Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/5czdLI31iMB2ig-xA6i2AzkTCtk.roa
File: 5czdLI31iMB2ig-xA6i2AzkTCtk.roa (raw, json)
Hash identifier: tDKPPjPBV3rdSqcTl0nU6PKDY+d76bLopLc0va1WDu0=
Subject key identifier: E5:CC:DD:2C:8D:F5:88:C0:76:8A:0F:B1:03:A8:B6:03:39:13:0A:D9
Certificate issuer: /CN=cda81fe95261904e941237ea4c7cec8f768b046d
Certificate serial: 018CC492FA5B2D97D99A0D0ED8DF56B3623A
Authority key identifier: CD:A8:1F:E9:52:61:90:4E:94:12:37:EA:4C:7C:EC:8F:76:8B:04:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zagf6VJhkE6UEjfqTHzsj3aLBG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/5czdLI31iMB2ig-xA6i2AzkTCtk.roa
Signing time: Mon 01 Jan 2024 10:30:15 +0000
ROA not before: Mon 01 Jan 2024 10:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 193.111.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:fa:5b:2d:97:d9:9a:0d:0e:d8:df:56:b3:62:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda81fe95261904e941237ea4c7cec8f768b046d
Validity
Not Before: Jan 1 10:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5ccdd2c8df588c0768a0fb103a8b60339130ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:cf:59:8e:ef:62:2f:a2:4c:58:d2:aa:08:
53:3c:a8:ed:e9:44:b0:e3:20:fd:1a:88:fc:01:a4:
dd:6a:91:78:4c:a2:00:4c:9b:97:02:65:f2:f7:7d:
09:f1:60:61:15:82:98:1a:8f:e8:cd:fb:4c:18:81:
4f:33:53:82:d5:dc:2e:a8:d6:bf:e9:51:fe:8c:8b:
c3:b7:6d:c9:92:6b:f4:73:6b:11:68:c8:e8:90:d4:
3d:3b:84:e4:22:72:93:cb:f8:d7:11:d4:76:52:a6:
f0:12:bf:cd:e1:b8:44:3a:1e:d3:4d:b7:f1:79:35:
50:2d:38:0b:e2:50:35:35:c0:b1:88:fc:64:4f:e5:
77:fa:41:2a:80:c4:16:9b:23:69:3b:88:30:04:fb:
a6:27:8c:a7:3f:84:fb:fa:28:ea:80:65:1a:4b:d4:
fe:d6:84:8a:96:36:9d:8a:56:36:d5:24:ce:34:37:
2c:43:2a:0c:c5:4e:da:7b:d7:4f:ec:37:ca:c7:70:
4e:04:f1:36:16:54:22:05:2f:05:33:3d:56:e3:83:
a7:f9:a9:9d:ed:03:4c:95:b6:d0:51:fe:36:6c:9a:
e4:75:6d:28:0e:33:e9:71:32:83:6a:03:92:15:6f:
94:3b:f4:be:70:1a:54:da:51:b8:0b:e6:ec:f3:98:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:DD:2C:8D:F5:88:C0:76:8A:0F:B1:03:A8:B6:03:39:13:0A:D9
X509v3 Authority Key Identifier:
keyid:CD:A8:1F:E9:52:61:90:4E:94:12:37:EA:4C:7C:EC:8F:76:8B:04:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zagf6VJhkE6UEjfqTHzsj3aLBG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/5czdLI31iMB2ig-xA6i2AzkTCtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/zagf6VJhkE6UEjfqTHzsj3aLBG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.40.0/24
Signature Algorithm: sha256WithRSAEncryption
48:52:63:f5:20:25:22:fa:15:7f:ee:d6:98:61:3e:cd:0d:55:
22:52:e7:25:36:b7:55:06:47:12:a3:86:22:74:73:bb:bc:c9:
9f:c3:c6:70:0a:f4:f6:57:3e:61:c4:b3:dc:50:14:8f:7c:b4:
c3:1e:b7:39:ec:43:4f:dc:d6:41:26:0d:b6:13:1d:d5:3b:bd:
e0:c6:ea:3e:47:0d:54:ba:fe:9f:8f:8e:4c:5e:a9:eb:8c:65:
dc:a4:77:b2:70:4c:57:6c:22:c7:39:c5:84:44:bd:be:88:5a:
65:bb:11:36:4e:02:44:f1:6f:b3:e9:07:8b:b9:41:37:85:bd:
1f:0a:dc:8b:88:45:1d:02:d6:78:95:ce:5d:a9:c2:4e:ca:2f:
58:91:17:47:88:3d:aa:61:1b:93:ce:94:b6:17:15:57:14:40:
29:94:39:e5:49:56:b6:5f:90:17:92:11:30:81:60:cd:d7:fb:
c6:f2:13:cf:8f:2e:6b:d2:b4:fd:ae:01:e7:5a:4f:8e:d8:3b:
02:de:1f:1d:6d:30:9a:9f:ac:5c:63:a9:90:58:d7:83:97:19:
c1:ba:37:77:7e:c6:1c:0f:5c:1a:15:7c:b1:6c:58:10:57:40:
3f:d0:b5:8d:eb:59:b6:cf:2a:6f:07:0b:fc:95:58:25:ad:4b:
f5:10:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:58:44 2024 by rpki-client on console-fra.rpki-client.org