Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/IasSjzE8B778-GOw2xOswPbtaEc.roa
File: IasSjzE8B778-GOw2xOswPbtaEc.roa (raw, json)
Hash identifier: h2yj9QrUKKedpxTcvE07LdRqdIyH4MZDIjFY6MBD+8U=
Subject key identifier: 21:AB:12:8F:31:3C:07:BE:FC:F8:63:B0:DB:13:AC:C0:F6:ED:68:47
Certificate issuer: /CN=c31135f48b85242d35ebd60b9aceef098ec95a5e
Certificate serial: 01882086B6EAC5945223BDB4C7876C0D68FC
Authority key identifier: C3:11:35:F4:8B:85:24:2D:35:EB:D6:0B:9A:CE:EF:09:8E:C9:5A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxE19IuFJC0169YLms7vCY7JWl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/IasSjzE8B778-GOw2xOswPbtaEc.roa
Signing time: Mon 15 May 2023 17:47:59 +0000
ROA not before: Mon 15 May 2023 17:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.201.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b6:ea:c5:94:52:23:bd:b4:c7:87:6c:0d:68:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31135f48b85242d35ebd60b9aceef098ec95a5e
Validity
Not Before: May 15 17:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21ab128f313c07befcf863b0db13acc0f6ed6847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:51:3b:d2:ea:ba:21:0a:b0:91:c4:80:0b:
07:c8:d9:01:4f:80:26:7d:15:1b:c8:71:93:c9:84:
85:94:ce:5b:8d:ff:3e:f2:41:1f:ba:f0:36:fd:5f:
00:d5:9d:65:64:8e:06:0a:19:62:d0:46:5b:8c:86:
d8:80:f4:80:51:5d:3c:d6:7e:d2:cd:c8:c6:ed:f5:
44:55:10:5b:e2:d3:01:b7:d1:e0:3d:c4:d8:dd:42:
23:ee:6f:9f:65:10:10:04:4d:65:56:00:f3:96:0a:
21:08:df:1d:02:92:d8:43:dc:8c:7c:17:a9:28:98:
cf:63:33:c3:c2:b1:8a:bf:a7:98:63:72:37:4f:be:
55:38:42:58:b8:ba:64:c7:75:14:91:52:b9:e1:3a:
a6:d0:ee:75:84:09:db:d8:45:72:1b:c3:42:00:ab:
b7:9c:99:85:59:88:38:bb:a3:6c:ce:7e:25:51:17:
5a:d9:96:f9:30:3c:74:69:ee:e4:52:72:7d:e1:ad:
38:2a:46:6c:b8:12:0e:8c:6e:7c:70:e4:bb:5d:13:
5a:01:10:65:84:ad:2c:fb:24:7f:88:fd:e2:98:06:
2a:6a:fb:ff:4c:c7:b4:ad:38:35:17:52:d5:76:37:
6b:47:c7:fc:50:e6:60:a8:97:74:5e:28:c9:28:1a:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AB:12:8F:31:3C:07:BE:FC:F8:63:B0:DB:13:AC:C0:F6:ED:68:47
X509v3 Authority Key Identifier:
keyid:C3:11:35:F4:8B:85:24:2D:35:EB:D6:0B:9A:CE:EF:09:8E:C9:5A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxE19IuFJC0169YLms7vCY7JWl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/IasSjzE8B778-GOw2xOswPbtaEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/wxE19IuFJC0169YLms7vCY7JWl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.12.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b4:2e:79:49:9b:1f:5d:d6:23:61:08:41:1b:25:b3:69:d1:
0e:18:df:b9:aa:4c:35:3d:ba:e8:e1:fc:67:e0:e0:21:ef:a9:
01:20:42:5d:3f:12:b3:f2:90:cf:16:50:82:0e:f3:6c:c5:19:
8e:47:6c:f5:e9:b9:6d:c9:6e:86:40:ac:95:aa:a6:11:47:3a:
7e:4c:96:3c:aa:ed:1c:ff:d8:b0:22:4c:4a:93:0e:bb:2d:ff:
03:fb:d5:dc:c6:a5:cb:3a:3e:27:22:51:68:b2:94:b1:10:92:
e4:70:cd:fd:be:e6:4e:f1:50:32:06:77:89:f0:93:9e:77:c0:
3b:bb:72:e7:50:7c:ff:2a:ca:03:de:5a:3a:56:c6:ec:69:45:
c8:80:89:f1:07:6e:4d:6c:b4:78:8b:5c:96:33:21:22:4a:f4:
97:82:ee:33:d4:bc:8f:30:10:88:50:65:26:d9:61:8c:fa:50:
fc:33:bc:76:bf:e1:7c:bd:39:bc:6e:cd:55:5e:97:e9:50:68:
06:2e:bd:a4:ce:73:73:68:c3:6a:6d:ec:b7:c0:7e:4f:bc:1f:
bd:ef:8e:fb:d0:b9:54:09:1d:09:82:46:0c:c0:1e:7b:1c:2e:
4e:04:10:f3:cd:ab:41:5e:84:79:13:3b:a4:58:89:70:b2:a6:
a6:35:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 08:18:27 2023 by rpki-client on console-ams.rpki-client.org