Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/xxWtDsKjpMiTkprP9s0qveIfAg4.roa
File: xxWtDsKjpMiTkprP9s0qveIfAg4.roa (raw, json)
Hash identifier: 22qN7tlU9LUbxGL2/EujOZ7DWgUunDyGQmu3x8uJtKY=
Subject key identifier: C7:15:AD:0E:C2:A3:A4:C8:93:92:9A:CF:F6:CD:2A:BD:E2:1F:02:0E
Certificate issuer: /CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
Certificate serial: 1C2381
Authority key identifier: CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/xxWtDsKjpMiTkprP9s0qveIfAg4.roa
Signing time: Sat 01 Jan 2022 02:52:49 +0000
ROA not before: Sat 01 Jan 2022 02:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63213
IP address blocks: 193.57.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844097 (0x1c2381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
Validity
Not Before: Jan 1 02:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c715ad0ec2a3a4c893929acff6cd2abde21f020e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:7f:fd:64:3f:a5:bf:57:9e:00:a5:ad:1a:
8a:90:7d:ce:37:8f:e8:a5:f6:b7:56:16:d5:61:bf:
bf:6a:b2:9b:5f:5e:04:98:33:11:7a:2b:79:0e:1e:
79:0d:3a:b6:d3:04:3e:15:90:14:37:56:d4:b7:ee:
1d:ee:b4:1d:66:52:de:27:20:eb:9e:95:60:95:be:
ff:e0:ce:1e:2e:41:fa:58:1e:4e:cc:ea:7c:9a:97:
f8:7a:3a:88:f3:40:95:6d:c8:9e:3a:38:64:15:09:
90:0e:97:5b:d9:66:85:f2:91:37:92:9b:55:ef:83:
9b:b4:0d:41:5e:05:d3:9c:51:49:17:c9:48:24:b8:
c8:71:ac:53:05:b1:d3:42:b8:1d:f3:ce:ee:e9:ce:
f2:af:bb:2d:e4:ea:d5:c9:7f:5c:d2:cd:61:5d:f8:
cf:22:7f:30:60:71:51:a2:2d:da:56:44:a0:a4:61:
7d:e4:a4:e3:48:3b:2f:8e:4b:2b:ea:d1:9e:1e:ba:
1c:fe:ce:82:d7:a0:d9:b4:3b:80:2e:61:85:da:5c:
91:77:e5:5d:c6:1f:ec:c7:1d:50:35:15:99:66:1d:
33:18:5c:d0:4f:16:13:0d:38:95:27:84:74:d8:92:
e6:f7:e6:47:4d:b0:67:e1:08:2f:17:1f:04:9e:00:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:15:AD:0E:C2:A3:A4:C8:93:92:9A:CF:F6:CD:2A:BD:E2:1F:02:0E
X509v3 Authority Key Identifier:
keyid:CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/xxWtDsKjpMiTkprP9s0qveIfAg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.166.0/24
Signature Algorithm: sha256WithRSAEncryption
05:19:bd:5f:ae:d2:fd:c2:eb:f9:62:68:da:19:15:a6:8b:0f:
a7:fc:e4:a0:a7:bb:15:31:86:59:e3:ff:be:4f:86:e4:d5:c0:
c1:1e:96:a5:e2:99:bb:05:02:12:53:85:e5:e8:a6:73:9c:9c:
d7:ab:94:bf:28:25:b7:c9:87:37:29:b5:28:e8:5a:13:f7:aa:
7e:cf:a0:fc:c9:6b:e6:84:cb:91:98:ce:fc:35:35:2a:3d:54:
6c:75:54:d0:94:40:75:46:2d:21:f6:3e:34:a9:ab:5d:36:8b:
22:9e:cc:10:db:af:6b:b7:96:e6:e1:b0:7c:66:1b:e5:f9:e9:
fe:35:a2:f1:57:71:96:c6:74:7e:2f:85:2a:3f:39:54:88:0f:
ad:67:a3:35:d3:42:14:36:c6:19:64:da:7a:e7:79:7f:c9:a0:
eb:1b:28:0a:52:b2:0d:4f:9f:5a:73:56:fc:2f:0e:54:9a:13:
b8:54:26:0c:5d:8b:e7:9d:e7:9b:ae:1e:a3:8e:0b:83:73:f3:
c4:88:81:28:7e:56:ef:30:41:14:f7:a1:8a:04:c5:8b:30:9c:
aa:fb:83:aa:b8:3f:f1:3c:09:29:c9:8c:37:ba:a1:69:b2:3c:
7c:45:9a:a4:59:e8:25:35:5a:bb:d0:54:6b:eb:94:a7:6d:f0:
db:29:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org