Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3046a0-837f-433b-9952-17648a4d213c/1/9_BvyZSJggaUEZsz7Me8YdKqTQw.roa
File: 9_BvyZSJggaUEZsz7Me8YdKqTQw.roa (raw, json)
Hash identifier: eWgECWwn8rf8JV1Z0MH1tq2SFrAk0RVP2SihFg61GlI=
Subject key identifier: F7:F0:6F:C9:94:89:82:06:94:11:9B:33:EC:C7:BC:61:D2:AA:4D:0C
Certificate issuer: /CN=1eded8c6d28e59b74fb2b451a8e6b5cea7b4033d
Certificate serial: 01856F14D3EB55360A830A50ACB1F682E592
Authority key identifier: 1E:DE:D8:C6:D2:8E:59:B7:4F:B2:B4:51:A8:E6:B5:CE:A7:B4:03:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ht7YxtKOWbdPsrRRqOa1zqe0Az0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3046a0-837f-433b-9952-17648a4d213c/1/9_BvyZSJggaUEZsz7Me8YdKqTQw.roa
Signing time: Sun 01 Jan 2023 20:45:14 +0000
ROA not before: Sun 01 Jan 2023 20:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 193.176.232.0/24 maxlen: 24
194.104.120.0/22 maxlen: 22
194.13.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d3:eb:55:36:0a:83:0a:50:ac:b1:f6:82:e5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eded8c6d28e59b74fb2b451a8e6b5cea7b4033d
Validity
Not Before: Jan 1 20:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f06fc99489820694119b33ecc7bc61d2aa4d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:cb:dc:1a:a6:00:0e:0f:02:b9:ae:21:cb:
19:f5:18:7b:ba:ad:6e:aa:73:d5:0d:62:f3:f5:e8:
0b:8c:8f:63:b1:70:66:05:27:2c:9b:b2:e6:1d:65:
6a:ee:19:d0:7b:30:7b:89:35:bb:c0:32:bf:72:cd:
7b:4b:2d:24:f6:21:f6:1e:bc:db:2c:69:45:54:47:
b9:ff:fb:34:ae:08:a6:7e:0d:fa:91:d5:06:ef:6a:
0e:73:7d:5a:09:7f:95:c6:d7:0b:7e:22:ff:71:c7:
4f:eb:26:d4:1f:6f:a5:1a:87:fa:57:a2:87:0d:9d:
1a:95:c9:1a:a9:7c:22:18:c1:a5:08:41:1a:0f:de:
41:3b:9f:0a:f3:a1:f1:cb:1d:f8:59:2a:75:0c:24:
da:7f:80:7f:a5:e5:9e:b4:d0:e8:a4:ad:e6:2a:0b:
86:c3:18:9f:69:59:a4:f5:40:ee:b6:9e:bc:58:a5:
28:a3:4f:10:b4:b7:0b:66:f1:74:b2:d3:2b:bf:8d:
01:9f:6e:93:12:32:49:2b:89:4e:b3:7f:21:6a:7d:
39:dd:42:20:59:e0:93:db:67:e2:33:7e:87:07:13:
c9:39:46:71:c5:5b:ff:fe:7e:8f:fe:5a:eb:d2:db:
33:8b:b9:45:59:a2:e9:67:44:19:26:d4:e5:b7:58:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:6F:C9:94:89:82:06:94:11:9B:33:EC:C7:BC:61:D2:AA:4D:0C
X509v3 Authority Key Identifier:
keyid:1E:DE:D8:C6:D2:8E:59:B7:4F:B2:B4:51:A8:E6:B5:CE:A7:B4:03:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht7YxtKOWbdPsrRRqOa1zqe0Az0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3046a0-837f-433b-9952-17648a4d213c/1/9_BvyZSJggaUEZsz7Me8YdKqTQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3046a0-837f-433b-9952-17648a4d213c/1/Ht7YxtKOWbdPsrRRqOa1zqe0Az0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.232.0/24
194.13.142.0/23
194.104.120.0/22
Signature Algorithm: sha256WithRSAEncryption
88:19:df:2f:b4:53:b1:02:54:b1:ce:60:db:1b:10:ca:7e:50:
e9:ab:b2:df:7a:4d:b7:16:e7:42:20:e2:91:b3:18:76:01:09:
22:08:cf:ec:be:8a:da:d2:66:16:9d:64:b8:14:c6:d9:4b:fc:
37:00:cb:6d:1d:d3:fb:f7:14:82:5c:16:8f:c4:2d:4f:1e:fb:
4c:9f:50:8b:6c:68:a0:e5:0c:35:65:da:54:6d:06:76:ad:8d:
3a:f2:13:ad:a6:b4:82:57:17:8f:26:49:f8:68:78:b4:24:9f:
0f:e2:86:54:21:c2:54:09:a9:16:ed:95:f9:cf:17:81:ef:f2:
dd:e8:43:ad:95:3b:a3:a1:e1:23:27:da:73:38:03:83:fb:72:
5b:00:7c:5a:5b:81:cd:84:8a:28:79:87:f8:74:e1:b3:ce:65:
0c:35:16:23:e1:93:d5:36:67:8d:cf:98:f7:14:6c:ff:e0:5a:
8e:4d:02:3a:41:fd:10:92:61:dd:c1:a8:79:c2:b7:8e:ae:54:
36:8f:49:fb:93:11:bf:98:91:11:f7:b2:25:21:7d:a4:9c:55:
b1:2f:b6:c8:f5:31:e2:a7:dc:14:85:c0:c0:4b:31:f8:2c:d3:
26:ac:a1:45:25:1e:57:0c:b8:7d:cf:cb:12:77:9c:ac:c8:a2:
a5:4e:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:28 2024 by rpki-client on console-fra.rpki-client.org