Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/rkI7kqqmQAXzJH-NjDDKMBaFV1o.roa
File: rkI7kqqmQAXzJH-NjDDKMBaFV1o.roa (raw, json)
Hash identifier: XTI9Y5ylt08uPunrMHp0ANuLSGptDBcXhjR08rX1WA8=
Subject key identifier: AE:42:3B:92:AA:A6:40:05:F3:24:7F:8D:8C:30:CA:30:16:85:57:5A
Certificate issuer: /CN=58a68af51f23d30901b07c97754b28e92db5435e
Certificate serial: 01856E267E0C1E386D00F3AB8E283A356EF5
Authority key identifier: 58:A6:8A:F5:1F:23:D3:09:01:B0:7C:97:75:4B:28:E9:2D:B5:43:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaK9R8j0wkBsHyXdUso6S21Q14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/rkI7kqqmQAXzJH-NjDDKMBaFV1o.roa
Signing time: Sun 01 Jan 2023 16:24:54 +0000
ROA not before: Sun 01 Jan 2023 16:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56798
IP address blocks: 193.17.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:7e:0c:1e:38:6d:00:f3:ab:8e:28:3a:35:6e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a68af51f23d30901b07c97754b28e92db5435e
Validity
Not Before: Jan 1 16:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae423b92aaa64005f3247f8d8c30ca301685575a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:79:36:9f:31:36:8f:27:8e:42:2f:aa:ec:
0b:37:3a:e8:d3:a8:b0:4e:b8:33:b8:03:17:5c:c0:
df:8e:17:ff:56:f9:d3:67:43:ca:29:b9:5b:64:13:
65:be:da:08:ee:20:b6:a8:8d:f5:50:f9:96:13:57:
65:0d:2a:d9:ce:d2:48:1d:ae:26:83:64:33:41:9f:
21:79:09:ff:79:34:96:62:67:74:89:9f:ec:68:e8:
b1:a1:63:9a:62:ff:c3:db:c6:ff:00:d0:23:f7:52:
34:1c:60:10:c6:cd:7d:21:ca:23:2a:e6:82:54:a0:
9f:6a:7c:34:bb:2f:ac:e9:bf:4c:81:c5:4c:04:c2:
fe:cc:05:5b:02:79:54:d7:97:cb:27:d9:fc:70:0f:
c7:5e:14:1f:65:77:40:d9:cd:30:43:9a:e6:3b:98:
49:86:fd:f5:ea:5f:63:b1:9c:28:a0:4d:e3:51:8a:
3b:e6:4e:b9:d0:82:d1:5a:fc:27:34:12:d2:36:58:
78:02:c1:a7:2b:a9:1a:31:d9:ae:c6:28:c8:86:8d:
e5:f2:67:28:a3:85:0f:01:75:cd:80:54:de:17:d1:
d0:8c:78:ad:b3:b6:08:ee:e7:22:f9:bf:bd:0d:35:
8b:8b:7b:cd:c8:2c:fb:ec:ab:bd:f4:b3:b2:e5:f3:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:42:3B:92:AA:A6:40:05:F3:24:7F:8D:8C:30:CA:30:16:85:57:5A
X509v3 Authority Key Identifier:
keyid:58:A6:8A:F5:1F:23:D3:09:01:B0:7C:97:75:4B:28:E9:2D:B5:43:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaK9R8j0wkBsHyXdUso6S21Q14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/rkI7kqqmQAXzJH-NjDDKMBaFV1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/WKaK9R8j0wkBsHyXdUso6S21Q14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.33.0/24
Signature Algorithm: sha256WithRSAEncryption
64:50:46:10:88:3c:8b:18:3a:73:1c:1d:1c:66:89:0d:dc:c8:
6c:00:9c:75:e7:d2:fd:a0:8b:81:35:9e:df:f6:6e:57:c5:ba:
f5:b6:80:13:ce:23:7c:7c:03:3d:c3:40:8a:06:0c:b5:f8:be:
40:41:27:53:ab:a9:e0:3f:22:30:31:9a:5c:c8:6a:bf:b9:d0:
c8:06:75:18:7a:53:03:4c:ef:c9:b6:89:b2:a2:d5:14:a8:89:
2c:72:0b:95:6e:14:09:11:c3:1e:f3:34:5f:6f:3c:e0:eb:dd:
b9:0e:32:12:74:3f:f5:0d:09:24:bc:33:b5:08:5b:6d:cd:c7:
b2:05:44:76:00:e2:58:e8:a8:8e:38:89:78:2c:dd:68:08:4a:
7f:dd:e0:eb:68:62:d0:12:4e:77:0a:c5:de:ac:88:e4:46:4a:
64:eb:23:83:8a:7f:67:71:a6:61:6e:1f:9d:ec:6e:fc:33:f2:
a2:c8:7d:9e:5a:93:5d:8e:38:b4:27:44:63:b1:fe:b7:d6:d8:
f5:2b:d6:36:55:f8:6c:c0:57:07:fc:3e:d4:be:12:f8:e8:09:
1d:f3:2b:a6:1c:a9:89:5d:05:22:2e:83:45:00:b3:6d:e8:c8:
8c:af:86:e0:36:ac:60:fb:a9:b2:bf:58:bd:d0:27:2e:0d:64:
5b:07:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:50 2024 by rpki-client on console-fra.rpki-client.org