Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/18409d-7967-46ca-bc1d-dec4497eec42/1/HveNlFFssIkTiUs1l90tlgVaLaE.roa
File: HveNlFFssIkTiUs1l90tlgVaLaE.roa (raw, json)
Hash identifier: 0+GAcaCd9g1tma8KSRYbfDwBpxYiuosbnhx0sx5hgcU=
Subject key identifier: 1E:F7:8D:94:51:6C:B0:89:13:89:4B:35:97:DD:2D:96:05:5A:2D:A1
Certificate issuer: /CN=4a61aa23319be21322f8d6a8b9f789e35ca615f1
Certificate serial: 01850C4C6CD86680F5FAEB625BE1C09EC8E2
Authority key identifier: 4A:61:AA:23:31:9B:E2:13:22:F8:D6:A8:B9:F7:89:E3:5C:A6:15:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmGqIzGb4hMi-NaoufeJ41ymFfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/18409d-7967-46ca-bc1d-dec4497eec42/1/HveNlFFssIkTiUs1l90tlgVaLaE.roa
Signing time: Tue 13 Dec 2022 16:23:33 +0000
ROA not before: Tue 13 Dec 2022 16:23:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33965
IP address blocks: 193.135.96.0/22 maxlen: 24
193.228.198.0/24 maxlen: 24
193.228.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:4c:6c:d8:66:80:f5:fa:eb:62:5b:e1:c0:9e:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a61aa23319be21322f8d6a8b9f789e35ca615f1
Validity
Not Before: Dec 13 16:23:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ef78d94516cb08913894b3597dd2d96055a2da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:74:18:dc:d8:07:f6:39:1e:26:81:1f:0e:
1d:da:27:19:bd:e7:b1:ed:cd:b6:96:4c:40:85:ce:
d2:71:6d:95:04:ea:87:3d:f1:39:58:2a:80:f3:eb:
15:3c:c0:09:2f:2c:4f:d9:4f:92:0e:75:b0:55:0c:
04:e9:5b:d1:37:17:2c:04:d3:22:ba:20:95:64:3c:
02:f7:42:32:d0:ed:78:59:8d:7a:ed:99:63:f9:00:
ca:e8:b3:2a:df:13:63:a0:f5:3c:68:16:45:fa:ed:
dc:df:cb:e1:49:68:3d:23:18:12:30:d9:bc:db:3d:
c1:78:15:49:4b:d1:4e:eb:79:56:4a:ed:93:b2:3c:
35:ab:f4:f4:05:3c:48:6e:85:26:68:de:1e:b7:e8:
ce:ac:9b:b8:f4:47:14:47:05:b0:8e:d5:cb:75:2d:
0a:dc:e3:f7:b0:4e:6e:b2:ad:7c:8c:90:e4:a1:ef:
5b:15:ca:16:0d:c4:3c:f3:b6:27:2d:a8:d4:3a:81:
27:04:ea:70:ea:9d:44:85:72:85:be:32:74:37:9f:
67:f8:09:fb:b4:e2:42:e8:d7:c4:b5:9a:0e:f7:cc:
81:e3:06:33:ed:16:91:e6:07:72:6a:fa:8f:92:16:
e4:10:fd:75:41:72:4d:16:4c:9b:36:e4:16:b9:07:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:8D:94:51:6C:B0:89:13:89:4B:35:97:DD:2D:96:05:5A:2D:A1
X509v3 Authority Key Identifier:
keyid:4A:61:AA:23:31:9B:E2:13:22:F8:D6:A8:B9:F7:89:E3:5C:A6:15:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmGqIzGb4hMi-NaoufeJ41ymFfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/18409d-7967-46ca-bc1d-dec4497eec42/1/HveNlFFssIkTiUs1l90tlgVaLaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/18409d-7967-46ca-bc1d-dec4497eec42/1/SmGqIzGb4hMi-NaoufeJ41ymFfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.96.0/22
193.228.197.0-193.228.198.255
Signature Algorithm: sha256WithRSAEncryption
8d:11:6a:93:da:67:3b:79:3b:70:ac:44:0d:2a:5c:90:42:3f:
5f:35:da:45:62:ce:ed:ea:39:e4:a9:f0:ca:9d:1e:1a:97:53:
2d:0f:f0:f7:b7:61:67:80:4d:d2:a9:e5:59:39:9b:de:62:a6:
00:d0:86:84:43:59:54:f4:2f:3f:6a:1d:21:20:65:3f:8e:8a:
f3:6b:a2:fd:48:d6:f8:0f:28:9a:53:17:35:4e:43:f6:10:38:
d8:cf:a0:13:59:3f:5e:29:15:80:ed:fa:1a:77:2d:1b:51:21:
76:1d:9f:24:64:2a:93:b3:cc:c2:ab:41:45:16:15:62:54:ad:
7a:ac:56:91:bc:12:19:a8:cb:2f:1f:9e:b1:bb:7e:36:b4:bc:
25:3b:b2:38:b2:ce:f3:1d:c3:6c:93:f8:8b:20:83:3a:a9:ca:
58:d6:e9:5a:1e:42:35:2e:79:3a:ff:91:a8:9a:a8:8a:7c:73:
df:d4:3b:38:fe:b3:12:05:f5:3a:0a:95:ee:5e:83:5f:ef:56:
f4:f7:89:59:75:2d:23:82:c5:11:33:1e:37:e7:84:a5:b2:e9:
df:94:51:05:9c:a6:7f:6e:7a:3b:b2:0d:ea:41:60:c6:2a:29:
de:27:08:13:cc:ef:bd:ac:c2:62:6b:56:05:f0:83:8c:9d:41:
21:94:88:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:20 2023 by rpki-client on console-ams.rpki-client.org