Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/R3Sd2zBRvy-lQy8frNzmS3ZlNio.roa
File: R3Sd2zBRvy-lQy8frNzmS3ZlNio.roa (raw, json)
Hash identifier: gr0e/KJRgtUVNXwpYMtiXO7OqhgjYIEN4mxtzbDCG0g=
Subject key identifier: 47:74:9D:DB:30:51:BF:2F:A5:43:2F:1F:AC:DC:E6:4B:76:65:36:2A
Certificate issuer: /CN=fb6a66ebc384d6277aeb8687efc03dff399ab370
Certificate serial: 018570E74B211FD8190DC41CB5CC103FFEFA
Authority key identifier: FB:6A:66:EB:C3:84:D6:27:7A:EB:86:87:EF:C0:3D:FF:39:9A:B3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2pm68OE1id664aH78A9_zmas3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/R3Sd2zBRvy-lQy8frNzmS3ZlNio.roa
Signing time: Mon 02 Jan 2023 05:14:44 +0000
ROA not before: Mon 02 Jan 2023 05:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 193.17.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:4b:21:1f:d8:19:0d:c4:1c:b5:cc:10:3f:fe:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6a66ebc384d6277aeb8687efc03dff399ab370
Validity
Not Before: Jan 2 05:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47749ddb3051bf2fa5432f1facdce64b7665362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:02:fa:03:31:f1:89:b1:98:d2:38:01:8d:91:
b5:fd:b9:8b:f6:23:e6:50:e2:19:a4:c9:0a:11:99:
6f:1a:20:8a:06:29:e9:d9:d4:07:b9:ef:92:d9:c2:
0d:30:04:da:e5:40:11:a1:c7:e3:0d:4a:8f:00:9a:
ff:4f:72:3e:87:e6:21:26:66:8a:3d:e4:6c:f4:3f:
cf:60:52:44:71:9e:e1:39:c3:6f:f4:ed:ca:94:43:
52:cb:c1:fb:c4:cd:12:f2:fc:06:85:a3:bf:26:c9:
de:b3:70:bb:6e:2e:d1:8f:14:b9:37:00:25:3d:f3:
9d:0d:65:b7:a2:47:f5:f7:95:99:97:59:e9:5d:6d:
cc:44:e5:07:a3:9d:54:2a:5e:0c:7e:bd:ed:a5:d5:
48:fd:0d:f8:02:d3:89:5d:13:3a:37:1f:c4:ac:02:
e6:97:9b:d1:3a:2b:91:05:78:c0:af:ed:4a:17:a2:
8b:c0:dd:43:de:52:e4:22:65:36:d1:8a:f9:5b:de:
4f:87:8d:df:7d:58:a4:12:13:ee:67:c8:f6:11:68:
26:5b:9c:f1:43:4e:19:e3:84:6d:6f:29:e1:f6:17:
3e:d1:c5:1e:01:d9:74:7a:24:10:8c:eb:5d:75:a0:
76:14:60:43:22:b3:da:1e:a8:20:96:46:01:54:f2:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:74:9D:DB:30:51:BF:2F:A5:43:2F:1F:AC:DC:E6:4B:76:65:36:2A
X509v3 Authority Key Identifier:
keyid:FB:6A:66:EB:C3:84:D6:27:7A:EB:86:87:EF:C0:3D:FF:39:9A:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pm68OE1id664aH78A9_zmas3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/R3Sd2zBRvy-lQy8frNzmS3ZlNio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/1-2pm68OE1id664aH78A9_zmas3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.88.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:0f:d7:15:22:61:e2:2e:c3:d1:86:4c:b1:e3:85:39:c8:db:
