Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/SCAAOOxDCj50L07dQNrSPhLfOHw.roa
File: SCAAOOxDCj50L07dQNrSPhLfOHw.roa (raw, json)
Hash identifier: 07+BrIM9T1KWgEOW3d2a8IyshsEzsYhSv0upo2t8wKQ=
Subject key identifier: 48:20:00:38:EC:43:0A:3E:74:2F:4E:DD:40:DA:D2:3E:12:DF:38:7C
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 01856F79A28A003567A4755A175F0F307424
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/SCAAOOxDCj50L07dQNrSPhLfOHw.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 194.50.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a2:8a:00:35:67:a4:75:5a:17:5f:0f:30:74:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48200038ec430a3e742f4edd40dad23e12df387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:da:0f:1d:a7:c6:82:55:72:56:2d:f0:75:
94:42:f5:ff:16:2f:40:b8:06:fb:6c:3b:17:1b:b7:
bb:d5:1a:f2:08:45:30:58:7a:2f:94:f4:e3:b5:be:
2d:b2:7f:1f:94:15:d0:59:be:b2:2c:4a:bc:fb:8f:
70:92:46:e9:ac:32:44:15:3e:70:60:91:fd:7f:13:
75:ac:93:69:30:13:ae:06:5b:74:84:e7:2b:e6:9c:
e1:6d:5f:b5:f4:35:10:00:3b:c8:bb:33:f4:b0:de:
59:99:ca:2e:64:43:8b:38:fc:a1:2c:84:7b:bd:f3:
84:d9:44:d9:5b:71:e1:c7:5c:b3:70:3a:ae:79:d4:
0d:10:26:a2:7e:4e:be:d9:ef:56:de:1a:60:8d:a6:
32:bb:cc:b9:e7:34:84:45:a0:14:03:0f:8a:71:59:
9b:cb:f7:3c:bb:64:39:36:20:0c:98:a4:ea:bd:6c:
82:6d:26:a0:47:6c:86:86:c1:37:ca:84:c5:de:99:
69:db:0e:59:82:8b:13:7d:e1:58:8a:f2:b4:65:9a:
40:ee:2d:bc:a2:ad:d5:83:0d:71:55:23:b1:37:c1:
ea:ae:10:16:cf:69:3c:2d:2a:2f:54:23:14:20:a2:
a3:45:17:d4:8f:d8:5d:f8:b0:a6:26:f2:74:ec:11:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:20:00:38:EC:43:0A:3E:74:2F:4E:DD:40:DA:D2:3E:12:DF:38:7C
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/SCAAOOxDCj50L07dQNrSPhLfOHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.243.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:24:e6:42:5b:09:01:5f:3f:b7:2a:45:40:07:e1:97:cc:1d:
c6:ea:37:84:35:02:d4:4d:55:c8:d9:36:10:b9:1e:9a:8e:fa:
2d:39:c1:49:c1:b6:43:c3:be:02:d4:bf:53:e1:80:e6:05:14:
27:a9:53:61:89:28:2d:fe:01:ba:38:85:20:ba:46:f4:43:65:
93:ee:0c:cb:d3:97:be:f5:ce:df:d7:ea:ce:46:bd:6f:87:fc:
b9:59:bb:52:9f:19:a7:fc:51:96:07:74:fd:ea:f4:d9:c8:67:
3f:6c:fa:e4:ea:8c:af:92:ff:af:d2:ee:a6:e2:fc:a9:2e:fb:
ea:df:31:5f:df:2a:06:18:f3:d6:bb:45:c6:00:52:55:98:18:
8b:d8:ec:f3:4f:81:21:0e:bc:d7:19:c1:d9:bd:1f:cc:7b:6f:
50:4c:26:ce:d9:af:33:80:68:96:92:a9:df:be:53:a3:14:00:
01:29:fe:cb:f1:2b:d8:45:4d:c1:12:75:41:aa:6b:ab:a6:6b:
4c:bd:2f:42:1b:0a:b2:06:ae:8f:13:ad:14:9e:f9:44:04:0e:
62:0c:f3:5e:85:63:fe:01:20:0a:cd:d7:83:38:0f:a4:de:44:
5a:69:23:4d:98:02:5a:fb:6c:c3:5c:30:79:6c:7f:cd:ed:d6:
16:ab:a1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org