roa
Signing time: Mon 02 Jan 2023 09:44:51 +0000
ROA not before: Mon 02 Jan 2023 09:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 193.109.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:97:26:23:82:99:90:e0:0b:45:47:4d:b7:47:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67011be2910a610b3d354f798668967f22d8c21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:16:34:81:b1:cd:ca:b3:9d:84:dc:75:59:3d:
77:70:82:45:9a:e6:f4:1d:28:89:ea:65:c7:65:b1:
ec:67:a8:98:a7:23:ed:99:62:15:a8:a7:f3:10:37:
2d:b1:48:80:81:ab:83:71:4f:b1:bf:53:3e:7b:67:
33:5a:e8:40:0a:c6:8d:fa:ab:10:03:1e:1a:89:6e:
f4:52:b9:20:78:ed:27:ea:33:56:8b:d3:64:7b:83:
17:7e:e5:6e:9e:59:15:37:dc:7a:11:df:d3:ed:80:
7b:6e:b2:92:f0:a6:7d:11:59:13:6a:e3:a1:f9:2e:
f9:fd:5c:b5:1e:f1:fd:99:40:2b:9b:43:91:d2:81:
50:8a:fd:08:73:49:9b:67:20:6d:a1:84:b9:cc:ee:
99:94:df:82:6d:a3:24:0e:12:a4:ce:23:5a:91:0b:
4e:fa:44:99:1e:14:f3:f7:50:49:b0:f3:b1:9f:f6:
df:f9:37:a7:33:2c:24:d4:c2:34:ae:ed:36:c1:f7:
3b:82:8a:00:70:d0:ae:40:bd:4f:c3:4a:8a:7a:84:
eb:eb:a3:44:fc:0b:01:43:ec:a8:50:cb:dd:2d:09:
fa:28:39:98:0b:71:aa:60:0a:53:bc:8e:83:e6:39:
06:65:0f:6c:16:41:95:f9:52:04:54:c0:45:f2:2d:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:01:1B:E2:91:0A:61:0B:3D:35:4F:79:86:68:96:7F:22:D8:C2:1D
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/ZwEb4pEKYQs9NU95hmiWfyLYwh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
98:01:f5:cb:e4:5a:be:bb:67:3c:ad:e7:67:a7:a6:e2:ff:56:
5c:ed:73:c6:b3:cc:f8:16:ac:c5:16:67:39:e8:a4:5d:7a:af:
7d:e3:ee:31:4f:2e:2e:96:ba:8d:3b:e6:4b:42:60:3e:d6:98:
83:bc:84:82:c0:e1:8d:4f:40:11:c1:a5:26:db:4c:ff:57:db:
f0:b3:ac:c7:e5:2f:b6:22:04:50:78:f2:3d:91:77:a5:f7:69:
14:98:5e:99:d2:42:ea:f6:1d:b2:4c:97:0c:90:2e:78:ec:db:
c7:32:47:22:66:e5:51:ee:92:67:87:66:5a:db:7c:b5:b2:60:
69:91:44:ae:f0:26:f9:97:8a:0a:82:04:4b:89:3a:a9:67:3b:
ec:d5:29:a3:7f:08:81:72:66:66:f6:e7:d7:d2:24:20:ff:a2:
c5:dc:e7:cf:0d:63:e4:74:a4:2a:16:b9:e7:e4:c1:27:94:41:
98:62:df:70:3b:f8:61:6f:4d:a9:f8:0f:55:99:0f:e3:c8:1f:
53:14:ac:e4:2b:bf:14:a5:0e:f8:e5:7b:9d:57:34:81:c2:73:
a3:b9:ab:a9:9b:f4:26:03:0b:ce:37:27:1b:19:b0:32:db:e6:
67:0d:f8:c5:f7:39:27:0a:01:56:c3:85:2b:c1:ab:b7:24:a1:
d5:de:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org