Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zNfOLDzKQq5-7KAH8TtWKJRZbSo.roa
File: zNfOLDzKQq5-7KAH8TtWKJRZbSo.roa (raw, json)
Hash identifier: b0PRQ/RnZ4w6+woBqTuA1FKTkvznds1qCruS1EV31Zo=
Subject key identifier: CC:D7:CE:2C:3C:CA:42:AE:7E:EC:A0:07:F1:3B:56:28:94:59:6D:2A
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 05472503
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zNfOLDzKQq5-7KAH8TtWKJRZbSo.roa
Signing time: Mon 04 Apr 2022 13:45:37 +0000
ROA not before: Mon 04 Apr 2022 13:45:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 193.109.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88548611 (0x5472503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 4 13:45:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccd7ce2c3cca42ae7eeca007f13b562894596d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:89:42:ab:d6:27:96:3e:47:bf:8d:a2:3e:
29:92:8c:34:2d:86:ae:03:dd:ab:ff:c4:ae:c1:c1:
b1:94:a5:a5:51:bf:38:2e:8e:38:0e:f4:2e:b8:c3:
e4:26:93:ac:db:84:fe:3c:0f:da:8e:12:93:26:69:
04:ec:23:91:6d:e0:21:ac:82:76:85:64:d5:30:d5:
2d:3e:4f:cb:0d:81:f9:ab:49:d4:e6:2e:56:98:22:
ac:b4:a8:4a:a6:7d:81:2e:be:f9:da:b2:77:a0:4d:
fb:32:e3:41:c4:2b:fd:5e:3a:2d:72:77:55:30:63:
d9:9b:f5:3f:64:c4:d8:63:ee:a9:5d:e7:2e:37:18:
bf:44:eb:7e:fc:23:e8:1b:9d:84:d1:3f:4e:ff:3c:
7f:e4:c2:51:1f:dc:31:89:68:23:c0:34:71:d8:80:
69:49:27:46:58:b7:a7:09:2a:58:84:70:70:4f:1d:
d7:07:2c:c3:9d:ec:f7:0a:60:70:d3:16:d6:a4:8a:
0e:ae:56:f4:2f:19:8c:2f:33:6f:07:fc:ba:2b:3c:
c1:33:2c:e2:fc:7e:94:4b:af:6f:2d:de:65:16:1f:
70:9d:4b:ff:3a:de:d0:ef:35:2c:ea:a0:91:d3:73:
93:7d:31:7f:68:2c:bb:20:d2:73:29:b5:4e:20:cb:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:CE:2C:3C:CA:42:AE:7E:EC:A0:07:F1:3B:56:28:94:59:6D:2A
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zNfOLDzKQq5-7KAH8TtWKJRZbSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2b:fe:6f:13:96:d9:85:40:05:2c:37:97:99:ff:5d:72:9b:
c1:ef:c6:5e:96:1d:7f:98:b4:be:dc:c3:79:2e:18:40:9b:c4:
a2:a7:2a:f5:30:6a:bc:ca:82:b4:35:4a:a0:07:73:4c:c1:fc:
a6:87:c6:1a:9d:ad:52:57:00:de:9a:b2:aa:a9:f6:b1:d4:fa:
19:08:02:8c:f3:9d:5a:7e:6a:e1:cd:70:43:31:0e:50:8c:53:
30:78:c7:4e:ca:d5:9e:dd:f0:a9:72:46:be:48:56:b9:b9:5d:
94:b9:51:c1:b4:f1:15:c4:99:b7:24:29:52:c6:f1:9a:6b:05:
42:85:ee:2a:04:a2:bf:af:ed:65:03:ed:fe:74:b4:6d:94:f9:
60:a9:2a:9c:8c:9e:86:78:06:ab:27:b0:dc:fc:3c:54:6a:d3:
f6:32:6a:5e:4d:4c:ab:be:87:7f:b0:c2:b4:64:4e:95:b3:05:
da:fb:57:18:52:6b:b4:a9:78:d3:88:77:e1:ba:77:95:8b:27:
53:73:89:f6:3a:ce:20:37:e4:96:e0:b7:f8:dd:b5:d7:05:bb:
48:08:b4:c3:dc:11:11:2a:49:f8:57:1b:39:81:96:b6:27:f9:
22:15:6e:ed:97:fd:78:be:8f:3f:5a:6a:56:86:29:e8:3d:dc:
8a:c6:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org