Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/Y9SxW2EVqHnryQIklTqxiU3l31k.roa
File: Y9SxW2EVqHnryQIklTqxiU3l31k.roa (raw, json)
Hash identifier: FQp77yCOy0x85fKymjGUasvxDXy2i/6p+7x9hjMKiro=
Subject key identifier: 63:D4:B1:5B:61:15:A8:79:EB:C9:02:24:95:3A:B1:89:4D:E5:DF:59
Certificate issuer: /CN=230ccc2d21e5ae877035aed9381b4a3cba69161a
Certificate serial: 01849C12EC2DB5784D7C7C045E44831AC8F3
Authority key identifier: 23:0C:CC:2D:21:E5:AE:87:70:35:AE:D9:38:1B:4A:3C:BA:69:16:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwzMLSHlrodwNa7ZOBtKPLppFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/Y9SxW2EVqHnryQIklTqxiU3l31k.roa
Signing time: Mon 21 Nov 2022 21:23:16 +0000
ROA not before: Mon 21 Nov 2022 21:23:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43517
IP address blocks: 193.162.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:12:ec:2d:b5:78:4d:7c:7c:04:5e:44:83:1a:c8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230ccc2d21e5ae877035aed9381b4a3cba69161a
Validity
Not Before: Nov 21 21:23:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63d4b15b6115a879ebc90224953ab1894de5df59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:71:6a:a0:db:6e:84:db:d8:97:7e:86:9d:
7e:3e:c0:e0:d6:ec:28:d6:6f:e3:58:7c:e3:21:c9:
8c:87:89:d5:09:ee:b1:8d:ce:56:44:27:d1:0d:3d:
e6:9a:82:7c:c7:1e:be:8e:00:51:0e:93:43:03:7e:
be:6a:f4:fc:89:06:5b:59:99:f9:0f:b3:3e:2e:a4:
bc:0b:b0:4e:44:1c:0f:ea:e8:9a:34:05:11:c3:8a:
1a:77:d9:0f:79:7d:84:78:49:4f:05:99:8a:9f:97:
d3:04:fe:79:3b:32:f3:cb:78:ae:35:f2:8b:88:77:
43:23:e2:d1:a1:1e:0e:db:43:24:c1:2d:cb:c6:4a:
bc:87:09:d1:0a:dc:95:36:83:c9:d7:7e:52:9d:96:
43:4e:12:98:db:14:a7:33:ca:7e:b9:71:ac:5f:b8:
e6:56:16:63:6d:b6:87:e7:85:9d:e5:72:f2:4b:bd:
71:ca:7c:65:54:ff:a0:0d:43:76:1e:91:2a:60:11:
b5:55:14:2e:67:bf:c1:c4:6a:c7:07:01:4f:fe:0c:
4a:89:e5:6e:16:6e:ea:7a:ef:07:87:aa:12:8a:87:
c6:02:cc:86:e4:90:f9:eb:58:54:2c:4a:36:b9:d1:
8c:e0:13:2b:cf:ee:47:d6:7f:97:37:b3:ba:ed:e1:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:B1:5B:61:15:A8:79:EB:C9:02:24:95:3A:B1:89:4D:E5:DF:59
X509v3 Authority Key Identifier:
keyid:23:0C:CC:2D:21:E5:AE:87:70:35:AE:D9:38:1B:4A:3C:BA:69:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwzMLSHlrodwNa7ZOBtKPLppFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/Y9SxW2EVqHnryQIklTqxiU3l31k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/IwzMLSHlrodwNa7ZOBtKPLppFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.101.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9f:fa:ae:9b:c8:79:36:dd:38:48:53:a0:9c:80:2b:dc:90:
a1:b3:70:22:69:b7:c0:09:28:34:ea:3d:85:56:7b:ad:05:c7:
e9:c6:c2:e2:2b:1d:20:27:48:c9:24:33:3c:02:02:b8:62:df:
f0:f9:4d:07:c7:5c:ef:69:b6:13:f8:4c:7b:73:9e:31:d1:e3:
1d:44:a2:4e:52:63:0b:bf:89:87:e8:b9:d9:83:d3:2b:f5:77:
3b:85:3d:8f:0a:88:f4:39:09:83:95:6a:e2:88:1c:72:75:9d:
9e:51:66:50:cc:8f:93:bf:ad:00:be:5b:e7:ba:fc:5d:bc:d3:
99:25:28:a4:2d:9a:49:bb:9f:c4:f6:33:43:b7:c5:50:6d:ed:
c1:36:21:c6:13:8c:85:83:37:68:87:8b:c4:89:a8:67:fd:e4:
e3:54:09:f8:2a:a7:bd:d8:7a:8f:92:c6:a3:ed:ea:1d:eb:36:
9a:9f:8f:39:51:c5:05:b2:57:b9:f6:6b:02:37:16:7c:82:56:
d6:04:c8:be:b7:2b:e3:96:e0:26:16:4a:8e:b5:fe:e4:fe:31:
43:67:43:92:78:1e:42:ab:6a:99:22:8c:28:c5:45:ee:48:2a:
da:8a:f9:51:7b:d3:e8:61:f7:64:fc:3d:35:47:0e:c4:7a:0d:
83:62:3d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:23 2024 by rpki-client on console-ams.rpki-client.org