Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/0uasKzs27EzqIXyZOOzdsfUjy1I.roa
File: 0uasKzs27EzqIXyZOOzdsfUjy1I.roa (raw, json)
Hash identifier: ZiCvT+MPe1z4VwrX8zYuF8VZ5sfoKK+XRx8LwwtONiU=
Subject key identifier: D2:E6:AC:2B:3B:36:EC:4C:EA:21:7C:99:38:EC:DD:B1:F5:23:CB:52
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 01889C6F2ECF00B8DADBD7C166BE6F81F1DD
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/0uasKzs27EzqIXyZOOzdsfUjy1I.roa
Signing time: Thu 08 Jun 2023 19:15:12 +0000
ROA not before: Thu 08 Jun 2023 19:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:6f:2e:cf:00:b8:da:db:d7:c1:66:be:6f:81:f1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jun 8 19:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2e6ac2b3b36ec4cea217c9938ecddb1f523cb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:57:68:37:e6:35:fc:fd:52:76:43:93:68:
b0:ec:52:98:63:a5:9d:35:0a:2b:e9:7c:5f:ef:9b:
62:64:f1:f8:37:4d:7e:e5:a6:b6:92:e0:ac:62:ea:
d2:5f:d8:86:a3:7c:f5:e8:9c:c0:11:80:34:56:0c:
68:ea:c5:c2:6c:56:a9:fb:f2:c8:aa:ca:7e:44:71:
55:27:01:3a:53:8c:20:33:47:be:35:fd:a7:98:3f:
9e:52:36:f3:d4:24:af:86:27:4f:0c:f8:70:0c:55:
d9:8a:71:1f:75:a8:6a:9d:97:6e:56:3c:59:be:cf:
83:d1:07:b4:12:10:4f:a6:aa:be:d7:80:eb:fc:a1:
7c:f7:fe:ad:cb:b3:37:11:79:75:ce:c2:4d:66:10:
20:90:8f:2d:f4:66:07:df:2c:1f:fb:4b:fb:b4:77:
f2:ad:1e:b5:35:3a:55:1e:6f:d9:fd:b9:69:72:ca:
c2:69:43:44:99:0b:89:ba:ce:ff:89:84:95:53:a4:
5f:5e:e3:78:43:60:71:b2:48:d5:6a:75:2e:8d:52:
f0:1a:e3:5d:6a:fa:46:35:a4:3f:ed:10:99:ab:cc:
6b:4f:03:22:0e:20:86:b0:81:a0:8b:a2:ad:2a:5e:
83:b6:44:23:e1:ef:71:8d:5c:c6:98:d0:55:51:92:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:AC:2B:3B:36:EC:4C:EA:21:7C:99:38:EC:DD:B1:F5:23:CB:52
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/0uasKzs27EzqIXyZOOzdsfUjy1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
52:75:28:28:b3:03:6f:03:30:ac:b7:5a:47:34:34:65:58:92:
d4:c1:7b:57:32:26:38:a7:96:30:fe:d8:cf:33:80:e1:57:eb:
1b:93:88:25:6e:81:57:01:2f:e3:67:78:ce:96:3d:4e:80:d6:
2f:f1:0f:b7:be:3a:34:93:2d:c9:7a:a3:9f:6c:f5:c7:26:e9:
81:7c:21:36:87:f1:d6:f4:ca:ff:00:76:7c:15:3f:5f:a7:7b:
fd:89:cc:aa:04:3d:07:dc:4e:63:fc:49:8c:ce:b3:6c:bb:a2:
13:75:df:84:52:50:31:37:ef:71:c0:ea:e4:31:79:63:62:7b:
4b:71:f4:53:e3:36:8c:ee:38:5b:bc:ef:1c:ee:5d:10:9e:e8:
6e:14:b5:1a:4f:0b:f0:96:c4:c9:0a:1b:98:ab:c9:c2:54:2b:
97:d5:89:f4:3a:46:a1:c0:81:21:75:d5:69:af:78:82:57:6d:
17:ba:cd:af:11:d3:c9:77:1b:a2:9b:5e:65:2e:55:75:f8:18:
95:73:be:f4:e6:d3:11:08:ab:ef:74:47:09:53:a8:88:07:1e:
ee:a5:9b:a8:ad:32:86:58:92:5a:f9:f1:3a:61:3b:26:7b:2d:
54:26:80:ca:32:07:e8:33:84:71:f7:48:19:a9:71:08:35:01:
9a:7f:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:00 2024 by rpki-client on console-fra.rpki-client.org