Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c1e3ed-ff2e-44a3-b6e1-11ec26469f6e/1/0BFtuUV0pP6JLcEBfh5eTqxNfoE.roa
File: 0BFtuUV0pP6JLcEBfh5eTqxNfoE.roa (raw, json)
Hash identifier: MmiCePOdS7t07/SKddtYpFEOARyR1xUaB+42VjWlhbM=
Subject key identifier: D0:11:6D:B9:45:74:A4:FE:89:2D:C1:01:7E:1E:5E:4E:AC:4D:7E:81
Certificate issuer: /CN=c86b2a39b3ec4fe7cb17c833ad7d64c3723a501b
Certificate serial: 01841B4C39D119653E8E6AF3CA549D570527
Authority key identifier: C8:6B:2A:39:B3:EC:4F:E7:CB:17:C8:33:AD:7D:64:C3:72:3A:50:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGsqObPsT-fLF8gzrX1kw3I6UBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c1e3ed-ff2e-44a3-b6e1-11ec26469f6e/1/0BFtuUV0pP6JLcEBfh5eTqxNfoE.roa
Signing time: Thu 27 Oct 2022 21:14:51 +0000
ROA not before: Thu 27 Oct 2022 21:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50320
IP address blocks: 193.104.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1b:4c:39:d1:19:65:3e:8e:6a:f3:ca:54:9d:57:05:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86b2a39b3ec4fe7cb17c833ad7d64c3723a501b
Validity
Not Before: Oct 27 21:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0116db94574a4fe892dc1017e1e5e4eac4d7e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:3c:a2:0c:9a:6e:5f:8e:e0:bd:2c:1a:60:
91:c9:40:59:e0:b3:1f:25:cf:26:bb:55:b2:5b:7b:
12:f9:dd:64:50:c7:0c:f7:b3:a8:1f:37:68:6e:8b:
8e:f5:41:c6:9c:0e:aa:18:36:20:c2:92:41:32:45:
11:09:e4:a7:d8:19:bb:ba:27:6d:c7:26:61:cc:71:
4f:fc:e0:d2:2b:e7:1d:2c:3a:58:b0:81:29:fb:b3:
24:a0:23:a0:ac:f1:7c:e1:cd:17:63:31:48:63:55:
6b:77:5c:c9:4d:9a:51:32:60:6d:16:c5:b8:ac:26:
ba:94:df:fc:1a:39:85:f1:69:ab:34:7c:ae:8b:9d:
b2:c1:dc:cd:86:d6:25:6d:35:60:4a:78:bc:2d:d7:
94:c8:b1:38:aa:50:20:0f:4a:e8:34:56:13:68:bc:
fb:ff:de:26:27:b1:2f:fc:04:cb:64:ed:30:8e:80:
35:8b:a0:7e:a6:e0:7b:bc:3a:36:1c:1a:3b:cf:b5:
79:0f:1e:86:1b:65:b8:17:8b:f1:39:e2:ac:5c:d1:
0e:33:94:1a:0a:46:21:d8:0b:24:59:d5:cf:71:8b:
a9:41:2a:19:fa:53:c5:ac:89:1e:7f:bf:64:42:9b:
19:91:78:fa:b7:ae:84:8f:4d:aa:5a:19:b5:b1:bf:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:11:6D:B9:45:74:A4:FE:89:2D:C1:01:7E:1E:5E:4E:AC:4D:7E:81
X509v3 Authority Key Identifier:
keyid:C8:6B:2A:39:B3:EC:4F:E7:CB:17:C8:33:AD:7D:64:C3:72:3A:50:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGsqObPsT-fLF8gzrX1kw3I6UBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c1e3ed-ff2e-44a3-b6e1-11ec26469f6e/1/0BFtuUV0pP6JLcEBfh5eTqxNfoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c1e3ed-ff2e-44a3-b6e1-11ec26469f6e/1/yGsqObPsT-fLF8gzrX1kw3I6UBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:75:f8:ce:b7:ad:97:e4:a9:cc:5d:55:f7:33:17:61:93:d0:
8d:82:17:7c:cd:95:87:10:b9:7d:99:4c:af:ba:98:bd:99:45:
74:6d:da:1e:34:ad:65:ef:6d:06:aa:7c:b2:66:db:a6:b4:83:
2a:c2:87:a4:d7:ff:e5:48:0a:74:8d:39:c0:0d:27:6d:26:f1:
ee:98:3e:fe:d5:ac:c1:44:a5:7c:14:60:d8:45:70:9f:25:4d:
af:08:4f:c2:3e:b1:ea:2c:a0:0d:c5:f6:e4:fd:f8:73:29:76:
be:33:ee:9f:58:f8:1e:8b:b5:fc:b9:d8:88:23:06:3e:bd:0d:
f8:aa:22:87:71:f1:3c:40:5e:78:30:e0:4d:46:49:50:18:1c:
4d:ee:1f:4d:d3:66:26:09:a0:a9:be:36:0d:c9:d0:68:06:9c:
02:ec:e2:e2:39:96:41:78:74:16:16:b4:9f:f3:71:15:22:03:
4a:53:dd:d0:ba:85:98:83:d8:ed:44:db:f3:ee:0d:80:2e:26:
e0:78:e6:58:29:10:1b:a7:fd:51:bf:e7:f3:90:dd:c5:11:4f:
20:fc:db:03:6c:47:8c:4f:d8:9e:07:d7:8e:be:c6:22:98:fa:
bd:da:cb:4d:39:91:86:bd:b9:60:c5:dd:3e:93:57:1f:03:55:
83:ae:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:51 2024 by rpki-client on console-fra.rpki-client.org