Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/xP7ogqkGm5xSLsticyeolSlHOp0.roa
File: xP7ogqkGm5xSLsticyeolSlHOp0.roa (raw, json)
Hash identifier: 88Z/qTJB2FwY0u3LAezs6I0I5OoXt9s24SWey6MvGxA=
Subject key identifier: C4:FE:E8:82:A9:06:9B:9C:52:2E:CB:62:73:27:A8:95:29:47:3A:9D
Certificate issuer: /CN=871d9b1821c0a9d1622bdddf9ec0c918e92a437e
Certificate serial: 018CC2DAE8FF53FA6780F403BB5C49CD7AA5
Authority key identifier: 87:1D:9B:18:21:C0:A9:D1:62:2B:DD:DF:9E:C0:C9:18:E9:2A:43:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hx2bGCHAqdFiK93fnsDJGOkqQ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/xP7ogqkGm5xSLsticyeolSlHOp0.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204119
IP address blocks: 193.151.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e8:ff:53:fa:67:80:f4:03:bb:5c:49:cd:7a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871d9b1821c0a9d1622bdddf9ec0c918e92a437e
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4fee882a9069b9c522ecb627327a89529473a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:22:52:61:99:ef:12:59:c3:ec:81:06:59:
47:11:d2:c2:62:f1:61:40:ef:aa:b5:a9:77:65:42:
5b:10:c3:1e:0c:63:0e:56:c8:cb:ae:ab:ea:