Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/sGPG1N1UQBnUbWa0lwllCwszzcw.roa
File: sGPG1N1UQBnUbWa0lwllCwszzcw.roa (raw, json)
Hash identifier: M8aemgoJIf6NRLZbqSQJvCNJk6S69lkUC2uWEOtCsvg=
Subject key identifier: B0:63:C6:D4:DD:54:40:19:D4:6D:66:B4:97:09:65:0B:0B:33:CD:CC
Certificate issuer: /CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Certificate serial: 018A1B63E0CE547DE0C707B7C194E1824F39
Authority key identifier: 51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/sGPG1N1UQBnUbWa0lwllCwszzcw.roa
Signing time: Tue 22 Aug 2023 03:57:24 +0000
ROA not before: Tue 22 Aug 2023 03:57:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.3.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:63:e0:ce:54:7d:e0:c7:07:b7:c1:94:e1:82:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Validity
Not Before: Aug 22 03:57:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b063c6d4dd544019d46d66b49709650b0b33cdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:6c:ad:f6:80:8b:68:0d:9d:ad:d0:11:f2:
97:ca:86:a5:6d:a8:e7:46:3c:21:65:bb:bb:fd:30:
c3:fe:58:e3:5a:52:3e:f1:cd:0a:c0:1f:82:13:ad:
4f:d1:85:5b:df:d7:c4:67:c8:c6:6b:e7:dc:0c:e0:
45:38:f4:50:c7:1b:83:ae:40:14:6b:6a:cb:1d:d2:
0e:c9:b8:5e:12:ab:7e:6e:d9:59:2d:d5:6e:ef:4b:
62:3d:b3:b5:9d:b5:1c:42:54:af:d3:1a:a9:89:ef:
e8:ea:ac:f5:48:e3:4f:76:1f:14:3b:a3:e0:df:0d:
ea:6b:70:75:4d:77:97:37:af:c0:7d:38:22:de:a5:
b3:54:e5:45:2a:8f:9e:47:60:1f:99:5b:da:fb:2a:
78:5d:c6:c6:71:3a:1b:3d:62:54:8d:0e:8b:cf:2a:
8d:4d:9c:18:9a:15:43:9e:6f:b8:33:09:e7:a8:42:
54:ca:db:f2:41:dc:98:e9:86:4d:12:e0:0c:b6:e6:
0d:88:f6:62:26:8e:99:a1:15:3c:a4:38:a6:b4:02:
c0:44:35:f5:bd:52:92:3e:1b:6c:c5:4b:b0:51:39:
61:bb:90:a8:2d:d7:84:07:2b:0c:42:66:5b:2d:5c:
4d:5b:f8:a9:90:42:74:b0:70:3d:69:db:e7:49:fc:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:63:C6:D4:DD:54:40:19:D4:6D:66:B4:97:09:65:0B:0B:33:CD:CC
X509v3 Authority Key Identifier:
keyid:51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/sGPG1N1UQBnUbWa0lwllCwszzcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/UeoHYGsoYojO39Jf7o-LduQW1_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
41:14:a5:f7:51:7b:f6:07:8f:4d:60:38:91:dd:d6:12:16:4e:
6b:9c:17:5d:75:cb:64:95:1c:dd:ca:c0:c8:c0:bc:66:ed:53:
a2:57:c3:01:e5:3a:e8:ef:86:8c:72:f2:08:c5:1e:0d:f5:b4:
b6:d6:fa:21:99:f3:53:fa:c5:b0:a9:33:98:17:71:66:a2:4d:
27:07:ae:16:72:71:2e:10:14:a0:b9:55:d5:ae:fa:e9:83:29:
89:d6:24:2a:8e:27:07:9c:bf:39:bc:e0:2e:54:e6:d3:bc:23:
22:82:0a:6d:a3:b5:41:2b:3f:7c:15:4c:1e:a9:79:c7:87:f2:
5d:c5:b6:95:e2:6c:70:ef:e4:6c:30:3b:27:da:da:82:11:5a:
68:bd:7e:ae:1e:17:47:30:34:61:36:f1:7b:8c:90:dd:81:cb:
80:dc:0c:20:c4:d0:35:68:d6:0a:24:f8:ff:28:4e:28:87:ba:
31:87:c4:6c:d2:34:c0:10:87:16:7b:ea:31:eb:32:94:ba:a5:
cb:cc:14:37:86:21:16:92:98:02:2e:23:ff:df:4a:82:73:85:
a2:bb:59:6f:fe:db:b1:6c:74:20:64:0b:c9:54:48:d1:ee:6c:
c3:48:a7:8e:94:61:b9:7d:61:46:69:a3:4a:5c:1e:29:34:5e:
77:89:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:44 2024 by rpki-client on console-fra.rpki-client.org