Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/lFdzl1ixNWqzU0GEpfeie7iyKHg.roa
File: lFdzl1ixNWqzU0GEpfeie7iyKHg.roa (raw, json)
Hash identifier: K6cm/JkbjksR4EZLvN3SUmGtt11Q33UR3iHz7X5LMQc=
Subject key identifier: 94:57:73:97:58:B1:35:6A:B3:53:41:84:A5:F7:A2:7B:B8:B2:28:78
Certificate issuer: /CN=6a9909e02187344fc514ab054fb1b625e7d57dcc
Certificate serial: 0185737AA5BB59C2FC20C80C93B569BB1863
Authority key identifier: 6A:99:09:E0:21:87:34:4F:C5:14:AB:05:4F:B1:B6:25:E7:D5:7D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apkJ4CGHNE_FFKsFT7G2JefVfcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/lFdzl1ixNWqzU0GEpfeie7iyKHg.roa
Signing time: Mon 02 Jan 2023 17:14:55 +0000
ROA not before: Mon 02 Jan 2023 17:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 193.30.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:a5:bb:59:c2:fc:20:c8:0c:93:b5:69:bb:18:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9909e02187344fc514ab054fb1b625e7d57dcc
Validity
Not Before: Jan 2 17:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9457739758b1356ab3534184a5f7a27bb8b22878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:81:bd:08:12:73:d6:b5:07:4c:87:1f:8a:
7e:5a:9c:17:9f:fd:45:fd:b4:5d:78:0e:9c:eb:6b:
ae:fb:76:5f:9d:f9:a4:9f:b8:14:fc:37:c7:e2:b1:
00:ed:a1:8b:d1:2d:4b:be:25:24:f1:3d:27:1c:0e:
e3:c4:9c:20:41:a5:5f:31:9c:2a:af:31:e3:af:e1:
58:21:19:a5:81:ad:6e:43:86:26:db:62:94:0f:6f:
ee:e2:c1:01:8f:4a:86:55:ad:cd:81:6f:0c:85:2f:
e9:6b:d2:51:70:c2:98:aa:eb:80:26:70:a9:07:ac:
ac:72:59:49:00:76:42:0b:c7:b1:be:b9:ee:6d:75:
40:8f:b4:08:0a:b9:b2:a9:94:64:e8:8c:9b:c9:e9:
37:24:c4:c5:72:98:64:03:c4:1e:cc:11:ba:5d:c9:
3a:27:91:a7:92:3b:eb:35:ec:72:ec:21:20:64:ec:
a8:93:9d:e8:6c:95:fe:66:8c:3c:96:d6:51:e2:08:
7e:e7:da:b7:ce:32:22:04:93:ba:98:b5:cb:44:f4:
61:91:7a:82:c6:b1:ba:95:20:af:a4:50:f1:b6:d9:
4a:56:d3:f2:1b:9a:39:a9:6c:83:3d:4c:fe:80:2a:
c2:32:a1:69:c0:87:40:6f:72:e0:12:fb:db:69:d8:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:73:97:58:B1:35:6A:B3:53:41:84:A5:F7:A2:7B:B8:B2:28:78
X509v3 Authority Key Identifier:
keyid:6A:99:09:E0:21:87:34:4F:C5:14:AB:05:4F:B1:B6:25:E7:D5:7D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apkJ4CGHNE_FFKsFT7G2JefVfcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/lFdzl1ixNWqzU0GEpfeie7iyKHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/apkJ4CGHNE_FFKsFT7G2JefVfcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:df:53:c1:04:65:ac:d0:38:95:3e:9e:a3:81:03:b9:8c:16:
e2:8b:b3:af:24:e5:d9:1c:c0:1f:64:70:32:28:e3:c5:f0:01:
81:40:01:5b:84:2a:b2:cd:80:28:f2:6e:6a:b0:3b:12:97:34:
e8:f9:84:0c:f8:a8:fc:65:3a:16:f1:30:39:81:08:8f:d5:dd:
fc:c9:c1:24:19:31:bb:e6:58:31:5b:c6:0a:e8:11:b3:f8:64:
34:b3:be:24:f2:5c:dc:cb:62:e6:76:3f:c3:b9:35:00:18:45:
f8:1b:10:f5:a3:c5:c9:3a:f0:6c:0e:c4:80:a8:47:75:11:c2:
d4:1f:44:bf:51:2c:64:f8:05:8c:3f:d2:c8:a2:90:06:57:cf:
85:df:e4:2b:ee:bf:65:b6:6a:e0:b4:9a:77:cd:1d:1b:0d:d5:
20:00:72:2e:fc:a9:a8:b7:c4:c4:34:ce:67:be:75:d5:e6:49:
36:c7:1e:eb:ce:56:3a:35:db:b6:83:0e:cd:81:fd:d0:79:d5:
27:57:f8:d7:b5:f4:eb:2a:ef:e3:b4:1f:39:73:03:80:88:84:
cf:ff:ad:7a:32:2a:c2:cc:b9:c5:e1:17:13:50:f9:f8:a8:a5:
c6:d6:40:48:04:99:53:2b:34:a3:85:dc:35:7f:21:1c:79:85:
cb:98:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:10 2024 by rpki-client on console-ams.rpki-client.org