Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/hjc4glrcoVMXkj6m3rpIPeW4uQQ.roa
File: hjc4glrcoVMXkj6m3rpIPeW4uQQ.roa (raw, json)
Hash identifier: kmIcrvr6DHHOYJYv5nJvzLqIOhTak7SJcbSJ70mBWig=
Subject key identifier: 86:37:38:82:5A:DC:A1:53:17:92:3E:A6:DE:BA:48:3D:E5:B8:B9:04
Certificate issuer: /CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Certificate serial: 0225A1E6
Authority key identifier: 51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/hjc4glrcoVMXkj6m3rpIPeW4uQQ.roa
Signing time: Thu 12 May 2022 15:38:01 +0000
ROA not before: Thu 12 May 2022 15:38:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48024
IP address blocks: 193.3.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36020710 (0x225a1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Validity
Not Before: May 12 15:38:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=863738825adca15317923ea6deba483de5b8b904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:50:52:a4:25:e1:cb:b5:7f:15:dd:f3:2a:
ac:78:21:b5:f7:ea:c5:b6:9c:c5:c9:a2:73:05:f2:
6b:e8:d4:9c:c6:98:48:61:72:f1:ad:21:7f:df:79:
23:07:5d:15:47:42:4c:3e:f7:06:28:80:e4:62:3e:
4c:d2:7e:49:8b:ed:e9:33:0d:6f:e4:f7:f8:cf:d9:
30:2e:81:68:20:d7:11:b0:6d:98:10:9f:1c:86:d5:
78:86:f9:4e:4d:aa:00:6e:57:aa:9c:a5:9a:68:0c:
4e:dd:92:3c:00:fd:43:58:14:1c:cb:0c:5a:e4:32:
ab:c4:87:9c:5b:43:48:b9:40:a8:06:c3:0c:1d:6b:
f7:f5:6b:b3:54:5e:4d:11:ff:37:cb:3a:e6:01:50:
cf:69:03:57:bb:92:11:8d:14:41:bf:36:ed:67:15:
4f:0d:f2:7d:b6:46:66:df:5f:93:9b:ec:65:41:73:
41:29:14:c0:26:49:90:e3:16:db:30:e8:a3:7b:64:
32:dc:a6:64:22:3a:86:a3:fb:f0:7f:da:9e:ae:3e:
41:a0:80:50:27:c3:27:da:11:e3:e5:bd:91:94:7f:
67:4d:56:2b:c1:b1:16:dc:f4:89:c6:13:e8:2e:4b:
08:59:32:93:ae:c4:ab:61:8a:f1:4a:5f:47:72:18:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:38:82:5A:DC:A1:53:17:92:3E:A6:DE:BA:48:3D:E5:B8:B9:04
X509v3 Authority Key Identifier:
keyid:51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/hjc4glrcoVMXkj6m3rpIPeW4uQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/UeoHYGsoYojO39Jf7o-LduQW1_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4d:6a:b7:fc:72:ea:8a:44:7e:14:ea:5a:42:c3:01:4b:a2:
e5:c0:ea:d6:06:da:5c:61:39:8e:14:0e:8d:6a:67:80:8b:2b:
6b:bc:82:4a:2d:0c:a4:46:3e:9d:46:c8:08:93:e4:36:2a:1a:
4c:b0:86:40:92:a5:85:0d:4d:45:cd:01:f0:30:88:3a:b7:a2:
86:8b:28:42:40:19:dd:39:f9:ae:70:43:a0:85:66:62:e1:e8:
2e:fe:60:cc:42:e9:f7:cf:fd:e4:ef:52:f1:a5:a2:aa:1c:d9:
db:8c:84:38:98:a8:a7:f2:17:3e:93:2f:b6:b4:7b:e7:6d:89:
f5:61:29:d4:e3:f7:07:be:53:7d:a7:b6:43:40:f9:4b:6b:ee:
a7:2a:3e:60:41:ce:74:37:a7:77:84:8a:b3:69:30:0d:0b:40:
33:6d:c0:13:89:39:33:48:cc:e6:fa:32:4d:70:62:2f:a7:1e:
d3:90:ff:1f:be:db:31:63:3b:2a:dc:f0:0b:10:77:64:a6:7e:
10:dc:05:38:58:a8:8f:8b:6d:73:49:20:0d:3e:9b:7f:6c:57:
45:87:48:9f:8e:77:01:49:be:74:fe:97:7e:3b:27:bf:60:71:
01:c4:cf:45:ee:c7:f0:9b:60:a8:6c:d1:e9:6f:1b:6c:5d:bf:
f1:5b:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:44 2024 by rpki-client on console-fra.rpki-client.org