Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/ajPpe8Vpiv7HylnCnSqbdWjh_F8.roa
File: ajPpe8Vpiv7HylnCnSqbdWjh_F8.roa (raw, json)
Hash identifier: QuZFGCwtIb2t8K/X/LdOtLiy8p/zLwbT+XRl+2BhO4s=
Subject key identifier: 6A:33:E9:7B:C5:69:8A:FE:C7:CA:59:C2:9D:2A:9B:75:68:E1:FC:5F
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 022971D3
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/ajPpe8Vpiv7HylnCnSqbdWjh_F8.roa
Signing time: Sat 01 Jan 2022 15:57:11 +0000
ROA not before: Sat 01 Jan 2022 15:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 193.187.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36270547 (0x22971d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Jan 1 15:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a33e97bc5698afec7ca59c29d2a9b7568e1fc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:dd:6b:1d:a8:72:4f:b7:ea:82:17:8a:8e:
5d:43:f6:0c:12:6c:41:b0:8c:7d:51:c4:bf:68:77:
e8:4b:82:13:81:41:42:ae:bb:23:f6:f3:4c:60:07:
fb:7a:9d:b5:8b:07:b9:a3:5f:24:b9:25:fc:1d:99:
11:aa:b4:82:e2:b2:f8:11:77:8a:64:4c:f8:4a:60:
57:70:b3:6a:f6:21:1a:31:f7:4e:06:1b:e1:10:a4:
cd:5a:e4:a4:df:b0:96:35:c8:d4:83:4b:29:9a:60:
b3:24:fe:88:be:50:32:86:01:85:2b:95:a2:81:a4:
e2:c1:0c:b7:a2:9f:fc:a0:78:da:fe:89:2f:8b:08:
a5:ec:ec:24:d2:7e:f7:66:85:0d:46:89:25:ca:e2:
97:62:b0:a5:65:26:56:1c:aa:39:4b:11:20:2e:47:
66:35:0e:89:35:35:1a:83:b5:56:2a:8d:17:ca:35:
cc:ff:52:4b:b6:dd:41:6f:41:a4:b0:66:44:5a:24:
21:28:00:fc:51:fc:1d:70:8c:91:99:e9:14:f4:f6:
d7:93:39:a9:d3:46:45:9c:ef:b7:9c:46:d0:ce:a8:
b9:2a:6a:20:6a:31:2c:d2:71:b8:bc:72:dd:a1:e4:
f5:7d:9e:08:91:48:bc:5a:0d:75:af:08:e6:97:27:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:E9:7B:C5:69:8A:FE:C7:CA:59:C2:9D:2A:9B:75:68:E1:FC:5F
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/ajPpe8Vpiv7HylnCnSqbdWjh_F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ce:e6:96:9b:9c:ca:3e:b0:4a:0b:05:c4:14:cf:14:c0:10:
45:c5:85:da:6f:34:4f:11:06:b1:21:6f:15:19:d8:85:e1:c0:
8b:cd:29:43:c7:9b:63:5f:8f:c8:14:ff:a6:a5:97:d6:96:66:
77:c0:4c:16:75:d5:e0:ea:b8:96:b9:66:aa:d6:38:52:b2:56:
15:93:f6:50:97:ec:45:44:c1:b8:1a:2a:03:60:af:be:0b:67:
64:ac:dc:f3:0f:06:76:97:17:98:90:d6:2e:99:ba:e0:86:cb:
87:35:20:1b:f9:a0:2a:4f:9e:ae:95:37:28:6e:d9:17:2d:16:
bf:72:13:43:17:ff:94:fc:18:14:74:9c:85:c7:e5:f6:88:de:
19:5f:2b:3f:89:f3:08:b1:05:50:c3:e0:8a:5e:09:08:95:1f:
21:66:8b:b9:a8:1c:ac:71:0c:77:60:cf:4e:7f:a5:41:ed:b1:
ee:4f:cf:82:47:45:05:18:1e:77:9b:72:c4:f0:8e:e1:3c:fa:
35:07:fd:45:72:5e:6e:49:7d:ed:f4:91:1d:bc:7c:02:96:c9:
51:b5:05:1d:e6:ca:2e:eb:01:ea:b2:23:ba:06:e1:1a:87:56:
56:fd:4a:9c:54:aa:85:1d:21:15:0a:8b:42:62:13:51:cf:62:
25:9a:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:24 2023 by rpki-client on console-ams.rpki-client.org