Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/DTc64MkqiaH_v-ASxYDIyx7cTEY.roa
File: DTc64MkqiaH_v-ASxYDIyx7cTEY.roa (raw, json)
Hash identifier: e0ms8BwXqzzZBmAC4XvGDoOpEd0TGctsvOlfG741f9g=
Subject key identifier: 0D:37:3A:E0:C9:2A:89:A1:FF:BF:E0:12:C5:80:C8:CB:1E:DC:4C:46
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 34730CBA
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/DTc64MkqiaH_v-ASxYDIyx7cTEY.roa
Signing time: Wed 23 Mar 2022 16:03:09 +0000
ROA not before: Wed 23 Mar 2022 16:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.106.199.0/24 maxlen: 24
91.108.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879955130 (0x34730cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Mar 23 16:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d373ae0c92a89a1ffbfe012c580c8cb1edc4c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:cf:12:5a:40:be:b6:01:46:43:1a:90:1b:
22:68:20:f1:f5:bd:b5:7d:cf:0a:16:18:f0:5e:ce:
ec:e3:ce:8d:e5:04:87:6d:cd:e2:09:19:27:b1:6e:
d6:28:ba:a2:4c:ff:44:e8:ef:80:26:46:88:0f:18:
39:47:79:b5:fa:f1:95:81:8f:4d:a8:f2:95:2e:2c:
9e:78:2e:cb:48:60:e2:f5:03:66:5d:99:d0:c4:c4:
bc:88:97:0d:94:12:94:a3:fb:16:38:47:11:da:3a:
24:8c:c3:e2:4c:61:5e:3f:06:ac:a6:cf:17:b3:7b:
3e:f6:82:ab:dc:fd:23:f0:fa:bb:7f:32:f7:5c:6f:
59:e9:3b:40:72:f8:e3:ef:b4:44:e1:c8:54:3f:59:
9b:24:19:28:e8:5d:d2:01:66:ef:7b:e7:ac:69:f5:
fb:56:51:12:6b:91:16:ac:58:0b:e9:0d:08:80:95:
3a:ac:3d:5e:56:1d:73:00:3d:26:f7:3b:55:67:27:
91:38:82:38:f9:bf:f2:33:b1:a5:89:fd:25:54:82:
45:11:9d:01:60:c6:5c:ea:dc:16:40:d6:c2:a1:11:
88:b3:6c:b4:2d:a3:9c:f0:9e:59:05:5f:40:20:24:
da:c7:24:5f:48:46:4c:ba:d2:ff:d5:66:b5:5f:33:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:37:3A:E0:C9:2A:89:A1:FF:BF:E0:12:C5:80:C8:CB:1E:DC:4C:46
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/DTc64MkqiaH_v-ASxYDIyx7cTEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/18
193.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:72:94:51:f4:fd:52:25:d5:e0:05:b2:a0:58:30:30:02:84:
78:e9:68:54:2d:4d:b2:39:45:71:da:6d:d7:14:2f:ea:30:09:
c7:5d:3c:20:ce:eb:13:f2:de:91:02:b9:58:6c:c3:99:f5:c5:
ca:51:6e:bb:e3:a3:d6:8d:2b:ef:4f:06:9b:d5:45:7d:4a:3e:
ce:22:ff:6e:4b:09:e8:76:bd:9c:87:17:d7:87:d8:a0:f4:64:
70:5c:a2:f2:49:65:2c:95:bd:8e:12:cd:b8:8d:a8:11:e9:c8:
3a:cb:d1:72:fb:5c:78:d1:68:bc:e9:d6:29:f7:a0:40:4e:06:
6e:51:75:58:d9:f1:f9:88:17:a3:43:02:ab:ea:32:3b:97:85:
2d:81:c1:51:a6:08:53:db:bd:2f:9d:e7:d6:f3:ce:00:79:a3:
ca:6a:66:4b:be:01:ad:5c:7c:a2:05:8d:4f:eb:5e:76:9e:77:
11:a9:93:9e:ee:32:83:3d:3f:f8:66:5f:b6:39:b0:b9:95:fe:
59:28:4b:e5:57:ad:1c:78:72:96:8e:dc:53:99:3d:35:be:a2:
33:57:e7:41:a1:e6:5a:65:8d:90:69:fb:fa:22:0a:25:28:c2:
b6:7f:6d:6b:e0:e7:bc:04:53:15:3d:09:a8:65:de:97:f0:5b:
c0:9a:3f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:00 2024 by rpki-client on console-fra.rpki-client.org