Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/H5T2ez_gajODQZJx5rg5_9-jwrY.roa
File: H5T2ez_gajODQZJx5rg5_9-jwrY.roa (raw, json)
Hash identifier: hJIKyiy8ZjvfMwDexpx49aP993WosGcWisTICdOx7BQ=
Subject key identifier: 1F:94:F6:7B:3F:E0:6A:33:83:41:92:71:E6:B8:39:FF:DF:A3:C2:B6
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 01889B115838EEF447D25A9BC7C7D38AC092
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/H5T2ez_gajODQZJx5rg5_9-jwrY.roa
Signing time: Thu 08 Jun 2023 12:53:05 +0000
ROA not before: Thu 08 Jun 2023 12:53:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:11:58:38:ee:f4:47:d2:5a:9b:c7:c7:d3:8a:c0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jun 8 12:53:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f94f67b3fe06a3383419271e6b839ffdfa3c2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:38:ea:df:4b:ff:0d:94:ca:45:a8:fe:45:
5c:c4:32:48:68:bf:74:85:fd:aa:b0:f7:f7:c5:d6:
98:61:a1:8e:cd:f5:7d:f6:7f:e7:ac:28:10:2c:5a:
95:a5:66:ae:26:ff:12:b7:76:d2:5c:86:96:a4:c3:
ce:13:df:35:6e:36:76:4e:7f:46:3b:e9:14:37:1c:
42:00:55:61:30:26:fb:a9:65:70:1d:38:f3:57:19:
92:93:b2:57:87:d8:a9:26:09:33:f1:65:dc:7e:02:
9e:95:0b:60:36:59:e6:a2:82:34:fe:b2:4c:4a:94:
9b:8f:54:82:22:f5:88:21:f7:8b:08:7c:c6:5a:79:
5d:f6:17:38:1a:00:ce:e3:44:f6:6d:06:d5:d1:9d:
4e:5b:f6:3a:dd:b9:26:04:40:e4:77:7b:68:b5:88:
02:49:2f:4a:f2:5e:67:7c:d1:f7:bd:67:d9:5f:58:
3a:43:19:7a:5d:d5:4e:b6:1b:ef:49:2e:ac:55:bf:
56:dd:3c:be:a6:24:91:97:3f:98:d1:64:a5:b6:02:
aa:54:fa:79:4a:93:ba:0c:d9:20:ad:3f:e5:18:45:
9d:7d:cb:21:f2:53:af:d1:94:ee:3e:98:f7:aa:87:
68:9e:6f:6a:72:8e:b5:d2:db:31:78:6c:ad:fe:50:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:F6:7B:3F:E0:6A:33:83:41:92:71:E6:B8:39:FF:DF:A3:C2:B6
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/H5T2ez_gajODQZJx5rg5_9-jwrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
24:72:c5:6c:14:45:d7:68:76:60:a1:6f:70:15:70:51:16:a8:
66:6d:5f:57:4c:c0:23:95:3a:0d:15:df:89:c3:f0:ab:b3:4a:
69:86:34:20:6e:66:97:51:df:f9:55:27:3f:1f:c4:0c:6b:a1:
68:82:8b:4a:ea:4d:8d:a9:5e:b5:f9:91:7f:61:c0:bb:86:0a:
1a:ad:0f:3e:0d:e0:8d:90:aa:04:e7:15:35:60:1a:de:9f:a6:
c3:fc:11:59:d6:10:d6:0c:7d:f7:2c:65:2f:59:3a:78:c3:b3:
46:a3:ce:da:a2:04:b7:c1:29:07:94:07:30:da:8c:24:6f:95:
20:fb:39:17:b3:48:14:4b:fb:76:03:2d:a7:b9:24:2a:99:09:
49:18:9a:5c:63:1b:f8:29:9e:ae:9d:a9:4d:dc:21:47:5f:55:
1a:c6:95:e6:54:8f:89:4a:6e:bf:88:d7:56:0c:5e:29:90:47:
a7:6c:8a:d6:56:c7:70:7d:70:d9:2c:7e:bd:0e:0e:9b:20:38:
1b:28:03:62:68:b6:48:bd:94:7e:08:16:33:b6:32:d7:79:a6:
5c:a3:12:23:0d:73:db:78:a8:6b:73:3d:d4:b4:48:46:41:28:
47:a6:98:d9:9f:0c:8a:56:b7:1e:da:a7:24:74:4b:33:f6:a3:
5a:23:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-ams.rpki-client.org