Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/i_lbNZSGHjUmwwVoC4chmHJeReM.roa
File: i_lbNZSGHjUmwwVoC4chmHJeReM.roa (raw, json)
Hash identifier: AzImnAMadr/OBHrqaKsMSGv48nYtx+FaLGBA5uTSHfU=
Subject key identifier: 8B:F9:5B:35:94:86:1E:35:26:C3:05:68:0B:87:21:98:72:5E:45:E3
Certificate issuer: /CN=9a7582c014f26d23b6ef9c2e82f48570c0b67868
Certificate serial: 01882086B20ABA25FF394A97849DE1AA9A58
Authority key identifier: 9A:75:82:C0:14:F2:6D:23:B6:EF:9C:2E:82:F4:85:70:C0:B6:78:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnWCwBTybSO275wugvSFcMC2eGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/i_lbNZSGHjUmwwVoC4chmHJeReM.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.3.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b2:0a:ba:25:ff:39:4a:97:84:9d:e1:aa:9a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7582c014f26d23b6ef9c2e82f48570c0b67868
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bf95b3594861e3526c305680b872198725e45e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:f8:4b:de:91:ea:e4:59:57:87:91:56:86:
a8:ee:1f:d5:d1:5b:12:bf:69:c4:e8:3f:18:19:7d:
b6:da:16:a7:d1:dc:da:a4:cd:e2:ad:78:f6:29:35:
51:2f:71:64:fe:a0:fb:89:4c:f1:8a:d4:b0:69:46:
74:42:bf:75:7b:39:f3:e0:d3:ea:bb:65:39:1f:dc:
9b:a2:72:ae:0b:30:64:58:52:e9:30:a4:f0:c8:0d:
fb:7d:fe:19:d5:72:24:f1:9e:6e:a8:3a:c1:22:6d:
c3:a0:14:19:00:36:2f:07:c2:87:6d:12:fa:57:4c:
0d:39:83:0b:68:21:18:7f:ba:03:17:9e:17:8c:04:
59:ca:fe:94:0a:5d:a0:69:3d:50:e0:28:9a:ca:da:
99:30:c8:b1:6d:41:be:84:82:d1:5a:82:5a:5b:5b:
07:1d:94:96:53:6a:59:e5:c7:5a:31:31:84:03:51:
a2:5b:5a:ad:dc:7f:65:2b:b5:99:ff:66:92:73:81:
16:fb:67:52:01:ef:58:db:9a:ff:f0:ea:05:bc:d4:
cc:9f:0e:b1:99:c2:ba:56:c9:3d:1a:65:c4:96:fb:
6f:8c:0d:50:bc:39:81:53:05:bc:93:da:85:d1:ce:
a7:f0:87:6e:ec:42:87:e3:7e:97:85:ae:e1:02:6f:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F9:5B:35:94:86:1E:35:26:C3:05:68:0B:87:21:98:72:5E:45:E3
X509v3 Authority Key Identifier:
keyid:9A:75:82:C0:14:F2:6D:23:B6:EF:9C:2E:82:F4:85:70:C0:B6:78:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnWCwBTybSO275wugvSFcMC2eGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/i_lbNZSGHjUmwwVoC4chmHJeReM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cd7bdf-2f6c-4402-95d7-c3d18b275465/1/mnWCwBTybSO275wugvSFcMC2eGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.171.0/24
Signature Algorithm: sha256WithRSAEncryption
90:87:9f:e7:67:d3:c1:ed:b0:f2:59:1b:c4:82:2d:65:01:78:
