Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/JBw5UBmM0rfOOxwF0QLzNUHrWcA.roa
File: JBw5UBmM0rfOOxwF0QLzNUHrWcA.roa (raw, json)
Hash identifier: zTij294DC8Q1jggDHq1aMv2idFwPQTG9Paqj6owmyIg=
Subject key identifier: 24:1C:39:50:19:8C:D2:B7:CE:3B:1C:05:D1:02:F3:35:41:EB:59:C0
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 0182306E2D5606E784613AE4C16C415B29F3
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/JBw5UBmM0rfOOxwF0QLzNUHrWcA.roa
Signing time: Sun 24 Jul 2022 13:38:23 +0000
ROA not before: Sun 24 Jul 2022 13:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 193.106.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:30:6e:2d:56:06:e7:84:61:3a:e4:c1:6c:41:5b:29:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jul 24 13:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=241c3950198cd2b7ce3b1c05d102f33541eb59c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:49:c4:0d:b7:10:a1:8f:28:7a:e8:17:44:c3:
54:73:af:67:73:b9:61:46:f5:be:a2:c7:f2:2c:43:
ab:7a:9c:7c:3e:0f:92:56:88:4b:87:5d:e0:f7:11:
ac:4f:9d:7c:8b:22:50:56:e3:5e:ee:c0:f4:8b:b8:
ab:dd:e3:94:72:9f:b6:02:3b:42:8b:4b:80:5f:b2:
d1:30:66:83:9f:fb:12:1f:5e:16:e8:25:de:c5:03:
bb:70:ce:3b:dc:1b:bf:fe:26:96:0c:cb:62:d0:9e:
27:77:a4:d9:58:73:18:47:20:24:f3:51:50:f4:25:
c8:a9:e9:f8:b0:eb:c8:71:6c:20:ec:6c:4e:53:8b:
96:f9:4d:ab:a6:c4:5f:93:62:4a:7e:25:a8:3d:f1:
a2:4a:9c:49:08:17:85:e1:75:fe:0c:4e:49:c3:66:
0d:53:4b:e1:72:94:26:37:3e:0b:8e:70:af:ac:d6:
52:09:e5:43:72:cb:e1:29:4d:c8:0a:c8:d7:db:71:
5f:90:cf:51:1b:30:26:41:58:bf:88:18:fd:77:b3:
87:0b:ac:07:f1:d6:3d:f1:3e:c6:bd:fa:0c:34:cd:
7e:1d:4c:82:9d:39:f6:39:5b:b3:4f:9f:5f:93:1d:
1f:37:7c:a3:13:8f:1a:28:98:56:9a:77:c8:86:27:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:39:50:19:8C:D2:B7:CE:3B:1C:05:D1:02:F3:35:41:EB:59:C0
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/JBw5UBmM0rfOOxwF0QLzNUHrWcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3d:e6:24:0f:a9:9b:d6:2f:30:e5:97:2e:6f:8c:cd:f7:02:
50:04:7d:03:f4:da:f2:4e:ae:8d:a2:4d:9f:1a:71:96:03:06:
65:2f:75:8d:65:c4:18:1d:9e:06:ed:4b:da:9c:3e:18:87:92:
90:8b:79:72:26:08:c7:f0:4f:1d:6f:d8:f4:e0:9c:a3:43:c0:
d8:b3:eb:47:06:69:42:c3:7b:dd:45:64:18:bb:35:6f:f2:55:
1b:d1:a4:e4:e0:fe:37:eb:84:91:34:0c:9f:c2:cf:bf:04:fa:
af:ed:af:6a:39:8b:80:43:9c:e3:26:9a:2c:ae:c7:7d:da:20:
2c:3d:6c:4d:b1:36:df:9d:ee:ab:21:43:47:95:68:7c:d4:1d:
f6:55:c0:cd:9a:15:23:38:db:9f:e1:14:aa:4c:72:12:b9:0c:
e4:71:d5:e7:60:2b:26:47:a3:ee:e2:d4:ed:c5:74:17:58:00:
f1:94:ae:df:09:08:65:80:b3:7b:0f:14:52:6a:fb:6d:70:41:
40:40:3e:f5:ad:cd:c4:bb:c7:83:d4:19:b6:2e:62:8a:80:23:
cc:6b:e3:0e:60:41:7e:df:13:7c:0a:3d:f3:c7:40:9f:bf:80:
14:ca:bd:af:4b:1f:5f:01:a3:82:35:92:38:e8:e9:76:61:8c:
d2:d9:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-ams.rpki-client.org