Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/r4TTyJ7qRJzFQFqGyRujUzXELCE.roa
File: r4TTyJ7qRJzFQFqGyRujUzXELCE.roa (raw, json)
Hash identifier: Y/0YmOz+ab5L4lh4cq4/MDDd0A+MIBhv4ihyvR+11KA=
Subject key identifier: AF:84:D3:C8:9E:EA:44:9C:C5:40:5A:86:C9:1B:A3:53:35:C4:2C:21
Certificate issuer: /CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Certificate serial: 018570FBADB23AFEE676F6E7078D9F32FAAF
Authority key identifier: 51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/r4TTyJ7qRJzFQFqGyRujUzXELCE.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48024
IP address blocks: 193.3.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ad:b2:3a:fe:e6:76:f6:e7:07:8d:9f:32:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af84d3c89eea449cc5405a86c91ba35335c42c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:83:41:fe:53:f2:10:87:10:c6:f6:75:bb:
5c:46:3d:d9:6d:13:c7:e8:e0:d5:98:7f:a8:37:bd:
86:b5:74:cd:5c:ef:26:e8:6a:41:62:94:8b:91:94:
7b:98:7d:13:f7:09:5e:86:4b:f1:74:61:a6:28:26:
07:03:b4:96:d4:c2:bf:61:d3:29:f7:3c:27:21:13:
5f:f5:8e:ca:74:11:32:40:9a:f5:8b:ed:7c:89:73:
39:3f:83:3b:43:63:4a:39:02:25:b5:38:38:f7:82:
49:95:6d:b8:fc:c9:46:98:c7:0f:3d:5a:b4:76:d2:
6a:36:92:3a:7f:4d:72:c6:4c:48:07:1a:d0:0e:8c:
87:89:30:ff:39:5f:14:9c:8b:32:01:0b:5e:f8:f6:
a9:bc:2e:f1:36:99:65:81:8b:7b:c3:11:67:05:1f:
0b:27:b2:40:62:85:76:24:45:94:17:be:22:e5:4c:
3c:8e:ca:e4:a2:91:b1:a3:e1:d1:25:2e:9b:a5:d0:
41:63:54:ad:2c:b1:fc:c5:ff:2e:c2:91:0c:11:0e:
be:f9:7a:3a:3c:ec:14:cf:cf:47:a0:12:81:17:1b:
69:8d:69:a9:b6:56:aa:1f:0f:fa:84:e4:5b:34:85:
d4:de:59:49:f7:13:ac:c0:48:55:73:76:25:95:95:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:D3:C8:9E:EA:44:9C:C5:40:5A:86:C9:1B:A3:53:35:C4:2C:21
X509v3 Authority Key Identifier:
keyid:51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/r4TTyJ7qRJzFQFqGyRujUzXELCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/UeoHYGsoYojO39Jf7o-LduQW1_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8a:cb:90:f3:02:ef:35:7f:2f:51:05:5a:2d:6c:24:01:5a:
f2:3a:78:3f:72:d7:3e:24:b9:ad:f8:f6:cf:d6:00:0c:08:83:
11:7c:c5:27:87:33:52:67:d3:e6:83:b3:2a:14:a2:e8:6a:2e:
e6:59:cd:37:e0:8a:25:fe:82:09:f1:5e:5e:95:90:c9:3c:19:
90:b7:75:03:32:fb:a9:0c:42:63:7d:06:4f:03:6f:5c:66:05:
f9:c0:d6:b4:d8:f4:80:f0:fe:f2:6d:87:1c:59:8d:7e:05:42:
9a:77:f9:3c:6a:eb:88:46:26:5c:95:b1:f1:5d:9b:e8:74:8b:
68:09:96:9c:bb:30:8d:ad:92:d5:7a:ff:94:9c:c1:d1:83:a2:
47:58:46:88:90:25:9a:d3:c1:51:c7:df:77:0e:40:4b:9d:8e:
b6:30:3c:d1:46:ec:a1:fd:2f:28:fc:64:21:f2:eb:6c:3c:6b:
b7:d2:90:62:2e:98:c3:d4:92:79:3f:6d:45:a0:73:dc:ac:56:
b3:07:90:5c:bd:d3:c9:03:e3:50:d2:de:62:b1:bb:85:12:a9:
c3:60:9d:d3:db:3b:07:95:bf:8b:cc:4e:12:5f:0f:a4:0a:c5:
65:7d:20:39:ff:9f:79:56:f0:57:f7:58:2d:62:9a:38:fe:51:
3c:28:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org