Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/j9Ax7dr5AVSkhzyU8bwzNaGr4_M.roa
File: j9Ax7dr5AVSkhzyU8bwzNaGr4_M.roa (raw, json)
Hash identifier: 24VT+h2Si2pji8rNo0KnlCsaAIwg4m2LfiZswtIlFA8=
Subject key identifier: 8F:D0:31:ED:DA:F9:01:54:A4:87:3C:94:F1:BC:33:35:A1:AB:E3:F3
Certificate issuer: /CN=823b669a87620faf0c422710e26ee3000c9a9a41
Certificate serial: 0188208678BE0D9BDAE5E3DC04C47409EDDC
Authority key identifier: 82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/j9Ax7dr5AVSkhzyU8bwzNaGr4_M.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.243.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:78:be:0d:9b:da:e5:e3:dc:04:c4:74:09:ed:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b669a87620faf0c422710e26ee3000c9a9a41
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fd031eddaf90154a4873c94f1bc3335a1abe3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d0:92:bb:80:64:9e:71:af:35:90:2a:1b:5e:
4f:77:76:6a:5a:c5:73:3c:75:99:00:32:45:77:fc:
2d:43:37:2e:83:ea:51:57:cf:aa:ca:c2:ab:d5:b6:
58:f9:11:8a:5f:7b:eb:d9:de:9d:4d:c7:cc:5c:a8:
08:4e:26:04:2c:0c:d6:58:91:94:d6:28:6e:d7:5b:
cd:dc:84:42:83:da:1e:ef:14:e3:29:34:d5:75:c3:
0f:ce:9f:72:61:b6:0a:32:25:be:53:40:7c:73:12:
30:0b:75:24:83:6a:9e:d2:8f:1a:16:89:9a:bc:e2:
95:b6:de:28:9d:db:37:5b:f6:1d:40:56:c9:fa:8a:
41:33:43:f4:9c:d5:79:da:fb:fd:81:f4:01:48:f4:
30:67:7d:62:ca:8d:83:50:38:27:35:84:0c:47:64:
3c:d8:4b:6e:0d:39:23:8e:10:84:ee:2f:d3:47:60:
68:17:17:c7:94:d7:da:c0:c2:37:c1:85:77:b8:35:
64:ae:52:a9:09:e1:8d:1b:d2:2d:2c:f1:be:3a:54:
57:05:c4:42:bd:34:e1:c0:c4:d6:22:b1:ba:fb:a8:
06:a1:f1:bf:cb:fd:a9:1a:70:1e:26:9e:04:c3:20:
28:79:ee:b6:20:7b:00:6c:6a:c1:9e:7f:ab:66:d2:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:31:ED:DA:F9:01:54:A4:87:3C:94:F1:BC:33:35:A1:AB:E3:F3
X509v3 Authority Key Identifier:
keyid:82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/j9Ax7dr5AVSkhzyU8bwzNaGr4_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/gjtmmodiD68MQicQ4m7jAAyamkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.186.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:a7:dc:50:d8:49:19:39:e6:d4:81:f8:12:a5:52:aa:ea:26:
dc:02:77:48:e9:56:ea:2e:d7:d4:4d:42:56:dd:dd:b8:12:7e:
9a:e7:0b:5c:03:b9:ed:d2:6b:77:80:2a:29:85:34:8b:07:ac:
16:32:fb:74:0a:a1:13:8c:4a:38:41:27:bf:2e:7c:ab:0d:5d:
dd:e9:7d:d4:2a:57:dd:0b:04:74:28:1b:28:cc:f4:97:1c:d4:
3b:f4:ae:a1:8d:64:ed:d9:22:61:ba:ed:6e:34:56:62:35:e5:
3b:e3:dd:aa:23:ff:1c:4d:d6:93:d7:54:94:76:66:9c:ac:3e:
f9:5f:46:95:fd:61:b0:4f:98:a9:7f:fb:46:97:ed:f2:a1:da:
a7:e0:64:13:2b:df:1b:40:4b:46:4e:7e:94:bc:db:ab:57:9c:
33:b0:af:5c:64:25:c2:88:ce:ba:0c:28:78:a9:1c:39:b4:41:
a6:2a:35:97:5a:11:de:37:00:a9:3e:37:8f:12:7b:f3:b6:ba:
c3:ea:77:69:01:3c:d8:ca:46:ae:9f:05:b2:d7:ea:5f:64:35:
1e:dc:0c:4c:5d:c0:e9:b1:f3:ad:df:51:e7:99:14:9b:47:83:
1a:f9:cf:10:6a:1b:be:a6:c1:d8:10:47:81:52:f2:88:70:c5:
0c:22:33:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:19 2024 by rpki-client on console-ams.rpki-client.org