Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/JDZb27XNLE-INwsbUs-e8iAaZyk.roa
File: JDZb27XNLE-INwsbUs-e8iAaZyk.roa (raw, json)
Hash identifier: GmXvSW1/EVmtZnxAbNrLb0zvXDLxRK3QSpICkKLJAdE=
Subject key identifier: 24:36:5B:DB:B5:CD:2C:4F:88:37:0B:1B:52:CF:9E:F2:20:1A:67:29
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01856D13DF34FE2D9B55DBA544AC810399F7
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/JDZb27XNLE-INwsbUs-e8iAaZyk.roa
Signing time: Sun 01 Jan 2023 11:24:56 +0000
ROA not before: Sun 01 Jan 2023 11:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62563
IP address blocks: 193.108.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:df:34:fe:2d:9b:55:db:a5:44:ac:81:03:99:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jan 1 11:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24365bdbb5cd2c4f88370b1b52cf9ef2201a6729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:ca:94:c6:96:7f:f6:5a:50:5d:86:b2:49:
fa:92:19:ce:1f:3f:c0:d2:82:bd:bd:17:a5:cf:42:
c2:95:e0:f1:03:63:a5:45:6d:fc:d8:05:f9:72:1c:
55:9e:81:60:5c:c4:22:d7:30:9f:35:9a:15:1c:13:
90:cf:38:98:07:2e:ed:ea:8b:9e:b4:7c:ab:e7:98:
7a:33:79:c0:b1:28:a6:d8:19:61:32:a4:e1:6c:b3:
3f:82:bd:69:3d:e4:d9:a7:75:a0:ca:55:c6:f8:27:
7e:dc:4c:75:b6:11:d1:12:9a:e3:7b:6b:5c:ff:7c:
cc:92:d5:e1:83:2d:45:1f:fd:16:25:1c:e3:9a:b0:
e7:b9:50:37:a8:b6:72:e3:e1:2a:4e:0f:e2:2a:b1:
4b:16:91:23:b6:5f:69:b5:50:e8:df:bb:ea:45:5e:
93:13:ce:e1:74:10:6c:86:51:0e:fb:d4:cc:58:52:
c7:51:09:d4:ae:c7:69:99:0d:f8:b3:c4:f8:87:7e:
21:12:ab:ed:88:22:5c:74:a0:9f:c4:72:05:98:fd:
8d:be:b7:57:ef:00:41:0c:5a:64:63:64:a9:c5:13:
cf:83:72:1c:07:c8:13:0f:08:11:83:5d:40:65:08:
99:b1:d5:65:d1:66:ae:fd:b7:d2:a5:5f:af:05:52:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:36:5B:DB:B5:CD:2C:4F:88:37:0B:1B:52:CF:9E:F2:20:1A:67:29
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/JDZb27XNLE-INwsbUs-e8iAaZyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:07:e7:16:66:33:40:93:37:4a:1a:8d:90:76:4f:19:c8:25:
f8:ea:d2:5c:36:d4:bf:21:86:3a:73:6e:e5:db:bd:f3:b4:65:
9b:e6:d1:63:65:61:d9:48:c5:e4:9d:f8:ec:9e:56:72:e5:ab:
c8:a0:4e:c0:79:83:47:5f:2e:2f:bf:d4:2b:09:57:e4:d0:2b:
9e:81:42:00:50:c8:e9:1d:af:31:ac:6c:7b:98:ef:6a:b7:f3:
24:a0:c1:d0:42:bf:f0:6c:1e:b0:3d:55:7f:c7:4f:da:ff:23:
3a:6d:66:ba:d3:cf:55:15:b8:20:15:3c:66:66:d0:00:ed:f5:
20:27:ec:a6:a1:20:ab:d1:53:9f:c7:14:2a:75:5a:e1:49:37:
19:ee:ce:ff:8f:28:53:45:7b:bd:df:d7:ff:a8:0e:64:3a:0d:
1f:e3:c3:f5:0e:77:fb:b6:d5:a6:0c:c6:ce:c1:84:6e:c8:87:
2b:42:ba:2e:fb:61:ac:d3:2f:a7:11:ec:41:72:f6:c2:6b:6f:
c9:aa:74:48:3b:95:2c:c2:a8:dc:ff:43:25:31:72:86:eb:54:
74:49:5a:58:b4:8d:30:30:fe:f1:37:56:88:af:c0:23:33:3f:
96:32:a3:1a:b0:40:d7:c4:36:61:5a:27:23:5d:59:d1:ab:4a:
10:59:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 12:40:43 2023 by rpki-client on console-fra.rpki-client.org