Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/RQsNBAJ37_sDJQtcjz2MpgVNKRc.roa
File: RQsNBAJ37_sDJQtcjz2MpgVNKRc.roa (raw, json)
Hash identifier: 0nqNbf4hC9VW9/7E/a+TAjNjLFY7tXb1lvt2npBUDDo=
Subject key identifier: 45:0B:0D:04:02:77:EF:FB:03:25:0B:5C:8F:3D:8C:A6:05:4D:29:17
Certificate issuer: /CN=c68362992a9d4b91336955eaef63d5e4d6bd8a30
Certificate serial: 01856F0B69F99102C2ACDF53B5906348645D
Authority key identifier: C6:83:62:99:2A:9D:4B:91:33:69:55:EA:EF:63:D5:E4:D6:BD:8A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoNimSqdS5EzaVXq72PV5Na9ijA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/RQsNBAJ37_sDJQtcjz2MpgVNKRc.roa
Signing time: Sun 01 Jan 2023 20:34:56 +0000
ROA not before: Sun 01 Jan 2023 20:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 193.243.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:69:f9:91:02:c2:ac:df:53:b5:90:63:48:64:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68362992a9d4b91336955eaef63d5e4d6bd8a30
Validity
Not Before: Jan 1 20:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=450b0d040277effb03250b5c8f3d8ca6054d2917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:dd:bd:20:4d:5b:0c:c1:10:50:5b:bc:0d:
14:64:47:f4:58:9f:86:3b:cd:51:3e:4e:a6:a3:1a:
cf:8c:62:08:ec:47:61:81:1e:48:02:21:d3:64:57:
30:69:39:c5:ab:27:a2:00:d3:98:9a:94:e0:44:62:
a1:06:53:97:26:cc:27:0b:e9:fb:71:89:0a:f8:58:
5d:81:b9:94:65:39:25:cf:4d:f8:5a:e8:2b:96:5b:
48:0c:4c:27:e8:02:20:1b:66:18:b8:f0:1e:b0:74:
94:73:13:bb:43:e5:24:c6:e4:4c:bf:ea:6b:0d:ad:
be:fb:3c:19:eb:6c:ff:96:75:ed:33:ca:8e:5b:64:
1b:b3:86:bc:03:5d:57:d7:e1:f6:e5:99:8a:24:61:
97:8e:70:3f:71:f0:e7:4d:27:e6:b5:ba:81:52:13:
92:c4:29:28:b3:b4:c3:14:13:05:a5:62:4f:7d:fc:
b2:ec:b2:ff:b4:e7:d2:c4:d6:ce:37:ea:5d:10:26:
70:6d:e8:69:c8:e8:df:7b:1f:87:94:51:ea:86:11:
3e:ac:04:61:75:27:89:48:de:51:06:a8:a5:91:ca:
31:99:90:55:d4:3a:c7:07:6f:2e:c0:d4:9a:04:a9:
ea:e5:4f:61:ca:16:17:e1:c3:e0:b2:20:c0:60:57:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0B:0D:04:02:77:EF:FB:03:25:0B:5C:8F:3D:8C:A6:05:4D:29:17
X509v3 Authority Key Identifier:
keyid:C6:83:62:99:2A:9D:4B:91:33:69:55:EA:EF:63:D5:E4:D6:BD:8A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoNimSqdS5EzaVXq72PV5Na9ijA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/RQsNBAJ37_sDJQtcjz2MpgVNKRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2a67d6-9585-4d4b-91b2-8bdad28966d5/1/xoNimSqdS5EzaVXq72PV5Na9ijA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:04:66:24:2d:58:56:7a:9b:dd:41:e0:7f:b8:67:9f:1b:2f:
45:35:51:cb:0a:9e:3c:a3:61:79:0e:b3:74:67:35:be:9b:fe:
5e:cb:ff:1c:26:ef:21:49:13:da:67:9d:fc:44:26:79:3f:00:
f9:db:65:6c:d5:86:68:2a:0d:8c:97:f4:b1:56:ca:5c:e8:94:
7d:e8:00:25:da:bf:3f:34:0e:94:34:54:ff:a5:aa:ca:7b:68:
92:4e:7b:d6:1b:ca:3d:a7:21:33:42:1d:c9:d9:f1:64:1c:4a:
a9:37:b2:7b:ef:b9:da:9a:69:94:b6:f5:36:8e:3b:1b:d4:6e:
f6:79:bf:0d:69:83:79:33:af:61:2f:54:e5:74:18:ba:7e:d0:
4a:2d:97:d5:b6:8b:2f:1b:1d:90:7b:b0:97:49:51:b3:8b:2f:
25:dc:63:da:d2:b6:f2:6b:69:3d:99:be:c9:94:36:9d:17:b4:
2f:f4:b2:fe:6c:3d:d5:7b:de:5a:94:da:6b:97:19:0a:1c:fc:
72:63:19:88:a6:ec:e1:06:46:4c:30:5b:99:88:5b:a3:b5:bd:
b9:27:88:af:4f:87:11:22:c4:fc:51:81:93:12:c1:8a:6a:3a:
10:1a:7a:0d:47:45:f1:d1:79:e7:85:92:67:09:8b:c2:89:2b:
41:08:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 13:11:59 2023 by rpki-client on console-ams.rpki-client.org