Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/mn626IlxQE9nC4LVPsg27a-4KIA.roa
File: mn626IlxQE9nC4LVPsg27a-4KIA.roa (raw, json)
Hash identifier: P3mcmjU5or4x1zDlc1FfX84gcETO2LxetG6Xf+bi6+A=
Subject key identifier: 9A:7E:B6:E8:89:71:40:4F:67:0B:82:D5:3E:C8:36:ED:AF:B8:28:80
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 35574875
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/mn626IlxQE9nC4LVPsg27a-4KIA.roa
Signing time: Mon 27 Jun 2022 18:03:32 +0000
ROA not before: Mon 27 Jun 2022 18:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 193.106.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894912629 (0x35574875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jun 27 18:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a7eb6e88971404f670b82d53ec836edafb82880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3e:39:9f:91:2f:62:bd:cb:90:b9:04:75:a6:
10:5e:69:18:0f:a0:f6:c3:57:87:bb:85:26:e6:64:
fe:4f:a3:b2:91:62:10:be:01:99:c5:e5:fb:5b:95:
ab:25:f4:83:8e:2e:80:b7:5c:9d:87:98:59:26:04:
74:1a:08:d7:13:56:23:9e:96:38:9a:eb:e2:74:7d:
23:ab:67:da:11:dc:88:58:92:a4:80:8d:5c:e3:41:
73:d2:76:54:0b:50:c7:62:fe:99:f1:ba:7d:94:8a:
b7:c6:56:5b:a2:97:90:fb:87:16:36:00:76:ea:be:
e0:50:9e:56:52:5c:02:d8:dc:a4:cd:36:65:c9:8e:
ce:b8:a5:d0:16:06:07:e9:cb:79:d5:6c:b3:6e:3e:
71:d1:92:ed:13:0a:78:c2:f0:12:be:ea:53:4a:23:
eb:3b:21:a4:9f:82:b7:f8:fa:68:e1:f6:f1:dc:ef:
f9:6c:70:a8:d6:43:83:52:a5:66:3d:50:0c:0b:81:
43:5b:1f:0d:90:df:cd:78:41:43:7f:0c:f7:9e:30:
4e:77:61:6f:d6:79:85:ec:5c:6d:c6:29:80:1c:2f:
84:b8:16:aa:a1:96:d2:ae:e4:9b:f3:d4:18:74:77:
e8:d8:5a:be:48:41:fa:23:b6:dd:69:21:2e:0a:cb:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:B6:E8:89:71:40:4F:67:0B:82:D5:3E:C8:36:ED:AF:B8:28:80
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/mn626IlxQE9nC4LVPsg27a-4KIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:30:72:9c:80:1e:ac:68:80:7c:96:90:65:60:1f:85:15:04:
f7:45:f4:4a:7e:87:4b:b9:1b:e2:38:cf:bc:e3:11:4f:0c:33:
a3:15:5d:ba:2b:7d:d9:52:33:c0:1d:c7:57:e2:4e:76:28:ea:
f9:3c:76:a9:6b:b3:90:44:f1:55:dd:89:aa:f0:61:5f:bd:37:
04:ea:8d:7c:af:24:e0:a9:d6:67:f4:2b:36:8d:8d:42:63:12:
60:8d:e7:99:86:70:2f:ab:72:80:d1:96:94:e5:73:14:b6:56:
47:39:3f:74:03:54:cc:71:31:3e:18:95:52:0b:09:0d:3e:31:
ce:80:2a:c6:0c:8b:f4:d4:8e:8c:5d:f2:50:9e:26:88:74:b8:
ef:a4:a4:34:e4:5d:1c:39:a6:a2:c6:6f:54:16:55:a9:9e:5d:
71:59:a8:54:09:21:8f:60:43:a7:6f:7b:d2:b4:7f:ec:5a:9a:
91:06:a5:38:cb:5c:90:98:e4:1f:34:04:b4:b8:ea:cb:e5:43:
55:2b:05:c5:7e:90:e0:ac:1f:cb:9f:66:37:97:85:c2:f3:e1:
c6:e2:08:40:f2:52:d1:ca:84:f8:bb:81:e4:2a:eb:85:7a:f9:
f4:d5:cb:35:f8:27:d0:eb:1b:14:e6:ad:cc:bd:58:76:2a:07:
5a:bb:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org