Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/abe772-b9fd-43b4-970a-60fc56497282/1/hLRfTFvoEf21Z3tjHukUBsgoW_k.roa
File: hLRfTFvoEf21Z3tjHukUBsgoW_k.roa (raw, json)
Hash identifier: vTkY+sNVnguGQUJRN1R612h83hDSphpuOiPUxrJrBCc=
Subject key identifier: 84:B4:5F:4C:5B:E8:11:FD:B5:67:7B:63:1E:E9:14:06:C8:28:5B:F9
Certificate issuer: /CN=4c47d6791c0ee8bd9a3beb0cf05de56fbb5543b9
Certificate serial: 018571C308013662A221BAC71AE68CB544F7
Authority key identifier: 4C:47:D6:79:1C:0E:E8:BD:9A:3B:EB:0C:F0:5D:E5:6F:BB:55:43:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEfWeRwO6L2aO-sM8F3lb7tVQ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/abe772-b9fd-43b4-970a-60fc56497282/1/hLRfTFvoEf21Z3tjHukUBsgoW_k.roa
Signing time: Mon 02 Jan 2023 09:14:44 +0000
ROA not before: Mon 02 Jan 2023 09:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 193.84.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:08:01:36:62:a2:21:ba:c7:1a:e6:8c:b5:44:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c47d6791c0ee8bd9a3beb0cf05de56fbb5543b9
Validity
Not Before: Jan 2 09:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84b45f4c5be811fdb5677b631ee91406c8285bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:97:9f:3d:c0:40:e1:ff:02:f9:78:5f:5c:
19:3e:4c:e5:d0:76:ab:d1:00:e8:2f:b5:fd:10:14:
fc:bb:b2:6c:5a:2d:ca:47:4d:5e:d5:aa:e1:89:48:
61:4d:6e:c8:0e:ae:a3:8a:d0:5f:08:e6:70:b8:76:
8b:63:9f:fe:a2:4b:d3:8a:5f:22:9d:96:d8:38:07:
92:15:75:2c:37:6e:44:4b:ef:75:3b:ad:bf:90:0c:
9d:6e:93:91:ad:9a:b9:86:73:a8:82:56:10:92:1d:
bc:2c:f7:53:55:38:e2:a0:9a:6e:9c:03:f9:66:96:
e1:8c:f3:35:ad:79:2d:d8:ec:27:e6:2f:c3:e7:0e:
fe:8a:e2:53:cb:84:98:53:e1:f9:e3:f4:f0:64:e2:
97:0e:ab:95:7e:ba:96:c9:cf:5c:b7:72:a2:25:f8:
c3:b6:47:ef:75:e2:bd:da:c4:75:f2:64:3a:9c:42:
e8:11:be:11:d8:49:3a:8a:6c:30:8a:87:98:18:74:
9c:75:cb:5e:0e:17:de:4c:dc:e3:ac:57:c5:e6:3b:
2a:7d:c6:cd:e2:c6:35:e3:3e:60:d0:b5:38:70:7f:
5b:a8:d1:42:c9:e9:b7:0a:8b:88:48:b9:55:ec:0c:
b0:d7:eb:24:e1:54:23:19:56:09:86:c0:d7:30:b7:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:5F:4C:5B:E8:11:FD:B5:67:7B:63:1E:E9:14:06:C8:28:5B:F9
X509v3 Authority Key Identifier:
keyid:4C:47:D6:79:1C:0E:E8:BD:9A:3B:EB:0C:F0:5D:E5:6F:BB:55:43:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEfWeRwO6L2aO-sM8F3lb7tVQ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/abe772-b9fd-43b4-970a-60fc56497282/1/hLRfTFvoEf21Z3tjHukUBsgoW_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/abe772-b9fd-43b4-970a-60fc56497282/1/TEfWeRwO6L2aO-sM8F3lb7tVQ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.109.0/24
Signature Algorithm: sha256WithRSAEncryption
16:aa:33:b2:9d:cd:a7:d1:04:9c:48:36:67:7c:27:c8:30:f8:
8c:29:64:67:f5:f5:21:e3:56:82:c6:7f:a7:81:a2:9b:96:62:
50:7f:ba:7b:a7:41:2f:e0:06:04:82:12:19:e6:b2:66:d8:4f:
63:7f:58:25:2d:e9:92:4a:ad:f7:a6:15:ed:3d:ea:74:07:54:
e7:99:51:d8:f4:03:3d:83:a2:12:46:f2:b0:3c:e1:6a:3e:3b:
75:f5:1f:09:f2:fd:a4:46:9a:e3:41:6d:0d:f8:e2:9b:e3:c2:
5c:cf:83:f5:a6:76:d6:51:79:a3:c7:49:36:05:5d:f2:e0:69:
42:46:0d:50:28:10:7c:6d:5c:9f:ff:27:f6:c6:59:ba:61:f4:
fd:b2:27:1a:28:ce:1e:79:ec:cf:f6:ab:d3:e0:bc:09:44:8a:
db:ae:ca:3c:80:ef:75:eb:29:90:bd:a6:8b:96:4a:3c:09:61:
87:09:54:81:f3:0f:35:2e:49:3f:86:fa:28:28:d4:c7:4c:a5:
5f:19:60:e9:65:67:7d:ff:3b:4a:b8:cd:c1:12:b5:48:7b:bc:
4a:f9:c9:5a:65:93:ac:68:73:06:23:88:cf:fb:81:ee:a3:89:
b9:a7:6e:23:e2:f2:d3:db:ce:4d:95:4f:7e:b1:a6:f9:91:b1:
81:6b:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 17:21:52 2023 by rpki-client on console-ams.rpki-client.org