Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/8DUrSjSP9f-NCrdqaNZIJ_lC6Ps.roa
File: 8DUrSjSP9f-NCrdqaNZIJ_lC6Ps.roa (raw, json)
Hash identifier: 7citmmcOIvhUo2cxrBzeNNh2vjLrQS+MC9iG3PZD2r4=
Subject key identifier: F0:35:2B:4A:34:8F:F5:FF:8D:0A:B7:6A:68:D6:48:27:F9:42:E8:FB
Certificate issuer: /CN=e368116c6849228210905122016d722091197be5
Certificate serial: 0188208676615A49C29B2A79F3B233BEAFCC
Authority key identifier: E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/8DUrSjSP9f-NCrdqaNZIJ_lC6Ps.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.201.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:76:61:5a:49:c2:9b:2a:79:f3:b2:33:be:af:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e368116c6849228210905122016d722091197be5
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0352b4a348ff5ff8d0ab76a68d64827f942e8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:f5:57:a0:0c:07:84:4c:ae:ad:18:98:61:
42:00:79:09:d2:38:51:a3:c9:10:b7:f1:f6:0c:1c:
1b:44:d8:8b:46:b2:b0:b2:03:eb:48:5a:93:28:19:
33:a6:16:9d:0b:b8:4d:43:e1:cb:87:1e:fc:6c:4f:
a4:ae:75:a1:4e:a4:95:97:01:ed:5c:4b:10:61:11:
43:f8:f7:76:cb:06:67:93:bf:e7:ed:4a:c2:10:97:
37:6a:3e:dd:65:a7:c2:16:4b:f2:bd:5c:f0:28:63:
98:39:1e:3f:46:a5:8b:33:5f:e2:43:ff:c5:b4:88:
e0:de:7c:51:3d:75:d9:fe:e0:22:25:b0:25:58:2b:
72:a7:a4:a5:08:1f:17:13:56:0e:24:43:6b:4d:0b:
60:c0:24:d7:e4:03:9f:46:eb:dc:18:99:a4:41:f9:
dc:7d:f0:e2:b1:54:6f:3c:3c:16:ce:6e:d3:4a:7d:
30:42:fe:97:05:13:e7:81:5b:bf:fb:ea:1e:b6:81:
6c:38:c6:b1:b6:d7:73:39:90:fa:47:33:3d:b3:f2:
17:f1:83:2e:d6:15:27:6d:20:88:e6:23:d3:b6:9c:
60:cf:ec:4d:84:57:1d:27:18:e1:3d:41:66:c4:d9:
f1:b6:4b:b6:27:15:5d:87:69:f2:b9:2c:3f:97:a8:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:2B:4A:34:8F:F5:FF:8D:0A:B7:6A:68:D6:48:27:F9:42:E8:FB
X509v3 Authority Key Identifier:
keyid:E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/8DUrSjSP9f-NCrdqaNZIJ_lC6Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.13.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7d:89:4d:e0:ee:5c:e2:f4:cf:0e:1a:45:93:a7:6d:ba:80:
f2:91:05:46:a5:73:7e:2c:36:99:2a:64:37:c1:7d:54:72:f5:
aa:aa:0c:ab:de:c8:18:31:90:d1:e5:98:b5:5a:4c:cf:ed:9d:
44:0c:69:6c:25:82:9c:ab:71:99:6c:4f:60:4e:69:71:74:4a:
eb:8d:c0:1f:ec:48:71:04:a2:bc:f4:04:61:96:d5:9b:e1:25:
92:4f:1b:01:81:17:67:ea:b9:df:fc:0d:8a:73:19:d2:40:4b:
26:bc:04:ab:10:38:f6:48:87:ae:2c:7e:76:7e:59:0d:a7:2a:
b1:61:e3:4d:1c:55:66:f5:04:94:49:87:bc:28:fd:75:a4:d2:
29:7b:13:3c:6e:41:4e:82:5f:87:b9:a5:0f:f1:22:d6:46:f3:
d1:59:88:1f:60:e5:d1:c2:06:73:30:10:3e:a3:26:31:ed:a5:
77:fb:a3:a8:b9:39:d6:71:81:f8:a0:74:8d:02:5c:41:b5:1e:
ef:fb:9b:c8:72:5f:20:68:0e:e8:7a:45:06:b7:d1:8b:e9:72:
3d:fd:e2:f4:81:80:47:6f:0e:84:4a:12:f3:b5:97:f3:fb:32:
58:50:86:09:bd:e8:19:0a:7e:87:75:7b:99:b2:cb:6e:16:1f:
ac:8a:b3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 07:03:22 2023 by rpki-client on console-fra.rpki-client.org