Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/m9vu8TLaXyRZKZjrJY9nTuu7ooE.roa
File: m9vu8TLaXyRZKZjrJY9nTuu7ooE.roa (raw, json)
Hash identifier: FC0l8pRFEUtDxXxcvjdf2E83vybYXIb4+/TwFB88yjA=
Subject key identifier: 9B:DB:EE:F1:32:DA:5F:24:59:29:98:EB:25:8F:67:4E:EB:BB:A2:81
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 018570708AD824BFA1B35B0ACDDF54F372A8
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/m9vu8TLaXyRZKZjrJY9nTuu7ooE.roa
Signing time: Mon 02 Jan 2023 03:05:01 +0000
ROA not before: Mon 02 Jan 2023 03:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 193.106.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:8a:d8:24:bf:a1:b3:5b:0a:cd:df:54:f3:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 2 03:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bdbeef132da5f24592998eb258f674eebbba281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:47:d8:2d:db:a9:9d:41:05:9d:f4:24:4f:
83:30:d6:2e:4b:ac:e6:eb:33:ff:98:68:7f:b9:c2:
74:e5:b7:29:d8:cd:16:2e:29:db:21:bb:09:ee:00:
73:46:c4:e8:69:9a:64:55:8e:04:80:b0:85:67:47:
a6:18:76:fa:ad:33:86:93:fc:77:bf:38:34:b9:d5:
05:13:6a:e1:8e:b1:69:22:b3:54:16:b3:9b:b2:8a:
b3:e9:a6:d6:ac:cf:2d:8d:22:a7:be:c8:c7:ae:bc:
b1:e0:19:83:3b:9f:22:75:28:24:a3:ac:25:79:8b:
a1:4b:a7:54:3d:98:c4:a3:7b:ac:5e:de:89:05:8d:
d1:64:e4:77:e3:40:90:63:85:a8:15:d0:51:a0:d7:
d5:46:65:83:f7:ca:5b:7a:90:1f:30:2d:bb:cc:7e:
28:de:7b:a3:18:e7:00:e9:d3:8d:b2:9f:98:10:d0:
29:33:bd:56:43:45:27:cd:e9:c9:07:ac:16:ec:c8:
4d:f7:25:76:f0:32:91:9b:ad:df:c2:8c:c9:58:b5:
ce:37:82:eb:44:3d:b9:c1:be:bd:a6:e2:9b:a1:76:
41:e7:d1:86:08:88:88:9c:01:29:03:af:28:51:11:
38:c2:39:dd:a1:3d:19:b3:c9:9b:e4:b5:e7:44:27:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:EE:F1:32:DA:5F:24:59:29:98:EB:25:8F:67:4E:EB:BB:A2:81
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/m9vu8TLaXyRZKZjrJY9nTuu7ooE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.197.0/24
Signature Algorithm: sha256WithRSAEncryption
65:72:dd:d2:32:f6:c0:dc:af:c7:61:09:f7:b3:56:dc:5f:a2:
b5:a0:51:b7:1f:c0:d3:ae:58:fa:c5:e9:ad:5c:c3:89:87:84:
18:9b:61:95:44:c4:ed:ac:4b:71:e0:8b:7c:07:b3:08:f0:d7:
a5:08:3e:47:27:f7:91:c0:29:df:61:35:c9:d0:bd:3d:15:c5:
6c:af:e7:ef:46:9c:31:e8:00:a6:69:78:51:80:a3:5d:be:f3:
33:b5:a9:25:99:a6:b1:c1:83:3a:9c:28:27:23:1a:8f:77:1c:
1f:34:c9:81:72:b7:7a:53:62:96:d3:5a:af:6a:03:dd:86:91:
45:3c:c5:06:ea:b1:47:dc:32:3f:1e:7e:34:66:a2:ec:97:bc:
6e:cf:1e:85:2b:8d:26:de:80:8c:0e:92:9d:e9:ef:bb:37:96:
1a:df:f2:91:a8:4d:53:ce:47:ee:89:9a:4a:4b:59:23:35:6e:
88:6a:a1:71:8d:41:e8:32:4f:52:cc:da:11:24:8f:03:b1:a7:
c5:f1:ab:41:19:5d:60:b6:4e:db:9c:95:2c:c6:8e:37:4d:ea:
12:23:c2:0c:66:87:8a:77:3c:bc:04:98:ec:08:c8:57:0b:17:
17:ac:ad:d8:f6:38:b4:7d:9d:57:1b:42:e3:14:69:16:7b:4d:
96:f1:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-ams.rpki-client.org