Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3046a0-837f-433b-9952-17648a4d213c/1/aVWavyz5AM_yDU2QJCDOGpStsPo.roa
File: aVWavyz5AM_yDU2QJCDOGpStsPo.roa (raw, json)
Hash identifier: KShIduuVLe2WVo0GHmzYXsuDRib8CVgN68YdPHms2JQ=
Subject key identifier: 69:55:9A:BF:2C:F9:00:CF:F2:0D:4D:90:24:20:CE:1A:94:AD:B0:FA
Certificate issuer: /CN=1eded8c6d28e59b74fb2b451a8e6b5cea7b4033d
Certificate serial: 0183AD6C83CB5CF2EC459F4610B1AB64A34C
Authority key identifier: 1E:DE:D8:C6:D2:8E:59:B7:4F:B2:B4:51:A8:E6:B5:CE:A7:B4:03:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ht7YxtKOWbdPsrRRqOa1zqe0Az0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3046a0-837f-433b-9952-17648a4d213c/1/aVWavyz5AM_yDU2QJCDOGpStsPo.roa
Signing time: Thu 06 Oct 2022 13:11:53 +0000
ROA not before: Thu 06 Oct 2022 13:11:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 193.176.232.0/24 maxlen: 24
194.104.120.0/22 maxlen: 22
194.13.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:6c:83:cb:5c:f2:ec:45:9f:46:10:b1:ab:64:a3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eded8c6d28e59b74fb2b451a8e6b5cea7b4033d
Validity
Not Before: Oct 6 13:11:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69559abf2cf900cff20d4d902420ce1a94adb0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a0:78:fe:4c:2f:a8:68:f4:79:c2:4a:0a:d1:
92:5f:71:54:00:ec:7c:18:06:30:63:35:77:65:ad:
14:ef:d3:7e:57:d5:1a:4f:b7:94:33:d1:7e:ae:a8:
a7:f8:50:15:02:e5:14:0d:8d:90:72:12:6e:e8:3b:
7c:cf:29:6f:17:13:5f:2f:b3:77:44:97:29:17:12:
80:a2:cb:54:72:6e:fa:dd:68:13:3a:c9:c4:20:06:
f0:c5:e1:99:99:76:0c:68:1c:4e:fc:03:54:5b:14:
82:2d:d9:c3:83:df:ce:3c:4a:e3:64:3b:59:fb:9b:
a2:16:4b:b8:f1:83:ae:65:66:ca:14:32:21:81:c8:
46:51:6b:d4:3f:41:68:a2:eb:8f:bf:c9:71:52:6d:
da:1e:11:d3:d9:f1:47:d7:b6:38:f0:4b:c3:75:b4:
dc:2c:1a:86:18:b1:45:e9:56:c1:88:33:6f:a5:24:
7e:8d:2d:7f:59:f0:a9:6d:07:5f:37:04:bc:02:aa:
b2:3e:f6:80:db:c6:75:08:b1:5b:7d:1c:3d:be:a2:
f5:a0:d4:62:bd:b0:05:2d:6c:82:6f:45:a8:a0:33:
d8:20:8d:2f:8f:8c:53:58:c5:a3:f0:f1:65:97:06:
3e:bc:ad:1f:c1:d8:e6:15:1d:32:75:88:f9:bb:d2:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:55:9A:BF:2C:F9:00:CF:F2:0D:4D:90:24:20:CE:1A:94:AD:B0:FA
X509v3 Authority Key Identifier:
keyid:1E:DE:D8:C6:D2:8E:59:B7:4F:B2:B4:51:A8:E6:B5:CE:A7:B4:03:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht7YxtKOWbdPsrRRqOa1zqe0Az0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3046a0-837f-433b-9952-17648a4d213c/1/aVWavyz5AM_yDU2QJCDOGpStsPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3046a0-837f-433b-9952-17648a4d213c/1/Ht7YxtKOWbdPsrRRqOa1zqe0Az0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.232.0/24
194.13.142.0/23
194.104.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:d1:e1:d7:ff:a4:f3:3b:14:2c:30:5b:66:43:15:e4:c5:c8:
81:73:9e:bd:18:82:a7:1d:ae:00:e0:23:a2:59:9f:8d:0c:5e:
3d:ae:a1:2a:ea:e4:ca:3a:eb:d3:8d:82:86:fe:42:cf:5a:7a:
72:82:af:07:5e:de:8d:46:01:22:ad:e7:bd:4d:18:5d:04:8d:
a7:15:02:2b:e1:d2:b1:6e:f4:66:4c:0a:cb:31:d4:dc:91:66:
a1:7e:a4:82:b4:e7:dc:a1:88:3c:12:6a:5b:ca:e3:01:49:cb:
ba:d6:80:ff:2c:c6:bd:5d:43:89:cf:c2:c6:fe:2a:e4:b9:92:
95:cc:56:bb:73:1b:f8:55:5f:c5:d3:12:99:03:e9:59:09:1b:
8f:ed:15:09:03:65:38:51:20:3a:e9:35:28:7b:37:8d:b3:30:
7c:42:0a:c5:28:1f:19:e2:19:0c:74:f8:a4:ba:4e:13:ff:9a:
79:57:a5:b7:d3:66:90:ab:a1:ed:d7:ca:3a:3e:69:aa:57:36:
3e:43:ab:c1:34:c3:86:1b:79:4d:c1:11:4e:c6:34:60:a1:41:
9a:0c:14:0f:42:1a:27:dd:cd:5b:c8:09:88:a4:60:ab:46:ba:
66:64:87:df:6a:fd:4b:92:75:47:bd:88:8b:c8:50:29:f8:9e:
b2:e7:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:38 2024 by rpki-client on console-ams.rpki-client.org