Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/IbfTuVubnOBXjYDiwvIThNtGH2E.roa
File: IbfTuVubnOBXjYDiwvIThNtGH2E.roa (raw, json)
Hash identifier: kt8RF1AKftg5WHw86HI3ZhdPtVVIRj4sc8hxm+I8Ppk=
Subject key identifier: 21:B7:D3:B9:5B:9B:9C:E0:57:8D:80:E2:C2:F2:13:84:DB:46:1F:61
Certificate issuer: /CN=1da3393991409489ef9fd7460a75a370cae9dca7
Certificate serial: 0186114D6CE7FA63C1812459AEC84DEC9674
Authority key identifier: 1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/IbfTuVubnOBXjYDiwvIThNtGH2E.roa
Signing time: Thu 02 Feb 2023 08:45:32 +0000
ROA not before: Thu 02 Feb 2023 08:45:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 194.45.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:4d:6c:e7:fa:63:c1:81:24:59:ae:c8:4d:ec:96:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da3393991409489ef9fd7460a75a370cae9dca7
Validity
Not Before: Feb 2 08:45:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21b7d3b95b9b9ce0578d80e2c2f21384db461f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:6e:cf:6a:9e:42:4e:6d:75:2c:9a:f2:9b:
f0:44:8f:51:51:6d:2e:66:d8:3c:0a:df:07:e5:58:
b4:b3:3d:19:66:67:46:ed:16:11:c3:85:66:fa:b5:
b7:56:f4:ab:92:3a:a2:0e:90:a0:ee:ce:3d:c3:6b:
f6:62:3e:a1:91:53:2b:c9:52:cf:64:54:9f:cb:51:
d0:27:59:36:cd:f5:f0:3e:31:66:4b:86:cc:9f:b2:
04:b1:90:e5:f4:51:1b:f1:7d:2d:91:82:4f:b8:25:
fd:e7:0d:ff:80:5e:70:b4:0d:56:27:7d:c7:3d:71:
1d:0b:60:b8:ef:fd:fd:7a:73:fd:1d:18:43:9e:32:
98:5e:5f:4c:c1:10:ff:14:f1:22:36:9b:2d:88:7a:
58:3e:f7:54:4a:95:4c:73:2e:59:4d:5e:1d:ed:cf:
72:53:cf:2f:81:28:54:7f:f5:7e:71:a6:3e:bf:73:
d0:35:df:27:e4:f8:fd:92:57:1b:60:23:92:c8:72:
11:47:3b:00:ca:1a:c8:62:57:cb:84:0c:1e:8c:f5:
a3:2a:70:ef:83:da:71:f0:3c:97:11:89:b3:cc:6d:
eb:a9:d8:bc:ec:03:fb:f3:93:1b:f5:32:f4:f2:d8:
23:9f:f2:20:a3:af:4f:c8:bd:ae:02:4b:66:4e:84:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:D3:B9:5B:9B:9C:E0:57:8D:80:E2:C2:F2:13:84:DB:46:1F:61
X509v3 Authority Key Identifier:
keyid:1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/IbfTuVubnOBXjYDiwvIThNtGH2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.100.0/24
Signature Algorithm: sha256WithRSAEncryption
76:af:92:2d:d2:cc:3d:55:b6:ae:ba:c9:a9:c5:73:78:24:06:
33:a6:93:81:7f:1a:61:59:14:7c:10:8f:d3:0a:29:b6:b0:33:
17:87:e6:de:88:86:75:77:58:1f:dd:93:48:2c:45:5c:a9:30:
e1:ae:5b:b7:e9:97:7c:4b:a5:13:ee:ce:79:b0:74:48:aa:66:
72:0c:b9:c7:95:49:e5:5e:b1:9e:ab:d2:7a:9b:de:dc:24:1d:
11:17:0e:07:81:b8:5b:83:46:47:f0:5d:45:95:ed:ae:f1:cb:
65:27:3e:96:ac:fd:20:22:39:e2:35:f5:9e:51:38:b3:48:08:
d0:c4:e6:75:32:3b:b5:93:29:73:46:45:fc:ca:63:3e:7e:ba:
6c:25:bb:f0:52:2f:59:ba:6e:a9:59:ae:f6:51:40:cd:7b:a8:
e5:2e:e6:f3:77:6b:9a:06:d4:3a:36:eb:81:84:b1:4f:65:3a:
95:6c:19:d9:22:a9:52:1d:54:86:0b:7f:85:2a:a8:22:8e:29:
c4:33:74:e4:d4:36:28:e1:48:17:5a:97:17:0e:d5:0e:ad:6d:
64:15:13:04:15:55:d2:4e:b0:1b:ea:9e:17:ef:e0:a5:25:88:
0b:42:04:2d:63:f2:d4:22:cf:b2:b1:18:47:4a:c9:2b:3b:6c:
eb:fa:a7:61
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 28 16:28:59 2023 by rpki-client on console-ams.rpki-client.org