Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/vrduuRyg7VRT2lDKcfbIxlstgaI.roa
File: vrduuRyg7VRT2lDKcfbIxlstgaI.roa (raw, json)
Hash identifier: XFBl6U/GNed+CixJ4vrcixOfhBzu85oiOEsaSVtdQ24=
Subject key identifier: BE:B7:6E:B9:1C:A0:ED:54:53:DA:50:CA:71:F6:C8:C6:5B:2D:81:A2
Certificate issuer: /CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Certificate serial: 01856DE65D6815B041AC53C287F402963FA6
Authority key identifier: E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/vrduuRyg7VRT2lDKcfbIxlstgaI.roa
Signing time: Sun 01 Jan 2023 15:14:51 +0000
ROA not before: Sun 01 Jan 2023 15:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 193.162.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:5d:68:15:b0:41:ac:53:c2:87:f4:02:96:3f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Validity
Not Before: Jan 1 15:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beb76eb91ca0ed5453da50ca71f6c8c65b2d81a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:2e:89:f1:99:52:c2:0f:76:9b:7d:80:72:
ee:d6:f1:d0:62:63:af:5b:31:a5:ae:0a:ec:f1:5d:
6a:c3:82:7b:05:e0:47:06:4b:bd:f1:94:63:82:06:
f8:a6:ec:e6:38:c0:88:0d:09:2a:cd:a9:8d:79:02:
fb:39:98:a9:1b:2c:3b:21:3a:bc:02:aa:4b:0d:46:
16:bf:ac:09:b4:23:ef:fb:0a:f5:6e:74:33:4c:7e:
5c:fb:92:66:ea:8a:c6:5d:2c:cb:ce:86:de:f4:2a:
5d:33:90:ef:47:00:c3:46:30:72:e2:af:f4:56:0b:
ff:75:8d:b6:dc:1c:e1:f7:24:c7:20:57:82:50:e7:
5b:78:78:c8:7e:ad:f9:94:c2:67:0b:da:6d:90:96:
36:83:84:5c:83:8d:be:30:94:b3:0e:9b:0e:39:09:
ce:6a:9f:b0:17:0b:f6:eb:ca:37:45:43:64:d9:ed:
03:c9:51:ff:da:7f:51:b8:d5:67:4c:51:de:cc:a4:
08:21:5a:0e:4c:d2:31:51:bc:df:d2:b9:eb:c6:f4:
c9:f6:6e:2f:4d:4a:de:71:c7:2e:bf:f5:e2:79:92:
be:a5:c8:8c:25:d6:1a:c8:db:17:f7:9e:d3:d6:1f:
93:a5:17:dc:51:df:65:cc:30:09:3a:19:6c:1c:7c:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:6E:B9:1C:A0:ED:54:53:DA:50:CA:71:F6:C8:C6:5B:2D:81:A2
X509v3 Authority Key Identifier:
keyid:E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/vrduuRyg7VRT2lDKcfbIxlstgaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.132.0/24
Signature Algorithm: sha256WithRSAEncryption
51:52:6a:6c:61:5c:35:e7:64:66:80:ce:e8:89:cb:fc:36:6a:
1d:b1:03:b2:b2:86:b7:39:98:8f:43:f4:97:5f:18:55:d0:1e:
8b:75:9f:f5:16:11:e5:06:7c:ee:dc:d3:55:5e:9b:d8:e0:3c:
8e:74:58:3e:e7:24:44:74:40:3a:61:a1:7a:75:1d:f7:de:b9:
c8:b4:2d:26:f5:f0:04:4b:77:77:50:78:64:57:20:8f:11:fb:
02:be:bf:a7:3d:47:73:c0:dd:aa:bf:29:9e:c0:07:6a:1c:86:
9b:fc:13:65:ce:2e:83:f1:d8:d1:a1:19:af:16:e9:23:a3:11:
d9:cc:85:f1:6b:ef:23:6a:d8:03:21:e9:29:44:89:88:4d:36:
ea:53:13:94:7a:39:da:db:55:7a:f2:ff:b0:07:7c:af:1c:fa:
63:4b:e5:54:cc:49:26:7f:46:d7:f0:11:21:a8:fd:3c:fb:2f:
45:da:a8:3f:65:0e:29:51:d2:55:e9:da:f9:75:41:65:9a:e6:
21:e4:a9:dd:68:9c:d4:16:68:cc:ff:fd:28:b1:4b:2a:c1:23:
9a:4c:29:a3:74:46:ae:86:12:d8:ff:af:7a:30:2e:13:25:ca:
b0:e4:ce:5a:d8:1c:ff:c2:f9:07:4a:c7:a3:69:22:ec:a6:10:
f4:4d:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 11:04:10 2023 by rpki-client on console-fra.rpki-client.org