Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/dUoKKPRd2ztyyVtxGyIEFYN_rYs.roa
File: dUoKKPRd2ztyyVtxGyIEFYN_rYs.roa (raw, json)
Hash identifier: G8DrPg6SKFY8HCnR9Zp9Suk6WSb1SHxC6CboY+t8rGw=
Subject key identifier: 75:4A:0A:28:F4:5D:DB:3B:72:C9:5B:71:1B:22:04:15:83:7F:AD:8B
Certificate issuer: /CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Certificate serial: 018570FBAE59A68C9008DDAB71F9F849458D
Authority key identifier: 51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/dUoKKPRd2ztyyVtxGyIEFYN_rYs.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48741
IP address blocks: 193.3.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ae:59:a6:8c:90:08:dd:ab:71:f9:f8:49:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=754a0a28f45ddb3b72c95b711b220415837fad8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:8d:37:23:d8:d4:8c:11:15:07:ba:7f:8c:
37:7f:19:e9:1a:ec:5a:58:3e:37:f0:36:8d:7a:f9:
f6:2d:1a:10:66:88:01:7d:4d:e0:be:2d:85:8c:a4:
a8:35:b0:ef:fc:51:9a:11:3d:f2:25:61:f1:4d:1f:
85:18:ed:b6:ed:a4:2a:3e:05:21:ad:1c:64:b5:39:
50:f6:42:34:f1:7b:94:e0:e4:3f:e6:be:52:e0:97:
ff:4a:06:44:14:03:fb:e9:ba:66:49:c4:fd:8f:20:
26:9d:24:26:8e:6d:38:fd:1b:61:c3:81:f5:dd:1e:
4a:08:10:25:6a:97:e2:cb:ef:f4:bb:5a:94:3a:84:
36:6c:92:ef:89:15:ef:13:b4:a6:78:80:7d:ee:40:
08:fd:bd:a1:af:6f:d0:7c:8e:63:25:7c:99:db:96:
11:7a:21:25:ab:22:c1:6c:ad:ff:0c:60:2a:80:94:
81:34:b7:0a:36:28:1d:82:b5:be:1f:49:99:a0:7e:
8d:7e:d9:bd:55:44:bc:70:62:1a:8f:11:81:77:03:
17:4a:24:a7:0c:48:88:9d:4b:7d:9d:df:f7:27:5c:
c5:04:a2:3b:63:a3:6e:82:08:a3:3c:3f:3a:1c:81:
9c:13:a0:e3:55:60:8c:5e:3f:99:2d:80:a7:33:a7:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4A:0A:28:F4:5D:DB:3B:72:C9:5B:71:1B:22:04:15:83:7F:AD:8B
X509v3 Authority Key Identifier:
keyid:51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/dUoKKPRd2ztyyVtxGyIEFYN_rYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/UeoHYGsoYojO39Jf7o-LduQW1_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
80:04:3c:67:15:46:cc:81:11:12:11:c0:56:56:97:78:e8:48:
c9:d6:ec:d6:62:28:d9:e5:d9:8f:f3:61:4c:59:ec:15:c0:47:
06:2d:6d:9c:f6:17:d2:5e:75:cf:28:f4:71:73:2a:97:a5:7a:
56:65:64:54:af:c8:05:08:dc:f9:2d:21:e6:4f:19:62:37:e0:
89:52:81:34:52:f1:d0:65:63:2f:2c:71:15:0e:ef:4e:1e:ae:
ab:79:21:5f:90:65:cd:5e:7b:94:be:6a:2a:a6:ed:54:26:f5:
78:54:cb:3c:bc:86:19:38:22:76:95:4a:e8:77:7c:ac:63:3f:
3f:3a:8e:a4:2c:42:eb:f3:db:8f:8b:85:f7:80:a1:ec:e2:51:
2f:17:17:ba:ce:79:2e:5d:99:41:b0:43:1a:1f:56:f6:9a:d5:
fa:e5:24:1c:4d:3a:2e:f3:57:ca:49:26:77:53:66:c7:d8:ff:
5d:6d:d3:bc:d3:39:6f:85:c8:cd:da:f5:2d:cb:f9:6d:be:5c:
c8:75:c5:30:a6:f5:56:e8:98:d1:be:87:3f:69:7d:37:fb:38:
40:6f:eb:66:8a:31:3a:6a:bb:7a:e2:b7:66:9a:21:c3:f3:ca:
b0:cd:dd:1d:ae:d8:4b:cc:bf:bf:3f:dc:34:94:97:1d:44:7a:
81:32:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org