Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/gDanlKcm750iiJCExR3DoNOCKUY.roa
File: gDanlKcm750iiJCExR3DoNOCKUY.roa (raw, json)
Hash identifier: h5B6G+eM/Vb+ep4WwDCkibTIEAUzgaF1Js/TEXqCV8k=
Subject key identifier: 80:36:A7:94:A7:26:EF:9D:22:88:90:84:C5:1D:C3:A0:D3:82:29:46
Certificate issuer: /CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
Certificate serial: 0183F3803FF5F2056B556B3A5A073950A029
Authority key identifier: FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/gDanlKcm750iiJCExR3DoNOCKUY.roa
Signing time: Thu 20 Oct 2022 03:46:51 +0000
ROA not before: Thu 20 Oct 2022 03:46:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 193.163.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f3:80:3f:f5:f2:05:6b:55:6b:3a:5a:07:39:50:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
Validity
Not Before: Oct 20 03:46:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8036a794a726ef9d22889084c51dc3a0d3822946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:4c:1e:78:d0:61:b1:62:a5:51:0f:d8:d4:
fc:d6:a5:47:fb:dc:6d:36:13:cd:06:d0:e5:94:a7:
e0:00:7c:73:e2:7b:55:1f:f5:43:2e:09:61:0f:54:
c2:34:0a:6a:17:59:2f:db:27:93:07:97:97:23:a4:
17:4f:dd:0f:c9:14:cc:25:39:34:31:2b:cb:cd:08:
47:92:be:75:87:40:45:e2:a8:90:58:f9:91:92:92:
4b:69:1c:1c:22:3a:f7:ae:bf:52:2f:0f:2c:38:b7:
7e:4c:25:15:a5:6c:59:64:00:63:74:ba:03:73:e6:
02:45:c1:49:62:c6:7a:a3:11:0e:f1:b7:5c:78:b4:
25:13:0c:7e:7e:5a:44:c0:88:33:6a:91:3e:ca:c4:
e8:83:7b:69:d4:86:76:cd:79:44:8f:98:5a:40:e8:
26:b9:61:63:b1:3f:a3:d6:46:bf:59:5e:b0:03:67:
17:c4:7c:71:a7:e6:84:94:54:14:ed:16:e6:79:97:
c0:71:1d:e2:1b:01:ec:09:69:de:b0:90:4e:35:6d:
b7:96:e6:79:49:76:66:5b:87:ef:e5:74:9e:0b:5c:
1d:66:bd:38:79:68:0c:20:0f:b2:f1:39:2d:fe:96:
72:f5:42:68:29:45:a4:1a:77:8f:85:4a:2b:20:22:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:36:A7:94:A7:26:EF:9D:22:88:90:84:C5:1D:C3:A0:D3:82:29:46
X509v3 Authority Key Identifier:
keyid:FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/gDanlKcm750iiJCExR3DoNOCKUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/_3mX739_Hh2hDlwdmOoxR0ttuxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:82:14:76:11:a4:1b:bf:19:b2:03:97:51:8e:08:0c:55:e3:
b2:ce:7f:11:b5:84:2f:28:06:bf:4d:7d:ba:36:e8:ed:6f:ea:
5e:b4:57:a8:36:b9:c3:32:cc:03:7c:5b:f4:48:0d:7d:20:e1:
ab:a3:ed:86:63:0f:11:b9:ed:30:24:18:66:0d:51:b5:99:92:
38:21:e5:a6:ee:60:f0:b1:54:cb:b5:79:a8:23:ad:20:ce:26:
f8:3c:57:83:af:17:d0:52:e8:eb:7c:4f:44:07:75:30:a6:87:
63:2c:37:68:90:94:da:bf:25:26:85:52:28:dc:4c:0c:31:18:
c0:b1:0d:ca:ef:35:2b:9a:71:63:79:6b:a4:57:84:4e:5b:f6:
c4:0d:68:5f:08:e9:10:4e:2c:90:86:5d:0d:13:ea:8a:02:bb:
78:50:1c:b9:0d:50:8e:83:6f:54:1a:d6:c7:e0:46:fd:03:61:
a7:23:f5:2c:63:43:34:4b:76:f3:b9:18:a8:d9:ad:63:88:cf:
10:f0:ad:a8:a8:ff:37:ad:70:96:8e:3a:8c:fe:77:3c:2d:9c:
fd:15:b0:96:71:f2:f2:51:3f:c7:61:ec:63:41:59:e4:ac:33:
c2:a6:72:14:22:a4:64:99:f8:54:33:2f:aa:0d:c4:65:69:2a:
84:2e:01:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:52 2023 by rpki-client on console-ams.rpki-client.org