Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/CrNtGhwM3kUFOIgFmPQyMMhBGgI.roa
File: CrNtGhwM3kUFOIgFmPQyMMhBGgI.roa (raw, json)
Hash identifier: ksfxLYkYtnicGUqMWotMAKVgaDRHI8fa1c8tS5JjcEo=
Subject key identifier: 0A:B3:6D:1A:1C:0C:DE:45:05:38:88:05:98:F4:32:30:C8:41:1A:02
Certificate issuer: /CN=0fca0c8ad12ddc205b15a89e45303b2d63f04588
Certificate serial: 018B08A52B50B2CA5167730D6D317BE29FDD
Authority key identifier: 0F:CA:0C:8A:D1:2D:DC:20:5B:15:A8:9E:45:30:3B:2D:63:F0:45:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8oMitEt3CBbFaieRTA7LWPwRYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/CrNtGhwM3kUFOIgFmPQyMMhBGgI.roa
Signing time: Sat 07 Oct 2023 05:38:44 +0000
ROA not before: Sat 07 Oct 2023 05:38:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58274
IP address blocks: 193.26.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:08:a5:2b:50:b2:ca:51:67:73:0d:6d:31:7b:e2:9f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fca0c8ad12ddc205b15a89e45303b2d63f04588
Validity
Not Before: Oct 7 05:38:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ab36d1a1c0cde450538880598f43230c8411a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:c4:a6:c0:8a:ae:9d:b5:73:c4:da:c8:38:
64:11:74:51:8a:78:85:42:a2:a9:63:4f:bc:7d:ad:
4c:46:34:64:7a:48:93:4b:6d:8e:d6:54:bb:ab:30:
be:7a:04:3b:fa:66:84:4c:fc:83:da:e1:07:22:76:
1b:14:c6:18:95:0e:e0:a2:71:f3:4b:57:a7:f5:e2:
57:91:87:6f:98:c2:a3:5a:b6:a4:14:94:6e:6f:1f:
5e:18:30:76:6f:c7:e9:10:12:1f:15:27:5e:74:bb:
a5:d0:6f:be:30:4e:da:9a:d2:fb:a9:af:b5:a1:cf:
7b:3a:0a:f6:1f:e3:ca:34:1b:74:3b:4c:a9:f9:e7:
9d:47:f0:1a:5b:b3:aa:5b:50:50:a1:90:6a:7e:94:
8f:8c:12:d0:ed:86:8f:65:2b:06:f8:c9:07:73:f5:
ca:34:43:15:a7:a0:6f:59:af:52:28:cd:fb:7d:ee:
a9:c9:10:06:86:52:de:0a:f7:00:34:6d:b9:e7:cb:
da:a1:a6:0f:2b:54:22:4c:b4:eb:b5:9d:67:f0:78:
02:46:e4:24:a8:b1:80:e2:1b:62:73:a2:fe:a5:ca:
58:dd:b2:90:04:1f:ec:fd:a0:9f:b5:7b:95:d7:c1:
8a:53:ca:50:01:c9:6a:36:17:b3:d3:78:0c:dc:b3:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B3:6D:1A:1C:0C:DE:45:05:38:88:05:98:F4:32:30:C8:41:1A:02
X509v3 Authority Key Identifier:
keyid:0F:CA:0C:8A:D1:2D:DC:20:5B:15:A8:9E:45:30:3B:2D:63:F0:45:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8oMitEt3CBbFaieRTA7LWPwRYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/CrNtGhwM3kUFOIgFmPQyMMhBGgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/D8oMitEt3CBbFaieRTA7LWPwRYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0c:3b:6d:ee:3d:9c:41:22:f7:4f:77:f6:98:60:d1:7d:3d:
e4:09:3e:3e:d1:02:20:4f:db:3d:ca:5f:86:78:f5:3e:d3:72:
a3:6e:b2:41:56:70:e0:ec:0d:8c:02:5b:50:fa:d0:9f:ab:b5:
a6:36:50:40:07:7a:29:42:eb:aa:13:79:b7:92:d8:84:e0:7e:
cf:79:ca:4b:ba:de:80:b6:ca:77:19:8c:bc:f2:ba:36:0e:02:
d9:95:4e:89:ce:1e:97:59:39:ce:be:f3:27:24:ce:61:43:e6:
a6:9d:35:b7:50:88:3e:4a:39:9b:2e:fa:9c:1d:0b:2f:4e:bf:
54:4c:e3:81:92:e7:e3:70:aa:63:c3:a0:58:9d:ed:36:3f:7f:
b6:20:0b:d2:bf:0e:41:16:0e:07:d6:b5:b6:9d:24:dd:52:24:
65:2c:8f:b0:ba:27:e2:89:c9:2e:66:28:76:3e:c1:34:55:b8:
32:0c:4e:c5:da:36:24:d8:58:21:8c:55:4a:41:20:4a:08:94:
dd:8d:ad:63:76:16:15:36:b1:fe:61:8a:f0:66:e5:76:34:a6:
c2:c9:6a:19:af:34:14:e3:45:c3:42:d8:2c:8f:a2:56:f3:91:
c5:bc:1a:6e:6b:1f:5a:0b:73:17:d9:90:e1:22:37:98:db:44:
39:73:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:10 2024 by rpki-client on console-ams.rpki-client.org