b6:02:73:f6:9e:bf:c7:42:ab:7c:24:bb:91:f4:78:0c:86:41:
f3:f4:6c:da:e8:ee:75:e4:c1:ab:29:14:56:b9:b4:7d:a1:47:
c2:9a:aa:c4:55:4b:ee:7d:c2:74:aa:7a:20:90:c7:c4:42:14:
53:f9:c1:cb:f6:8e:ee:f2:8f:e5:2d:8c:ad:55:a8:9e:b6:18:
6c:38:78:32:4d:85:e0:e4:63:38:7a:00:81:65:a0:17:eb:7f:
64:a9:f6:d0:a0:6c:e6:b1:68:94:b3:83:e7:0c:18:b8:5b:81:
b9:75:88:2c:93:d9:c3:03:20:d8:50:f3:6e:bc:f8:ea:6a:79:
99:fb:ec:cc:cc:e5:d1:bf:13:8a:7f:71:22:b7:e7:40:de:35:
43:d9:06:e1:89:81:e2:f1:a1:cc:85:90:c9:ed:e3:e8:85:7d:
b1:70:79:8f:af:fe:18:8f:53:42:cf:56:a0:55:48:b6:75:b4:
20:5d:58:36:be:df:74:38:0b:8e:5d:0c:d8:5c:d2:e1:0a:c5:
02:01:ed:32:43:8f:a9:6d:3a:ea:86:34:db:b2:18:60:91:28:
ae:cc:cb:13:73:9e:c2:6e:64:3d:69:e7:ae:30:83:d5:04:5a:
5f:78:0a:fd
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVw50shH9gZDcQctcwQP/76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNmE2NmViYzM4NGQ2Mjc3YWViODY4N2VmYzAzZGZmMzk5
YWIzNzAwHhcNMjMwMTAyMDUxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzc0OWRkYjMwNTFiZjJmYTU0MzJmMWZhY2RjZTY0Yjc2NjUzNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwL6AzHxibGY0jgBjZG1/bmL9iPm
UOIZpMkKEZlvGiCKBinp2dQHue+S2cINMATa5UARocfjDUqPAJr/T3I+h+YhJmaK
PeRs9D/PYFJEcZ7hOcNv9O3KlENSy8H7xM0S8vwGhaO/Jsnes3C7bi7RjxS5NwAl
PfOdDWW3okf195WZl1npXW3MROUHo51UKl4Mfr3tpdVI/Q34AtOJXRM6Nx/ErALm
l5vROiuRBXjAr+1KF6KLwN1D3lLkImU20Yr5W95Ph43ffVikEhPuZ8j2EWgmW5zx
Q04Z44Rtbynh9hc+0cUeAdl0eiQQjOtddaB2FGBDIrPaHqgglkYBVPI6UwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEd0ndswUb8vpUMvH6zc5kt2ZTYqMB8GA1UdIwQY
MBaAFPtqZuvDhNYneuuGh+/APf85mrNwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0ycG02OE9FMWlkNjY0YUg3OEE5X3ptYXMzQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvZTE0YWFkLTYwMGQtNDcyYy04MjU5
LTY3NTAzZmY3YmI0ZC8xL1IzU2QyekJSdnktbFF5OGZyTnptUzNabE5pby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjAvZTE0YWFkLTYwMGQtNDcyYy04MjU5LTY3NTAzZmY3YmI0
ZC8xLzEtMnBtNjhPRTFpZDY2NGFINzhBOV96bWFzM0EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBEVgw
DQYJKoZIhvcNAQELBQADggEBALMP1xUiYeIuw9GGTLHjhTnI27YCc/aev8dCq3wk
u5H0eAyGQfP0bNro7nXkwaspFFa5tH2hR8KaqsRVS+59wnSqeiCQx8RCFFP5wcv2
ju7yj+UtjK1VqJ62GGw4eDJNheDkYzh6AIFloBfrf2Sp9tCgbOaxaJSzg+cMGLhb
gbl1iCyT2cMDINhQ8268+OpqeZn77MzM5dG/E4p/cSK350DeNUPZBuGJgeLxocyF
kMnt4+iFfbFweY+v/hiPU0LPVqBVSLZ1tCBdWDa+33Q4C45dDNhc0uEKxQIB7TJD
j6ltOuqGNNuyGGCRKK7MyxNznsJuZD1p564wg9UEWl94Cv0=
-----END CERTIFICATE-----
Generated at Thu Sep 14 14:07:31 2023 by rpki-client on console-ams.rpki-client.org