Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/ArspMVX8GmE8naV8tcFp2e7Bei4.roa
File: ArspMVX8GmE8naV8tcFp2e7Bei4.roa (raw, json)
Hash identifier: klZr+uxT5CLQjC7MokLTRg+OHFDxgNI+mt0rDWs7JNc=
Subject key identifier: 02:BB:29:31:55:FC:1A:61:3C:9D:A5:7C:B5:C1:69:D9:EE:C1:7A:2E
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 01857169BDBC43467159DFA20CF38F78CDD0
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/ArspMVX8GmE8naV8tcFp2e7Bei4.roa
Signing time: Mon 02 Jan 2023 07:37:13 +0000
ROA not before: Mon 02 Jan 2023 07:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35308
IP address blocks: 193.151.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:bd:bc:43:46:71:59:df:a2:0c:f3:8f:78:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: Jan 2 07:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02bb293155fc1a613c9da57cb5c169d9eec17a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:91:58:53:06:63:63:49:4e:e8:4f:c4:d1:
9c:11:9c:80:88:a6:ae:e0:b2:f1:8d:3e:bf:18:fd:
84:d4:9e:ef:bb:43:f0:71:0e:77:d8:f5:30:2b:10:
d0:1c:9a:6a:4c:b8:c7:13:3b:42:08:5f:ca:73:76:
f0:3d:d3:e1:5a:c6:a5:d4:01:d4:46:aa:51:d9:b5:
1e:ce:28:ed:91:ee:40:71:c8:79:80:e9:a5:db:31:
73:ad:b6:75:e4:32:78:0f:65:11:f6:3b:06:06:8d:
65:58:6a:5f:54:f3:25:48:e6:9b:9b:97:d2:aa:62:
3c:7c:bd:38:5d:3b:cc:5f:4b:a7:dd:d2:79:6e:29:
c6:90:a4:6d:22:b3:38:f1:cb:11:7d:20:f4:50:44:
f5:3b:0c:d0:62:31:0c:73:49:0c:6d:b6:fe:ac:7d:
1e:d1:56:b7:b2:5a:ce:e9:b1:fd:78:13:8b:22:e5:
a2:3d:99:d8:ab:10:8d:5e:2e:d4:d7:e1:67:aa:ec:
22:83:68:dc:d3:01:14:6f:77:de:9e:4c:6e:20:3f:
06:34:8e:50:10:33:67:e5:8b:18:12:5f:e4:78:d8:
51:11:6f:ff:f9:11:6f:c4:a5:31:21:ad:bb:fa:24:
61:f9:31:7a:4e:15:b7:a8:98:6c:d9:0a:82:17:22:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BB:29:31:55:FC:1A:61:3C:9D:A5:7C:B5:C1:69:D9:EE:C1:7A:2E
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/ArspMVX8GmE8naV8tcFp2e7Bei4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:33:2b:cc:d9:80:04:80:49:f2:a5:db:3d:42:44:87:d4:60:
dd:70:2b:b6:a8:e8:9b:a1:45:e2:43:6f:56:b2:27:c7:97:c4:
a3:c7:23:7b:18:5b:79:12:da:64:f9:99:9f:e3:6c:20:18:74:
00:71:ad:c3:bc:24:d0:15:22:69:83:1f:a5:37:8e:bc:ee:06:
ef:23:83:8a:26:b9:30:64:b0:fa:0b:75:de:2e:35:d8:01:59:
e4:2e:c0:29:68:41:69:1a:a5:22:3b:51:7d:3e:ba:28:0a:79:
e6:a4:9c:6a:98:5d:33:4c:c1:91:d9:ee:fb:3c:97:94:9f:df:
0f:51:8b:8c:45:60:4b:16:6b:e7:db:4d:81:f1:57:41:62:46:
79:e1:b6:63:f9:2b:aa:fd:33:1a:1b:4a:8c:57:cf:44:0a:63:
57:bd:20:17:2c:0b:92:d6:61:66:ed:57:ad:52:3f:a6:c1:72:
43:9e:ae:6b:bb:d0:9e:2f:55:1a:88:29:b4:45:14:1d:8e:36:
e6:68:34:bf:56:47:d5:e7:94:2f:ff:72:b4:38:7f:53:8e:42:
cc:f7:00:e5:32:4e:8d:d2:0f:32:f3:e5:25:b2:01:72:68:6c:
68:7e:7a:bb:f3:fe:28:e6:3e:9d:4b:c1:fb:bf:92:a6:11:01:
a2:d4:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 08:22:33 2023 by rpki-client on console-fra.rpki-client.org