Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/8B1Zea8C5cY6E5OjY6tfULpyDJw.roa
File: 8B1Zea8C5cY6E5OjY6tfULpyDJw.roa (raw, json)
Hash identifier: jwD5X4Sn82cBePp2AHhIRREegxZObwliXrDdsBE+H8M=
Subject key identifier: F0:1D:59:79:AF:02:E5:C6:3A:13:93:A3:63:AB:5F:50:BA:72:0C:9C
Certificate issuer: /CN=cec7ad4a0106bc519bbc44c1d3d382bb61f4a9fd
Certificate serial: 08F32BFE
Authority key identifier: CE:C7:AD:4A:01:06:BC:51:9B:BC:44:C1:D3:D3:82:BB:61:F4:A9:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsetSgEGvFGbvETB09OCu2H0qf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/8B1Zea8C5cY6E5OjY6tfULpyDJw.roa
Signing time: Sat 01 Jan 2022 15:56:08 +0000
ROA not before: Sat 01 Jan 2022 15:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199881
IP address blocks: 193.169.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150154238 (0x8f32bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec7ad4a0106bc519bbc44c1d3d382bb61f4a9fd
Validity
Not Before: Jan 1 15:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f01d5979af02e5c63a1393a363ab5f50ba720c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:e6:11:ce:0f:2f:44:6f:fb:0b:a0:0e:8c:
37:75:bd:1a:f6:39:c0:16:4c:af:b9:43:ef:20:a6:
5f:71:37:69:aa:61:02:8b:df:73:57:66:b4:cf:52:
5c:99:46:d6:0f:11:ec:04:28:66:bc:4e:bb:4b:f7:
e0:28:3b:4e:ff:65:47:51:66:72:16:9d:8b:f4:45:
6b:c2:6c:9c:d5:26:a9:d3:e2:d1:ef:e9:37:ec:f5:
25:e2:48:e3:dd:15:f5:21:e7:74:df:7a:af:8a:23:
ab:ce:f9:42:45:cf:7a:e3:4f:22:83:b0:81:f8:93:
25:bf:8d:24:1a:34:a8:10:bb:f5:76:f9:9c:d4:75:
af:19:91:2a:3e:fb:b1:e5:0b:ae:2f:51:53:5a:d5:
7f:b5:e6:58:cc:1b:57:b3:20:95:bd:ff:41:2b:4e:
ab:f9:75:6d:c4:5b:0b:1f:30:f0:a7:5c:be:28:86:
6e:44:68:d2:ab:9b:88:95:50:5b:5c:29:00:f9:fd:
29:7e:ed:cf:50:df:9e:07:d7:19:4d:e3:5b:fd:9d:
d7:64:e4:16:22:9f:ce:18:66:bb:20:ee:28:b5:49:
de:20:d5:2b:2e:23:4a:e5:17:45:0b:7f:03:37:d4:
f9:38:23:66:64:80:28:ae:5a:f0:75:14:0f:5d:1f:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1D:59:79:AF:02:E5:C6:3A:13:93:A3:63:AB:5F:50:BA:72:0C:9C
X509v3 Authority Key Identifier:
keyid:CE:C7:AD:4A:01:06:BC:51:9B:BC:44:C1:D3:D3:82:BB:61:F4:A9:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsetSgEGvFGbvETB09OCu2H0qf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/8B1Zea8C5cY6E5OjY6tfULpyDJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/zsetSgEGvFGbvETB09OCu2H0qf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.46.0/23
Signature Algorithm: sha256WithRSAEncryption
82:67:63:d2:88:b1:0b:09:16:84:c9:fb:7a:f7:c1:0d:39:f4:
9a:e4:fd:e6:26:2f:b5:92:59:13:7e:66:c5:d4:92:80:31:c0:
68:5f:60:50:9f:f7:d8:e0:53:ea:89:f8:f5:db:90:cb:56:0c:
7c:04:c4:ab:33:40:71:1a:ea:bd:5c:0a:0b:28:aa:e2:06:e0:
05:53:a9:bb:8e:a6:f5:49:f1:80:8c:49:cf:a6:f3:b6:e3:a3:
03:97:6d:6b:5c:5f:b3:8a:93:fd:0f:52:c6:43:01:24:81:88:
43:7c:c0:8f:0b:d0:5e:63:a8:36:01:f2:57:dd:6e:2d:36:ab:
6f:79:c7:69:e6:12:f7:9a:e2:04:8d:e1:36:19:14:4f:46:b3:
52:e7:b0:4b:89:4c:7a:99:c7:df:54:c1:02:6b:fd:ed:d7:bb:
1c:ac:2a:fc:95:f4:bf:4f:36:bf:5c:5f:1d:5d:b0:90:46:ca:
b6:b1:f1:66:46:cb:f3:2f:b9:1d:59:18:00:5d:c6:18:63:e5:
07:3b:8a:a0:0f:3b:37:14:33:cb:d1:3d:a8:db:27:2e:41:21:
0d:cc:9b:59:64:8d:19:fc:22:d5:71:02:b0:23:a6:77:cf:c7:
52:7a:c9:36:fb:70:75:47:0c:fa:05:15:91:99:5c:7a:0d:e1:
6c:68:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org