Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48714b-cce3-447d-8b4d-7c166e53d373/1/OIlI-HYhSXKkt2evbD7OKCdTUy0.roa
File: OIlI-HYhSXKkt2evbD7OKCdTUy0.roa (raw, json)
Hash identifier: srPh98a5w9sqI4x5RA7Y4nKg24K0LkYxpHRzD04wYUY=
Subject key identifier: 38:89:48:F8:76:21:49:72:A4:B7:67:AF:6C:3E:CE:28:27:53:53:2D
Certificate issuer: /CN=ae2a0276461f482ffc963319a43d599b5be46686
Certificate serial: 035E1C26
Authority key identifier: AE:2A:02:76:46:1F:48:2F:FC:96:33:19:A4:3D:59:9B:5B:E4:66:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rioCdkYfSC_8ljMZpD1Zm1vkZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48714b-cce3-447d-8b4d-7c166e53d373/1/OIlI-HYhSXKkt2evbD7OKCdTUy0.roa
Signing time: Sat 01 Jan 2022 00:57:25 +0000
ROA not before: Sat 01 Jan 2022 00:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.29.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56499238 (0x35e1c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae2a0276461f482ffc963319a43d599b5be46686
Validity
Not Before: Jan 1 00:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=388948f876214972a4b767af6c3ece282753532d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:47:ed:7b:42:a7:74:0d:64:1f:e5:f1:87:
54:ff:a7:dc:1f:5c:fb:77:e3:3f:4a:dc:b7:e8:88:
1d:ad:b7:95:bd:f4:51:f7:16:0c:db:40:3c:38:58:
17:3f:ea:e7:c2:c7:b1:b8:35:2b:ca:b5:ad:b6:f1:
90:da:87:49:b7:19:63:f8:cb:b1:0d:fd:fa:df:7c:
3b:4e:13:e3:62:3f:5b:d8:83:78:d4:dc:b1:50:91:
12:3b:6f:ea:8c:ae:6b:ea:00:a6:09:ca:64:3d:2d:
42:b9:57:a3:9d:48:72:ad:95:ca:5e:7e:b1:24:92:
a7:d5:02:2c:d8:37:fc:9b:6d:8d:1f:3b:46:04:84:
23:39:e0:ec:7d:99:bc:cc:68:55:0a:d7:bd:e1:12:
f5:4e:15:20:ca:6f:2c:26:b3:7e:8b:3e:de:08:d4:
1f:26:61:a6:bd:2d:71:6e:09:06:9a:c0:e7:41:48:
2e:d8:c1:47:cd:2c:ad:47:f3:0b:d8:31:17:50:8c:
8b:74:28:c4:6d:1f:00:cf:fd:70:de:81:4d:e8:d1:
b5:b7:cc:11:68:ee:a6:95:44:9d:0a:b1:bb:d5:c0:
e7:42:44:48:94:71:08:b6:e0:0c:11:e4:20:7e:f2:
12:64:f4:8c:fd:57:f1:a4:be:84:0e:72:bf:28:fa:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:89:48:F8:76:21:49:72:A4:B7:67:AF:6C:3E:CE:28:27:53:53:2D
X509v3 Authority Key Identifier:
keyid:AE:2A:02:76:46:1F:48:2F:FC:96:33:19:A4:3D:59:9B:5B:E4:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rioCdkYfSC_8ljMZpD1Zm1vkZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48714b-cce3-447d-8b4d-7c166e53d373/1/OIlI-HYhSXKkt2evbD7OKCdTUy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48714b-cce3-447d-8b4d-7c166e53d373/1/rioCdkYfSC_8ljMZpD1Zm1vkZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.43.0/24
Signature Algorithm: sha256WithRSAEncryption
65:49:23:27:08:e7:0b:ce:44:d4:2c:ef:77:d1:6d:20:bd:07:
6e:4e:8e:03:7c:c9:53:8e:7d:9f:14:45:82:a3:fa:ec:da:a5:
ae:17:b4:b0:9e:1b:76:cd:c1:23:ae:7f:0b:7c:32:58:c6:c0:
2a:44:0d:ef:19:9e:66:76:87:c1:b5:bb:d7:0b:4e:b1:b3:55:
b5:0c:7a:9c:2d:05:fd:b9:df:f4:a7:35:7c:43:a5:d4:26:81:
68:4b:b2:00:5b:cd:3e:da:e4:7d:12:ef:42:c7:ad:a8:41:8e:
37:97:c2:4a:f8:4d:7e:7e:52:4d:a7:e4:f9:d1:75:ec:c6:d8:
3b:2e:c0:f8:55:9e:0a:81:1f:ea:b1:45:dc:ce:4f:00:9f:29:
07:00:d5:ba:03:6a:a7:98:91:17:eb:d2:1c:c6:8a:09:a4:74:
bd:7a:3b:09:70:e2:0f:fa:87:f0:80:a2:d5:eb:9c:c3:ad:33:
23:70:3a:e1:75:14:eb:a5:fb:b8:1b:0c:db:0d:2b:95:1a:72:
36:2a:d0:ff:12:74:ad:ce:43:ca:e5:44:ec:b4:6e:60:ab:89:
de:55:b9:d4:78:b7:29:1b:6a:1d:e9:50:52:aa:e0:a3:0f:7a:
98:cd:71:a2:59:cf:19:81:61:3c:42:d8:6f:64:11:31:ff:93:
4b:f0:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:09 2024 by rpki-client on console-fra.rpki-client.org