Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/CpJn-F0_dFnw1391n9sXUaZTOGo.roa
File: CpJn-F0_dFnw1391n9sXUaZTOGo.roa (raw, json)
Hash identifier: YlloWhuP1MCe44LCpYFOHKVxqKb4VFvwiIV1oy1Mqrs=
Subject key identifier: 0A:92:67:F8:5D:3F:74:59:F0:D7:7F:75:9F:DB:17:51:A6:53:38:6A
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0189594BDEFA2197C50858E765BFDCD742DF
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/CpJn-F0_dFnw1391n9sXUaZTOGo.roa
Signing time: Sat 15 Jul 2023 11:24:51 +0000
ROA not before: Sat 15 Jul 2023 11:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/24 maxlen: 24
193.108.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:4b:de:fa:21:97:c5:08:58:e7:65:bf:dc:d7:42:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jul 15 11:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a9267f85d3f7459f0d77f759fdb1751a653386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:b5:50:cc:7f:18:55:ad:2d:46:f0:b8:8b:
c5:da:ce:ef:d7:e7:28:fe:b4:f3:ad:1e:8c:b0:25:
7c:c0:d1:0d:c7:62:25:79:d1:80:0f:c8:99:b2:8a:
3c:e9:35:bd:79:c6:65:c0:2b:c7:e8:17:a4:d0:59:
82:0b:28:c6:76:a1:6a:cb:c5:2d:7f:07:4c:5f:73:
3c:b1:97:60:85:b1:bb:13:bf:3f:f5:32:76:56:5b:
b2:09:33:e8:a9:04:bf:4e:85:0c:2f:a1:c0:ec:c8:
b6:a2:8c:04:89:0c:6d:f8:f7:2a:ae:85:a3:f5:8a:
44:6d:1a:f2:fb:a1:08:e7:dc:0e:2d:51:f2:57:9f:
53:29:17:c4:db:90:66:3d:60:cb:11:a4:1f:d3:0d:
6a:da:3d:6c:bf:e8:65:c3:13:ee:e1:89:8f:6e:91:
2e:0a:f1:23:d7:0c:55:d9:b8:96:4a:ad:8b:22:4b:
1d:80:a4:b2:8d:ab:db:a1:f4:21:1b:60:4e:9c:dc:
e7:2f:c8:8d:e2:e7:ba:76:33:f5:eb:21:18:fe:ff:
cc:1d:a6:14:41:3a:ee:00:95:a4:0f:15:da:4d:85:
91:36:7f:bf:99:3e:95:00:23:9a:e6:73:3e:1e:4c:
7f:8d:7f:3f:f8:db:d6:65:be:94:42:d9:f7:02:37:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:92:67:F8:5D:3F:74:59:F0:D7:7F:75:9F:DB:17:51:A6:53:38:6A
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/CpJn-F0_dFnw1391n9sXUaZTOGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
193.108.104.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6b:39:e3:5b:c1:b2:31:f0:0f:aa:e6:f3:ec:a0:39:3a:32:
44:8f:06:72:42:6b:b4:59:38:b7:41:72:85:d8:1b:7b:8a:04:
2c:13:cd:52:58:07:85:42:04:ef:97:f2:71:05:52:76:91:8b:
fc:3a:65:05:58:f5:bf:62:0d:62:de:02:6b:4d:1e:04:52:35:
63:75:50:a9:c1:9c:9a:64:f7:14:e9:15:11:1b:ef:3a:1a:20:
6c:c1:42:09:32:00:d8:e1:04:75:fe:ae:26:a4:24:3f:90:8b:
11:2a:7d:6c:e9:10:4d:82:27:eb:a3:a5:7d:ec:46:c0:87:e5:
99:1b:ce:60:81:df:5f:bc:0f:57:ff:b7:94:fb:a9:1c:6c:41:
5c:24:b7:5a:e5:c8:78:55:c9:a8:f6:a1:02:20:89:8b:dd:ae:
22:2c:82:67:68:60:19:68:d3:04:66:52:4e:92:6e:b4:cf:77:
df:ed:d6:e1:96:35:05:f5:69:49:f0:73:c4:08:0f:5e:fd:5b:
f6:fb:98:9c:d6:ad:db:de:11:1d:47:a8:0f:d2:54:9c:e4:4b:
b0:38:c3:5f:52:29:29:94:b3:61:07:eb:34:e7:7d:55:12:f0:
1a:7c:d0:ba:48:5e:88:c0:18:38:f9:e6:b9:5e:5a:12:cd:b1:
ac:93:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 12:44:35 2023 by rpki-client on console-ams.rpki-client.org