Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/7WzZYJ2-13yAwY0zWETaWGDtZk8.roa
File: 7WzZYJ2-13yAwY0zWETaWGDtZk8.roa (raw, json)
Hash identifier: pmQOGaqBR7l06g/fD3ayAwloxQl7Vh5xLZ/Tc3/enr8=
Subject key identifier: ED:6C:D9:60:9D:BE:D7:7C:80:C1:8D:33:58:44:DA:58:60:ED:66:4F
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 146B6AED
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/7WzZYJ2-13yAwY0zWETaWGDtZk8.roa
Signing time: Sat 01 Jan 2022 03:58:55 +0000
ROA not before: Sat 01 Jan 2022 03:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15703
IP address blocks: 193.47.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342584045 (0x146b6aed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed6cd9609dbed77c80c18d335844da5860ed664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:82:73:97:5a:d3:d0:2c:dc:cf:a3:97:60:
ab:c4:48:82:1b:9b:ee:b8:e6:59:9c:30:e6:13:52:
8e:c9:97:8a:bb:8a:fb:a4:df:a4:0d:c0:0c:7e:40:
0b:7c:93:10:52:36:1a:df:8a:32:57:42:1d:0e:82:
0f:7f:15:3b:b4:05:b0:ff:99:5f:03:cf:fd:bd:6a:
38:33:7f:a3:f9:c0:ba:b6:2e:74:2d:11:5b:8e:03:
06:e6:dc:e1:7f:fd:35:51:50:57:3f:5e:1c:4f:0f:
20:4b:60:2e:4d:93:03:21:a2:38:e6:34:f4:09:5f:
54:ac:43:e6:db:e3:0d:e1:43:3d:5d:c4:97:25:aa:
29:e3:20:42:a8:7f:35:2b:70:c8:81:98:dd:3c:81:
40:0d:19:ba:53:76:59:64:32:67:e9:5f:61:01:a2:
4b:1c:83:63:51:6a:4f:7c:3d:d2:d8:f4:da:b6:d6:
84:86:dc:df:ba:da:d5:c0:5a:d8:75:d6:5a:09:d2:
5e:92:e2:ba:90:52:ac:78:8f:32:d1:e5:c0:c7:4f:
1c:b1:c2:44:b0:b4:35:4e:f4:b0:26:26:f7:fe:4b:
93:b9:e2:2e:00:11:38:fb:12:e2:64:77:39:e3:fa:
96:f4:b7:b8:ed:0c:3d:a9:b9:a3:89:8a:34:1e:ec:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6C:D9:60:9D:BE:D7:7C:80:C1:8D:33:58:44:DA:58:60:ED:66:4F
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/7WzZYJ2-13yAwY0zWETaWGDtZk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.188.0/24
Signature Algorithm: sha256WithRSAEncryption
59:70:d0:87:4c:ca:04:60:85:20:b3:15:48:72:68:48:63:de:
bc:04:14:cb:80:13:2a:3a:e6:cc:e8:12:d3:c3:96:ce:77:57:
6c:ad:29:45:a9:50:c1:7b:ab:f9:35:c9:d9:94:81:0c:e5:a0:
18:c3:e9:8a:d9:42:c1:19:89:da:7b:d1:08:1a:4f:78:ca:a4:
04:c3:d3:5b:81:b6:a4:26:e1:a2:c2:07:da:7f:f7:91:da:f4:
47:c3:fc:f0:65:9f:da:bd:a5:54:3c:c5:70:f3:e0:98:ed:db:
6e:7d:93:4e:bd:ec:b9:35:00:bc:9a:ea:08:b6:41:3d:d5:1b:
26:25:72:11:1f:78:a8:4b:81:61:0c:d8:19:79:b4:04:a3:b8:
9e:0c:4d:5d:40:a5:84:bf:09:2d:3a:b7:3b:7e:33:9c:4c:b1:
e7:f3:49:81:45:f2:b1:85:06:27:f7:06:53:dc:0e:cf:35:01:
98:14:5d:f5:67:6e:54:c2:cf:50:c8:23:be:e7:f5:ea:48:46:
ac:94:15:79:91:9a:ce:eb:9e:b6:62:b0:22:2c:13:c3:8b:94:
60:3d:d4:3a:f4:51:6c:94:67:78:aa:c8:82:7e:87:b3:e5:3d:
e0:9a:38:76:f1:75:03:1e:94:23:1b:4a:97:77:58:a5:fd:d1:
81:59:0f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org