Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/9356jRCHd8boF0nPBa63ALf_848.roa
File: 9356jRCHd8boF0nPBa63ALf_848.roa (raw, json)
Hash identifier: DdM+kSPEzbAxbxBX7V4FiUbqCCWG5X81rHn/1yTGUzU=
Subject key identifier: F7:7E:7A:8D:10:87:77:C6:E8:17:49:CF:05:AE:B7:00:B7:FF:F3:8F
Certificate issuer: /CN=c31135f48b85242d35ebd60b9aceef098ec95a5e
Certificate serial: 0185711E7E6C7A05607540B94BF95D78324E
Authority key identifier: C3:11:35:F4:8B:85:24:2D:35:EB:D6:0B:9A:CE:EF:09:8E:C9:5A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxE19IuFJC0169YLms7vCY7JWl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/9356jRCHd8boF0nPBa63ALf_848.roa
Signing time: Mon 02 Jan 2023 06:15:01 +0000
ROA not before: Mon 02 Jan 2023 06:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.201.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:7e:6c:7a:05:60:75:40:b9:4b:f9:5d:78:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31135f48b85242d35ebd60b9aceef098ec95a5e
Validity
Not Before: Jan 2 06:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f77e7a8d108777c6e81749cf05aeb700b7fff38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2e:48:b9:3e:49:64:28:a3:e6:53:a4:5f:e1:
f8:0c:0d:0f:e3:7b:7e:1e:ec:80:ad:ee:8d:e9:60:
61:2c:0b:ff:1b:64:5d:85:f6:d6:f1:ab:4a:47:a8:
da:64:42:f7:4e:c6:16:96:c5:68:35:2a:49:0f:02:
b2:f8:c8:5d:25:99:86:2f:58:d2:91:f8:4c:f0:64:
7b:6f:bb:07:54:e4:97:2e:6c:60:98:75:38:d7:6c:
e0:4a:b0:57:aa:5a:3d:ea:bf:ed:1d:5e:db:b4:4d:
83:40:f4:0b:2e:c6:1d:a5:b2:ae:44:dc:71:c4:e8:
38:75:41:11:14:64:a8:bb:a0:3d:d3:69:14:c1:16:
45:24:22:52:15:40:c6:46:78:42:23:6b:f7:32:99:
4b:65:a2:4b:0d:5d:63:45:ca:79:35:b4:19:3c:ca:
3b:ea:90:d3:fd:c0:a8:62:38:a9:9d:87:bc:44:fd:
e7:f8:b3:24:81:c4:1b:d7:dd:8d:9e:e5:14:57:50:
8f:27:88:5e:85:52:b7:8f:d6:ae:ef:72:79:53:08:
a0:9d:05:82:eb:4b:a3:a0:fd:35:13:6e:2a:fe:d7:
78:31:1c:1e:d4:99:c2:ad:11:da:44:71:b4:1d:f9:
04:a0:f9:c0:37:a3:37:da:8f:ba:1f:a8:9d:e7:eb:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7E:7A:8D:10:87:77:C6:E8:17:49:CF:05:AE:B7:00:B7:FF:F3:8F
X509v3 Authority Key Identifier:
keyid:C3:11:35:F4:8B:85:24:2D:35:EB:D6:0B:9A:CE:EF:09:8E:C9:5A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxE19IuFJC0169YLms7vCY7JWl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/9356jRCHd8boF0nPBa63ALf_848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/wxE19IuFJC0169YLms7vCY7JWl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.12.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5e:8b:d8:1b:27:dd:f6:a6:ea:34:9f:66:e9:61:0f:3c:76:
4b:90:62:fe:86:3b:e9:1f:6c:ca:d0:b8:3e:bf:32:0a:61:dc:
73:3d:29:5a:b7:1c:fa:9f:ac:b8:b1:e5:fd:a3:99:26:11:e9:
51:bb:56:c8:98:1f:75:3d:ad:50:80:c4:13:55:35:ac:03:ef:
f9:2f:69:3a:48:2e:6e:e1:55:e1:40:24:da:7f:ac:2f:65:5c:
98:19:07:1d:8e:35:60:35:dc:55:cb:b4:25:3e:d2:7b:ad:48:
b5:c5:5c:18:cd:a4:bb:3c:9e:b9:f3:b7:45:16:2e:50:73:1a:
14:86:47:a2:85:0f:64:55:bd:b7:d3:cd:f5:c1:f4:cb:54:4d:
3c:e8:6a:81:63:69:1e:b1:07:11:46:17:dc:48:5a:2a:97:ab:
4b:3f:75:34:7d:09:3a:69:ad:4d:a2:35:38:25:c1:56:2f:1f:
ad:62:7e:84:47:a5:b5:f9:ee:55:53:86:2c:4e:de:a9:54:ce:
58:cb:38:1f:a0:2b:74:cc:f6:80:de:32:cb:88:8c:42:4c:92:
79:d7:f0:6c:c1:52:0b:30:6b:ad:09:de:6a:95:c0:38:a1:31:
ec:91:ab:be:14:4f:58:10:ef:21:12:cf:51:31:6a:e7:18:88:
5f:17:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:21 2024 by rpki-client on console-ams.rpki-client.org