Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/SGbyiHxBW7ITtZR118iXgLjVbfA.roa
File: SGbyiHxBW7ITtZR118iXgLjVbfA.roa (raw, json)
Hash identifier: d8MnNPps6q1Lbq4xUxp9JRXBgLNZ3ykHcRNwd/qxEDk=
Subject key identifier: 48:66:F2:88:7C:41:5B:B2:13:B5:94:75:D7:C8:97:80:B8:D5:6D:F0
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A75AF88
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/SGbyiHxBW7ITtZR118iXgLjVbfA.roa
Signing time: Tue 12 Apr 2022 15:29:00 +0000
ROA not before: Tue 12 Apr 2022 15:29:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.38.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175484808 (0xa75af88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Apr 12 15:29:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4866f2887c415bb213b59475d7c89780b8d56df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:60:0f:5e:80:b2:ec:86:c4:c9:6d:6e:a4:
e9:43:77:4b:2e:3b:46:fd:a9:1a:2e:d5:0b:d1:d8:
89:97:31:d6:17:88:64:71:6c:55:60:cd:26:29:a2:
2a:46:cd:d3:3e:05:b1:01:b8:79:71:7e:ed:8a:1c:
78:0f:48:43:71:38:f2:3c:8a:eb:82:d6:d8:25:80:
33:c5:43:30:b3:6d:e6:36:2d:2d:14:8b:14:0e:44:
fb:74:f1:af:41:45:39:02:5a:ea:56:f4:ac:bd:b3:
5f:ed:9c:2f:c2:83:b4:af:8d:fa:dd:7c:c9:29:ff:
ab:17:1c:9c:53:0d:d3:9c:01:94:e1:72:38:93:bc:
e9:f6:94:2d:89:98:fd:f5:c8:27:2a:e4:5d:a0:81:
7b:8d:64:70:bb:e6:e5:1f:5f:99:45:43:8c:89:2a:
a1:3d:cc:75:5c:29:80:c3:f3:56:c1:52:b5:40:de:
fe:d9:92:39:20:b2:58:f9:84:d6:fb:13:d3:23:e1:
31:65:3f:df:9f:2f:84:86:5f:1a:24:b4:ec:9f:89:
9f:ea:cd:22:d2:54:72:e8:60:c5:55:36:38:30:4e:
e5:ad:5f:12:0a:21:4f:fc:00:3e:bc:3f:cc:89:8f:
76:45:c9:f4:50:cc:43:18:ea:67:b9:21:3b:cf:83:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:F2:88:7C:41:5B:B2:13:B5:94:75:D7:C8:97:80:B8:D5:6D:F0
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/SGbyiHxBW7ITtZR118iXgLjVbfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:bd:c2:f3:47:8f:8f:bd:0a:6a:dc:ba:d1:34:85:dd:87:66:
8b:9f:ff:8d:cd:a9:e7:d7:4a:dc:d0:38:1f:3c:fd:05:c7:8c:
76:48:94:39:4f:ca:3f:dd:9f:75:a6:bf:86:f4:5c:bb:d3:fe:
5a:a4:c9:6d:d5:79:c0:d8:df:a1:14:11:c1:bd:b0:b1:8d:4f:
7e:bb:9e:ef:9b:74:fc:98:63:2c:8c:6f:58:18:cd:94:42:eb:
21:fb:39:1c:13:68:b5:71:ab:bd:bc:7d:ed:63:e9:c3:d4:75:
46:1e:6c:ff:f0:36:f1:04:c4:86:ab:ee:bd:7a:e3:98:1b:8c:
90:de:8b:19:55:e1:72:f9:c8:4a:29:6e:e4:14:7b:3c:55:20:
d3:9c:d9:b8:4d:70:82:e1:fc:4a:21:9d:89:51:a2:88:c5:a8:
51:41:e1:40:47:bd:dd:38:43:7f:03:67:6d:78:ba:2f:fe:cf:
3e:38:5f:a5:04:60:b7:cd:04:79:cc:80:d6:35:f6:5e:1e:e4:
0c:2a:88:5e:68:96:5b:82:4d:e7:72:3c:9c:18:c8:fa:a5:7e:
a6:7f:d2:99:33:42:c9:cd:3b:77:56:5b:9f:22:08:71:ec:2c:
bd:ad:4e:35:8e:64:6a:2e:a2:7f:1c:74:72:ff:90:ca:21:05:
82:fd:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org