Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/8JvDO_3LWwjNgsglz3u9ZL6G1qs.roa
File: 8JvDO_3LWwjNgsglz3u9ZL6G1qs.roa (raw, json)
Hash identifier: O5nDc1DdYX9qk9hckxeuQsfkUl11jCLbx5B2lQm2SOk=
Subject key identifier: F0:9B:C3:3B:FD:CB:5B:08:CD:82:C8:25:CF:7B:BD:64:BE:86:D6:AB
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C48F8F1B8519BCBDD4004E7987F7D
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/8JvDO_3LWwjNgsglz3u9ZL6G1qs.roa
Signing time: Sun 01 Jan 2023 22:55:42 +0000
ROA not before: Sun 01 Jan 2023 22:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39368
IP address blocks: 193.39.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:48:f8:f1:b8:51:9b:cb:dd:40:04:e7:98:7f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09bc33bfdcb5b08cd82c825cf7bbd64be86d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:45:ad:e2:32:f2:2c:2c:ec:11:69:39:66:
c5:29:41:f6:0a:bb:f0:92:5d:b3:cf:5d:d4:64:3b:
03:9f:1a:a7:16:c1:77:7f:9c:82:11:3e:34:fc:1c:
20:f3:ce:2f:b5:70:40:e5:7c:1d:ae:84:c3:33:1d:
92:7a:0e:b0:e9:50:bb:a1:4a:ea:57:59:1e:cf:57:
67:b3:60:5f:79:af:e0:e6:3a:81:3c:8b:b5:8e:a6:
8b:c3:20:7f:40:9c:89:45:db:4e:cc:2a:12:ff:d0:
a5:eb:17:b6:e4:61:2a:61:fb:cb:0c:46:a6:12:f0:
3f:b1:1e:63:69:e7:29:9b:34:36:e0:98:7d:37:18:
ca:f3:b5:bf:5f:0b:61:c8:c5:30:ff:1f:9a:f8:4d:
64:7b:0b:d2:6c:36:b5:d4:38:7a:62:c1:73:f0:e2:
ae:8d:77:bf:11:98:ad:4e:33:b3:9c:95:29:0e:27:
17:54:e8:ae:be:82:c9:9a:ed:be:ba:4e:67:e1:5c:
e1:1e:e9:47:3f:0e:c9:0b:d5:46:16:0b:01:f7:95:
a6:b2:94:66:e1:ea:98:58:de:05:05:7f:ae:e6:17:
38:cb:21:ac:7e:db:46:2f:ca:28:20:eb:ea:a2:a9:
87:4e:50:0a:33:c9:b3:04:9d:9c:f9:6f:fc:bd:ba:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9B:C3:3B:FD:CB:5B:08:CD:82:C8:25:CF:7B:BD:64:BE:86:D6:AB
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/8JvDO_3LWwjNgsglz3u9ZL6G1qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.9.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7b:d4:e1:cd:9d:42:5e:c8:60:04:fd:f8:8b:79:56:0a:fb:
35:0d:b7:f6:eb:29:f1:6c:ce:02:38:fc:52:95:3d:46:c8:08:
b5:94:d2:da:3d:45:5b:21:83:56:b7:94:bc:0b:c5:1b:7e:47:
df:fe:c5:30:93:5a:1c:0b:c0:9a:2a:f5:ad:32:dc:35:e7:fc:
9f:7e:54:07:9a:3e:1e:29:17:a4:7f:6d:ae:e1:e1:e5:a4:a1:
82:a4:73:4e:8a:9a:a1:4d:fd:15:8e:32:79:12:35:7e:9a:16:
80:5b:a1:7e:a1:bd:14:c0:c4:c1:71:af:04:01:b1:0f:51:fa:
65:76:a8:a0:73:bf:03:cf:6d:75:61:3b:41:8c:d1:93:8c:79:
77:7b:01:5f:c9:ac:19:bc:cd:5d:0b:db:89:85:3f:0f:14:08:
25:f1:0b:9f:46:8c:c1:85:fc:56:47:bc:f9:91:29:32:09:29:
f2:69:a2:8a:ee:7f:d0:bd:50:39:89:d9:9f:3f:36:e6:0f:7f:
05:65:4a:0e:a4:42:41:4b:9d:43:cd:3e:7e:4b:b0:b8:99:a7:
68:c5:22:0d:5f:55:26:71:dc:42:76:67:db:3e:78:7d:5f:15:
da:ea:33:83:37:bc:66:2e:6c:ac:1e:66:fb:f5:0b:e1:b4:0b:
05:b5:34:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org