dd:1f:16:90:fb:d5:50:d0:19:ca:a9:6e:8d:15:17:15:a5:89:
06:ca:8f:93:1c:b4:5f:0a:68:40:95:8a:97:f7:00:43:64:46:
2a:ef:10:62:75:d3:8f:d9:cc:5c:ba:a8:bd:62:a3:90:3f:9b:
60:16:ac:e3:27:0b:11:b2:61:78:59:d7:43:68:cf:b8:dd:53:
78:e2:b3:bd:a1:1b:85:91:19:75:96:7c:cb:42:d1:af:8f:5d:
58:e3:58:d6:1d:58:19:85:e7:16:90:e5:7e:8e:0d:cf:92:52:
34:38:ea:1e:11:ca:a9:e1:30:cb:a7:e0:03:12:a7:ca:43:a4:
0e:40:7e:38:ad:c6:d7:15:a5:cd:dd:1a:82:90:42:3f:8d:1b:
15:d6:6a:d0:3c:42:b3:35:f5:4c:ff:55:ea:8e:14:84:ea:2a:
22:da:9e:9b:5b:c3:40:f2:79:ee:7a:06:05:9e:77:60:ff:65:
dd:ac:62:4f:9c:88:ea:e3:ba:7c:8b:b7:55:87:4c:5b:56:90:
b3:03:f6:be:93:4f:aa:61:57:6d:70:34:bf:11:35:81:63:56:
d4:a5:87:e6:b1:2e:ee:c8:65:1f:dd:4c:06:98:2b:79:d0:a1:
3e:95:9a:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrIKuiX/OUqXhJ3hqppYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzU4MmMwMTRmMjZkMjNiNmVmOWMyZTgyZjQ4NTcwYzBi
Njc4NjgwHhcNMjMwNTE1MTc0NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmY5NWIzNTk0ODYxZTM1MjZjMzA1NjgwYjg3MjE5ODcyNWU0NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+f4S96R6uRZV4eRVoao7h/V0VsS
v2nE6D8YGX222han0dzapM3irXj2KTVRL3Fk/qD7iUzxitSwaUZ0Qr91eznz4NPq
u2U5H9ybonKuCzBkWFLpMKTwyA37ff4Z1XIk8Z5uqDrBIm3DoBQZADYvB8KHbRL6
V0wNOYMLaCEYf7oDF54XjARZyv6UCl2gaT1Q4CiaytqZMMixbUG+hILRWoJaW1sH
HZSWU2pZ5cdaMTGEA1GiW1qt3H9lK7WZ/2aSc4EW+2dSAe9Y25r/8OoFvNTMnw6x
mcK6Vsk9GmXElvtvjA1QvDmBUwW8k9qF0c6n8Idu7EKH436Xha7hAm9VwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIv5WzWUhh41JsMFaAuHIZhyXkXjMB8GA1UdIwQY
MBaAFJp1gsAU8m0jtu+cLoL0hXDAtnhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5XQ3dCVHliU08yNzV3dWd2U0ZjTUMyZUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jZDdiZGYtMmY2Yy00NDAyLTk1ZDct
YzNkMThiMjc1NDY1LzEvaV9sYk5aU0dIalVtd3dWb0M0Y2htSEplUmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jZDdiZGYtMmY2Yy00NDAyLTk1ZDctYzNkMThiMjc1NDY1
LzEvbW5XQ3dCVHliU08yNzV3dWd2U0ZjTUMyZUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQOrMA0G
CSqGSIb3DQEBCwUAA4IBAQCQh5/nZ9PB7bDyWRvEgi1lAXjdHxaQ+9VQ0BnKqW6N
FRcVpYkGyo+THLRfCmhAlYqX9wBDZEYq7xBiddOP2cxcuqi9YqOQP5tgFqzjJwsR
smF4WddDaM+43VN44rO9oRuFkRl1lnzLQtGvj11Y41jWHVgZhecWkOV+jg3PklI0
OOoeEcqp4TDLp+ADEqfKQ6QOQH44rcbXFaXN3RqCkEI/jRsV1mrQPEKzNfVM/1Xq
jhSE6ioi2p6bW8NA8nnuegYFnndg/2XdrGJPnIjq47p8i7dVh0xbVpCzA/a+k0+q
YVdtcDS/ETWBY1bUpYfmsS7uyGUf3UwGmCt50KE+lZpr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:06 2024 by rpki-client on console-ams.rpki-client.org