Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/8nIC4o69-V54VO371EVA2M9I-L0.roa
File: 8nIC4o69-V54VO371EVA2M9I-L0.roa (raw, json)
Hash identifier: 2Apv5R+pzCyEY651p5VArk7l9C4F+fmy0hitZkMTvo8=
Subject key identifier: F2:72:02:E2:8E:BD:F9:5E:78:54:ED:FB:D4:45:40:D8:CF:48:F8:BD
Certificate issuer: /CN=452bd94deef72106794399c8b37190c958837a1a
Certificate serial: 01856DCADE482B6102A1075FAB72694B6E00
Authority key identifier: 45:2B:D9:4D:EE:F7:21:06:79:43:99:C8:B3:71:90:C9:58:83:7A:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSvZTe73IQZ5Q5nIs3GQyViDeho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/8nIC4o69-V54VO371EVA2M9I-L0.roa
Signing time: Sun 01 Jan 2023 14:44:49 +0000
ROA not before: Sun 01 Jan 2023 14:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210703
IP address blocks: 193.35.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:de:48:2b:61:02:a1:07:5f:ab:72:69:4b:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452bd94deef72106794399c8b37190c958837a1a
Validity
Not Before: Jan 1 14:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f27202e28ebdf95e7854edfbd44540d8cf48f8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:77:c5:a2:3b:94:21:25:1c:63:18:50:91:
cd:e3:c2:e4:17:76:1a:16:65:ba:1b:da:ee:62:7b:
53:c3:eb:53:e9:7d:5d:aa:cd:ed:34:a4:44:d7:96:
d9:71:52:34:7b:dd:14:81:37:16:e0:6c:b8:2d:98:
a7:29:d5:89:a0:29:4e:a0:2a:fa:90:09:cc:94:d3:
db:a8:55:56:16:3e:73:30:5a:81:9b:cc:1c:bb:34:
72:f0:d3:22:63:d0:a4:0c:50:f4:ae:5c:82:2b:fc:
9f:b9:17:99:15:ae:4c:69:fe:00:6e:20:ea:08:b0:
18:a1:d8:d7:9f:c8:32:77:70:5b:d5:19:72:73:13:
c4:cd:aa:5a:f0:9b:85:5d:1f:fe:d5:a1:57:f6:6a:
41:da:d1:1d:52:5c:7b:61:26:a1:53:d2:fa:be:82:
46:f9:f7:97:a7:05:15:96:e4:0a:59:03:58:b1:d1:
25:70:fa:43:27:bc:7f:b5:5d:64:0f:36:cd:7e:68:
b9:c2:c3:97:c2:82:90:96:c5:b4:c5:cd:cc:7d:d7:
78:59:0f:4e:45:b9:1a:93:00:ba:90:82:ab:86:31:
a7:09:6b:d6:23:2a:a1:2b:a6:50:1e:87:2c:71:18:
ea:65:5f:93:5a:0d:bb:36:53:5a:04:0f:f9:ca:d2:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:72:02:E2:8E:BD:F9:5E:78:54:ED:FB:D4:45:40:D8:CF:48:F8:BD
X509v3 Authority Key Identifier:
keyid:45:2B:D9:4D:EE:F7:21:06:79:43:99:C8:B3:71:90:C9:58:83:7A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSvZTe73IQZ5Q5nIs3GQyViDeho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/8nIC4o69-V54VO371EVA2M9I-L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/RSvZTe73IQZ5Q5nIs3GQyViDeho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.226.0/24
Signature Algorithm: sha256WithRSAEncryption
73:eb:8f:8b:08:b9:33:01:8b:11:c9:2d:1c:67:01:21:45:ec:
6d:c4:5f:da:cb:97:09:03:72:02:74:88:1b:4b:a8:27:eb:a3:
7a:91:70:06:69:7c:e9:af:68:28:9c:49:7c:7d:b3:0c:c6:c3:
35:8f:f0:69:a7:96:85:bf:e9:ba:8f:3d:67:cf:5f:59:82:a1:
cf:1a:25:6b:fa:ed:cc:17:bd:b4:85:5d:f6:8d:18:f0:54:5c:
9f:cb:32:63:38:33:86:30:a4:79:96:2f:ea:77:33:ab:82:20:
e4:9d:79:82:f7:2b:3a:0a:a7:0f:49:22:57:2b:0e:08:b0:48:
5f:ef:d1:1d:39:09:80:bf:7c:2c:b2:9c:d9:10:c1:6c:88:ec:
5b:5e:78:48:e6:96:d9:9f:02:15:aa:d6:c3:5a:26:da:dd:c5:
8b:b6:e2:50:c3:99:ec:30:9f:74:0a:3a:47:34:e3:75:34:20:
9b:dc:38:94:bf:12:5d:ac:8a:7d:99:43:99:37:2b:96:5e:97:
52:b0:67:d3:ad:91:0b:b0:74:dd:e3:64:ab:3a:86:dc:43:f7:
2f:61:69:dc:08:0d:7e:f9:c7:16:42:7a:e9:8d:95:7b:58:de:
b4:e8:63:a6:0c:7f:9b:c7:11:b3:3f:34:ea:73:c8:ea:40:47:
d5:f2:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:20 2024 by rpki-client on console-ams.rpki-client.org