Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/lDMkVySmzh6Wi8Cqq5JcdPBI43o.roa
File: lDMkVySmzh6Wi8Cqq5JcdPBI43o.roa (raw, json)
Hash identifier: /VtijxeLhU5cW9U/CsFfeKjn+HsFOPQzoda7zfJOjfU=
Subject key identifier: 94:33:24:57:24:A6:CE:1E:96:8B:C0:AA:AB:92:5C:74:F0:48:E3:7A
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0187082D1E6F73F8EDF1BA7ED8E07A08B055
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/lDMkVySmzh6Wi8Cqq5JcdPBI43o.roa
Signing time: Wed 22 Mar 2023 07:16:27 +0000
ROA not before: Wed 22 Mar 2023 07:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 193.108.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:2d:1e:6f:73:f8:ed:f1:ba:7e:d8:e0:7a:08:b0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Mar 22 07:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9433245724a6ce1e968bc0aaab925c74f048e37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:c3:bd:09:a3:e3:f1:31:93:8c:ab:f7:dd:
d4:75:9c:3f:2f:c7:e0:c5:5e:2e:b2:76:cf:25:a2:
70:c1:68:4d:3f:55:01:42:39:9f:55:45:c3:c3:48:
bd:a6:4c:00:3c:82:ca:e0:4c:0a:67:2c:06:ba:92:
86:05:1c:de:59:bb:5a:08:09:a6:73:00:49:f4:e9:
07:82:0b:e6:91:32:78:6e:f1:aa:bd:b1:d8:f6:8b:
c1:4e:79:c9:f0:7c:08:fa:3a:66:87:62:ff:5a:72:
f1:02:3d:5a:c6:48:98:b8:92:42:72:2a:30:26:17:
2e:46:90:53:00:31:52:2a:96:e6:6a:44:a9:8f:36:
9f:8d:35:e3:53:2f:b1:03:d0:21:15:65:71:4c:50:
88:49:3f:3f:71:d7:e9:5a:bb:dc:1f:83:44:20:7c:
ec:ff:3e:d8:7d:ca:18:af:b3:80:41:f2:cb:14:f6:
87:e9:23:15:ce:c0:5f:36:a8:e8:53:f4:5a:09:a9:
9b:e1:0d:bf:3e:06:23:f7:ed:c3:6f:44:c5:3b:ef:
f3:c0:b2:b5:b8:f1:d1:3d:fe:22:c6:eb:2e:ef:4c:
46:0f:2b:97:e0:c1:9d:0f:66:5f:cb:60:d9:38:27:
ca:2f:e2:69:db:c0:f8:a8:f7:21:9b:1c:46:31:5d:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:33:24:57:24:A6:CE:1E:96:8B:C0:AA:AB:92:5C:74:F0:48:E3:7A
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/lDMkVySmzh6Wi8Cqq5JcdPBI43o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.103.0/24
Signature Algorithm: sha256WithRSAEncryption
41:18:c6:66:ab:91:a6:5f:61:f4:21:14:52:4b:71:98:a4:8a:
d3:ca:bd:10:b8:03:45:30:8e:55:ef:ee:b4:e1:48:50:93:e1:
16:03:59:97:39:c0:f4:fb:ab:10:ee:81:55:50:f2:e8:a7:26:
f1:7e:3d:19:e6:84:36:b5:c7:2a:1e:6f:d1:a1:d3:97:98:cc:
43:9d:b9:8f:11:dc:06:90:9a:32:28:4c:c6:0d:0e:e8:a8:3a:
13:4a:f0:31:13:07:8d:3f:ad:7e:a2:1f:d5:44:a0:d2:10:67:
3d:12:04:af:d4:dc:d1:36:aa:d5:6c:cd:e1:41:e8:bf:8f:3b:
b0:5d:a5:a4:f5:10:d1:e2:cc:02:92:e3:e0:75:fa:33:f9:cf:
d4:bb:48:ca:9c:20:24:56:b3:5b:99:15:c4:d1:06:ab:0e:f1:
bc:0e:90:22:4b:76:70:76:b2:40:d3:82:99:bb:ca:ba:86:56:
26:a4:fc:f6:4b:59:b9:84:01:c1:56:0d:d0:01:c9:c5:d8:ed:
67:55:f0:4f:99:36:bd:ff:8d:14:72:34:68:6c:e3:76:ca:a9:
d7:6b:67:87:ec:fa:c4:d0:fb:81:1d:ff:d5:7f:b7:a1:c6:9c:
c7:7e:e2:68:ab:aa:bc:de:49:78:5d:59:db:23:ea:5c:67:10:
ee:71:2a:f7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYcILR5vc/jt8bp+2OB6CLBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTE1N2U4MWI3YzllNDMzNjBhMWNiNTBhMzE0MDExNzU5
MjE4MDgwHhcNMjMwMzIyMDcxNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDMzMjQ1NzI0YTZjZTFlOTY4YmMwYWFhYjkyNWM3NGYwNDhlMzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp93DvQmj4/Exk4yr993UdZw/L8fg
xV4usnbPJaJwwWhNP1UBQjmfVUXDw0i9pkwAPILK4EwKZywGupKGBRzeWbtaCAmm
cwBJ9OkHggvmkTJ4bvGqvbHY9ovBTnnJ8HwI+jpmh2L/WnLxAj1axkiYuJJCciow
JhcuRpBTADFSKpbmakSpjzafjTXjUy+xA9AhFWVxTFCIST8/cdfpWrvcH4NEIHzs
/z7YfcoYr7OAQfLLFPaH6SMVzsBfNqjoU/RaCamb4Q2/PgYj9+3Db0TFO+/zwLK1
uPHRPf4ixusu70xGDyuX4MGdD2Zfy2DZOCfKL+Jp28D4qPchmxxGMV2MFQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJQzJFckps4elovAqquSXHTwSON6MB8GA1UdIwQY
MBaAFPsRV+gbfJ5DNgoctQoxQBF1khgIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14Rlg2QnQ4bmtNMkNoeTFDakZBRVhXU0dBZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2
LTQxNjY2NGYwMWEyYy8xL2xETWtWeVNtemg2V2k4Q3FxNUpjZFBCSTQzby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2LTQxNjY2NGYwMWEy
Yy8xLzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBbGcw
DQYJKoZIhvcNAQELBQADggEBAEEYxmarkaZfYfQhFFJLcZikitPKvRC4A0UwjlXv
7rThSFCT4RYDWZc5wPT7qxDugVVQ8uinJvF+PRnmhDa1xyoeb9Gh05eYzEOduY8R
3AaQmjIoTMYNDuioOhNK8DETB40/rX6iH9VEoNIQZz0SBK/U3NE2qtVszeFB6L+P
O7BdpaT1ENHizAKS4+B1+jP5z9S7SMqcICRWs1uZFcTRBqsO8bwOkCJLdnB2skDT
gpm7yrqGViak/PZLWbmEAcFWDdABycXY7WdV8E+ZNr3/jRRyNGhs43bKqddrZ4fs
+sTQ+4Ed/9V/t6HGnMd+4mirqrzeSXhdWdsj6lxnEO5xKvc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org