Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/oEeqNSUcVdAFzXxYeToHMareZmg.roa
File: oEeqNSUcVdAFzXxYeToHMareZmg.roa (raw, json)
Hash identifier: OC2FtT511d99lzzGArWyc9eOgVSzsGSMmxBSk1KeFy8=
Subject key identifier: A0:47:AA:35:25:1C:55:D0:05:CD:7C:58:79:3A:07:31:AA:DE:66:68
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 0186C0AB4A2A31F51AA0B6AA599C56520947
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/oEeqNSUcVdAFzXxYeToHMareZmg.roa
Signing time: Wed 08 Mar 2023 10:01:36 +0000
ROA not before: Wed 08 Mar 2023 10:01:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:ab:4a:2a:31:f5:1a:a0:b6:aa:59:9c:56:52:09:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Mar 8 10:01:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a047aa35251c55d005cd7c58793a0731aade6668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:3b:1c:90:cf:2d:73:5c:b9:58:82:81:33:
dc:09:d6:b2:ab:fd:c1:28:d5:5e:4e:34:b9:9e:d6:
3b:f5:4b:44:fd:47:e5:bf:be:57:a0:53:d3:6a:9c:
7e:21:96:9b:1f:e3:02:44:0a:1b:2c:40:dd:df:99:
8f:49:6b:8e:84:fb:08:89:39:27:4f:03:e5:03:29:
f8:0c:32:21:77:0c:4f:94:1f:96:ae:73:ee:e2:98:
38:3a:c5:a2:36:23:0b:54:7e:af:35:95:e0:05:03:
47:26:07:d8:36:9f:3e:ad:07:fe:13:7b:68:84:e7:
a7:1c:be:56:9e:2f:f8:8f:a0:68:c3:95:59:d0:41:
dc:63:09:95:80:f8:c5:2b:4b:a8:12:ae:a1:e2:82:
c7:3e:8c:e9:76:75:c2:93:59:bb:bc:e8:56:fc:3c:
ea:90:25:33:a4:fa:59:02:a6:03:db:ac:25:6e:68:
32:77:3a:7e:6e:20:5d:91:d1:e1:a3:25:e3:a4:5e:
b6:1f:b3:7a:ad:14:63:a0:7f:eb:be:d1:df:2f:bc:
b5:bf:fc:4f:38:19:cf:81:2d:f6:57:c9:0a:75:bd:
e4:4a:77:1b:13:b8:8d:64:d8:e4:68:42:c0:40:db:
d8:47:e3:0c:72:e1:4c:d7:8d:ca:b2:ee:82:91:bf:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:47:AA:35:25:1C:55:D0:05:CD:7C:58:79:3A:07:31:AA:DE:66:68
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/oEeqNSUcVdAFzXxYeToHMareZmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e8:18:e8:ec:e6:83:c6:0e:08:79:08:9d:2f:d8:08:f6:a3:
5b:73:11:b0:0f:07:d9:09:b1:a7:07:e7:3f:1e:76:b0:5e:23:
b3:a9:d6:1e:b6:61:ca:a3:75:9c:d7:88:ec:b0:3e:e3:1b:d0:
b0:65:5c:08:a2:ca:cf:30:25:6c:5a:f5:5d:c9:e4:0d:03:89:
24:b5:9d:ef:fe:7a:66:9f:f9:cc:90:1d:83:9a:11:e3:2c:46:
43:51:5b:9c:d8:40:64:19:5a:e8:e9:75:14:6a:74:a7:e1:c7:
32:d6:cc:84:24:2c:97:46:30:03:e0:d1:b4:90:9c:e8:39:b9:
04:5a:d8:3f:06:d1:c7:59:6f:d0:ed:50:b4:04:cd:95:26:2e:
7e:68:c1:8b:d8:6b:2f:0c:44:b2:a0:e2:ba:56:ef:4d:de:63:
6c:8c:ab:6e:b1:4e:2a:68:ad:9a:a9:ec:17:0e:6d:57:49:fd:
92:b5:47:e7:c3:c0:93:fb:82:81:12:d6:ab:2e:23:e1:a6:ce:
5a:77:ff:e0:c5:18:80:6e:05:71:b1:fa:2e:28:d1:63:e0:01:
40:98:e6:43:d3:fa:1e:6e:0e:7c:8d:71:13:ae:0a:b8:6f:63:
52:bd:e7:31:33:58:d7:c7:2b:cc:97:83:c6:bf:ea:5e:72:55:
57:22:40:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org