Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/ANbT0pc7_z-INftp6RNd4j1SHqQ.roa
File: ANbT0pc7_z-INftp6RNd4j1SHqQ.roa (raw, json)
Hash identifier: ZGpFXZYQS0jw69BCGv4chiyVUXPsneh+r7v0D0/WfNw=
Subject key identifier: 00:D6:D3:D2:97:3B:FF:3F:88:35:FB:69:E9:13:5D:E2:3D:52:1E:A4
Certificate issuer: /CN=119f2dcb336b725717c5f9902d4a60e98c04a86d
Certificate serial: 0182C4E4597A49B373EC2326FA6E0C638C23
Authority key identifier: 11:9F:2D:CB:33:6B:72:57:17:C5:F9:90:2D:4A:60:E9:8C:04:A8:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EZ8tyzNrclcXxfmQLUpg6YwEqG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/ANbT0pc7_z-INftp6RNd4j1SHqQ.roa
Signing time: Mon 22 Aug 2022 09:31:15 +0000
ROA not before: Mon 22 Aug 2022 09:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12200
IP address blocks: 193.138.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:e4:59:7a:49:b3:73:ec:23:26:fa:6e:0c:63:8c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=119f2dcb336b725717c5f9902d4a60e98c04a86d
Validity
Not Before: Aug 22 09:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00d6d3d2973bff3f8835fb69e9135de23d521ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:79:49:c5:92:9f:c9:29:5a:30:ce:9f:c4:
92:8d:1c:ff:79:82:9c:5f:b9:a8:87:95:42:0a:77:
5e:c7:34:a6:76:22:c5:fe:87:49:d3:97:00:1f:c2:
1e:36:9c:9c:ce:84:e3:69:31:8b:18:2f:76:05:c2:
b2:ce:88:23:3e:ae:6d:2b:e5:bd:83:08:36:15:2f:
d6:db:a0:ec:ba:6e:56:81:fa:8d:46:c0:44:d8:16:
38:7a:66:81:2c:4b:80:a7:fd:e4:7d:3a:61:bc:15:
dd:51:5f:3f:46:ec:d1:eb:58:94:ca:49:d2:8c:fa:
bc:72:29:86:aa:1b:43:b5:20:80:ea:63:3b:7c:27:
47:dc:65:05:19:c3:00:b0:bb:96:bc:6c:37:75:13:
1b:6b:14:73:54:06:f2:38:67:3b:6c:a7:69:3d:db:
2f:34:93:92:0a:10:60:ff:11:9c:1d:67:5c:13:aa:
56:db:b2:1c:0a:01:e2:ea:bc:20:ce:84:5d:a3:e2:
3b:e0:fb:d4:ce:fd:c9:a5:27:1d:e7:6b:87:9e:23:
8a:ec:ec:a2:42:16:72:30:b3:e6:bc:5d:83:92:e0:
a3:90:a0:94:e5:3e:ef:9a:09:09:30:5c:ba:35:83:
2a:a8:bf:33:86:e3:f7:19:f2:e6:90:3f:06:9a:9e:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:D3:D2:97:3B:FF:3F:88:35:FB:69:E9:13:5D:E2:3D:52:1E:A4
X509v3 Authority Key Identifier:
keyid:11:9F:2D:CB:33:6B:72:57:17:C5:F9:90:2D:4A:60:E9:8C:04:A8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZ8tyzNrclcXxfmQLUpg6YwEqG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/ANbT0pc7_z-INftp6RNd4j1SHqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/EZ8tyzNrclcXxfmQLUpg6YwEqG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.122.0/24
Signature Algorithm: sha256WithRSAEncryption
95:96:fe:5e:0d:42:9e:59:d2:e8:fd:36:1a:87:89:74:8e:f3:
87:5b:94:d4:19:e3:40:83:40:77:44:f9:4b:ba:46:3f:83:f0:
52:f1:95:42:90:6e:5c:8f:38:54:e7:d2:d4:bf:80:ea:12:68:
c6:b6:50:a8:f0:b5:e0:1a:47:c2:f1:6b:c9:da:92:15:6e:d0:
68:8f:8a:97:b7:31:3a:86:d7:4e:e9:4c:f1:b1:ca:b8:e9:71:
42:94:91:bd:a5:59:94:73:88:04:f4:7b:cd:2d:67:7f:4e:aa:
6e:16:3f:dc:78:db:69:4d:18:ad:24:a7:0b:1e:c4:3a:6d:5a:
1b:11:30:af:c3:b5:0a:29:54:e9:de:80:e9:2b:e8:6d:5a:3e:
36:64:d6:f4:48:83:53:f1:36:18:d0:11:bb:fb:60:c0:0c:7b:
ff:7c:19:45:14:6c:dc:f6:d1:eb:ee:dd:60:69:e3:24:3d:c8:
76:0d:9e:13:01:db:83:43:70:63:23:44:47:f6:0c:e5:d2:d3:
21:79:d7:be:ac:15:12:57:70:2e:13:e4:ee:2e:46:ef:6f:76:
db:a6:bd:3f:8f:7a:a3:1b:4a:05:00:af:28:9d:e0:53:12:7f:
8a:93:4b:7d:ab:b4:9f:e2:f3:df:99:7c:70:d1:3d:4c:92:66:
9d:29:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org