Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/xI1CudOkNYAQuJ0Nazs2g2iFnZw.roa
File: xI1CudOkNYAQuJ0Nazs2g2iFnZw.roa (raw, json)
Hash identifier: 1UtiXvdoosdf6vydtvMPmLcLjnLvOVbUYllKXnIclY0=
Subject key identifier: C4:8D:42:B9:D3:A4:35:80:10:B8:9D:0D:6B:3B:36:83:68:85:9D:9C
Certificate issuer: /CN=ca99b3e8ba82d0d48f170c6ffd8e9daa3aa223d4
Certificate serial: 061D87DF
Authority key identifier: CA:99:B3:E8:BA:82:D0:D4:8F:17:0C:6F:FD:8E:9D:AA:3A:A2:23:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/xI1CudOkNYAQuJ0Nazs2g2iFnZw.roa
Signing time: Sat 01 Jan 2022 10:54:19 +0000
ROA not before: Sat 01 Jan 2022 10:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10753
IP address blocks: 193.148.92.0/24 maxlen: 24
193.148.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102598623 (0x61d87df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca99b3e8ba82d0d48f170c6ffd8e9daa3aa223d4
Validity
Not Before: Jan 1 10:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c48d42b9d3a4358010b89d0d6b3b368368859d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:48:74:36:1b:7a:77:0e:a6:a6:9f:78:58:
3e:b7:b9:5b:97:f8:f9:98:27:bf:7f:54:f0:a2:05:
3b:32:38:79:f5:f4:e0:8e:ee:55:07:8e:b4:ff:23:
8f:c2:20:4a:88:c4:80:46:76:d4:f4:22:1f:6d:ff:
12:b6:40:da:71:37:0c:e0:ca:04:49:e2:d5:ec:8d:
9d:67:07:4c:bc:77:b3:40:f1:a3:6e:ff:44:2e:e7:
57:58:ff:9f:48:e3:18:4b:a1:69:bd:b7:1f:d6:50:
bc:09:82:9f:9e:c5:c8:ba:31:f1:de:cb:a0:d9:90:
f5:ca:f8:57:e5:9d:f7:d5:40:7b:90:24:83:44:13:
05:2f:fb:32:bd:cb:cf:34:f8:b0:42:b1:0e:de:6e:
bb:2c:67:76:1c:5f:0a:a0:3b:bf:ce:1f:02:cc:02:
34:c3:ef:29:e6:9b:81:82:9f:c3:41:e4:00:b1:14:
64:1c:9c:f7:2b:62:14:f3:7b:1a:77:48:39:c1:15:
bd:8d:a8:ec:87:90:6b:3f:7d:f3:3b:31:f9:8e:06:
c4:8f:c7:46:88:d5:b2:f3:7b:6f:40:9f:8c:99:f9:
8d:37:50:ef:f8:ef:84:66:6c:c3:85:1f:25:a0:5e:
94:25:b3:ca:38:6e:a1:02:ca:db:0a:ad:56:bf:06:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:42:B9:D3:A4:35:80:10:B8:9D:0D:6B:3B:36:83:68:85:9D:9C
X509v3 Authority Key Identifier:
keyid:CA:99:B3:E8:BA:82:D0:D4:8F:17:0C:6F:FD:8E:9D:AA:3A:A2:23:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/xI1CudOkNYAQuJ0Nazs2g2iFnZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.92.0/23
Signature Algorithm: sha256WithRSAEncryption
29:fc:3f:57:53:dd:e0:a9:10:81:1a:76:2c:4c:c0:00:1a:f2:
10:53:9b:0f:53:e7:00:3f:82:32:4c:21:cd:04:0b:4a:0b:fa:
78:71:3e:f4:85:f2:8d:2e:15:96:a9:c9:81:6c:48:1c:62:99:
ea:e8:c8:98:4d:a8:34:c5:5d:c4:b2:d8:ad:66:45:39:9b:d1:
70:74:e5:64:ce:9e:f7:be:1e:fc:82:f2:61:b5:92:af:f7:6f:
e3:85:70:fc:e4:0e:87:1f:16:6e:6f:a2:2b:f8:c1:ad:32:1a:
f9:7e:d6:89:46:9f:f9:cc:d5:06:85:0b:36:65:ff:45:00:31:
1e:b8:11:6d:c3:f5:5f:db:4c:31:3e:0f:d2:77:3a:86:c3:ab:
c0:82:9d:5a:24:cd:42:be:c6:58:25:c6:44:84:07:11:c2:d4:
6e:5c:9f:0d:5b:5a:48:5a:c5:55:8a:b1:f6:cf:59:f7:cc:e2:
6d:04:b7:68:fa:6b:9a:8c:f9:f1:58:c2:61:9a:4d:ac:ea:a3:
fa:5a:e6:49:3d:e0:50:c0:cc:62:b1:c5:99:ff:3e:bf:7b:0f:
d5:53:f0:e2:fc:5b:ca:bd:35:dd:81:a5:93:e8:41:ed:b2:d4:
68:09:76:ba:74:19:1c:29:3d:83:27:07:7b:48:a4:3b:4c:46:
75:8c:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:45 2024 by rpki-client on console-fra.rpki-client.org