Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/Tjs-kSks-ShxEAnFpMWMbpct8_g.roa
File: Tjs-kSks-ShxEAnFpMWMbpct8_g.roa (raw, json)
Hash identifier: 3nFxe690K7j/fAfjnDuIRrALHqSgZ7vtrmkcgasGY7A=
Subject key identifier: 4E:3B:3E:91:29:2C:F9:28:71:10:09:C5:A4:C5:8C:6E:97:2D:F3:F8
Certificate issuer: /CN=58a68af51f23d30901b07c97754b28e92db5435e
Certificate serial: 02486AA6
Authority key identifier: 58:A6:8A:F5:1F:23:D3:09:01:B0:7C:97:75:4B:28:E9:2D:B5:43:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaK9R8j0wkBsHyXdUso6S21Q14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/Tjs-kSks-ShxEAnFpMWMbpct8_g.roa
Signing time: Sat 01 Jan 2022 13:04:29 +0000
ROA not before: Sat 01 Jan 2022 13:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56798
IP address blocks: 193.17.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38300326 (0x2486aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a68af51f23d30901b07c97754b28e92db5435e
Validity
Not Before: Jan 1 13:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e3b3e91292cf928711009c5a4c58c6e972df3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:ed:9b:1f:0c:93:53:c1:6a:a1:7c:d1:81:
da:6f:4f:ba:64:c1:c0:b3:90:cf:d9:c6:59:aa:d0:
40:e1:66:a2:a4:38:14:5e:16:fb:81:9a:ba:67:19:
6d:8b:7c:79:ea:93:d5:9a:de:53:69:31:6e:77:e3:
42:b1:a3:29:68:e3:49:6f:31:e6:0b:7d:28:3d:6d:
c0:84:9e:46:b5:45:c1:ab:60:5d:28:41:18:2b:5a:
8d:b4:ee:6b:d0:f5:49:97:32:20:ce:2b:62:b2:cb:
26:81:f6:e3:b0:92:73:b2:75:88:af:97:03:88:62:
c7:7c:13:7b:8a:11:91:af:7f:10:49:d1:9c:9e:8e:
f5:fc:7c:1e:a4:24:d6:51:69:31:d9:8b:71:6d:a5:
28:c9:e2:b7:52:a1:9f:f8:76:9e:0b:17:63:f4:fc:
e2:f7:cd:7a:28:44:7f:60:c2:bc:49:37:a8:2f:f8:
bf:34:f9:95:59:3e:04:4b:29:27:9f:56:1e:4b:c5:
68:3a:e7:6b:27:7f:ad:0c:d2:da:02:5c:a3:c1:75:
90:b1:52:ef:12:b7:84:e6:fa:1a:3a:2d:07:c1:bb:
b3:35:58:19:a6:cc:60:55:43:a6:0e:91:cf:15:ba:
03:16:bd:c4:3b:f1:f9:dc:9d:3d:ec:98:c5:63:9b:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:3E:91:29:2C:F9:28:71:10:09:C5:A4:C5:8C:6E:97:2D:F3:F8
X509v3 Authority Key Identifier:
keyid:58:A6:8A:F5:1F:23:D3:09:01:B0:7C:97:75:4B:28:E9:2D:B5:43:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaK9R8j0wkBsHyXdUso6S21Q14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/Tjs-kSks-ShxEAnFpMWMbpct8_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/WKaK9R8j0wkBsHyXdUso6S21Q14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e3:a0:f6:89:3f:79:52:47:03:36:c1:dc:eb:75:eb:87:52:
eb:ef:40:22:70:54:2d:4d:52:17:ef:06:4d:ff:f6:be:a5:95:
dd:f1:b7:82:8a:1e:51:c5:c8:04:c0:18:c3:45:ba:13:59:ac:
0e:a8:7e:5b:ef:98:5f:87:96:6e:d1:18:d4:5c:89:fd:ce:b0:
92:5a:19:48:cb:2e:0c:0b:ff:ca:bf:85:50:38:64:87:13:8f:
95:01:61:5d:48:8f:06:79:e0:c1:dd:8b:76:5e:db:cc:21:5a:
ef:29:8b:65:62:38:d9:64:62:23:49:5d:86:ff:38:3c:ef:a6:
19:9a:1e:28:b7:a5:67:b4:ad:9b:94:68:e8:13:8b:14:52:95:
0b:20:e6:73:48:14:c9:0a:ae:0c:86:63:89:55:8e:50:95:f3:
b7:aa:8c:3e:1d:90:f3:3a:fe:1e:48:51:e7:d3:1c:83:84:1f:
46:58:27:b7:b4:18:b5:c4:e3:15:90:51:9c:ff:e1:84:f0:6e:
76:a3:03:2c:18:6c:fc:f5:7f:04:3f:de:72:83:ae:a9:d6:aa:
db:98:33:82:ab:a6:16:99:44:5c:b2:0b:61:a7:49:e3:63:97:
f9:93:57:63:6d:ee:2d:a5:dd:5e:d2:d2:be:53:7a:d2:91:4e:
0f:fc:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:50 2024 by rpki-client on console-fra.rpki-client.org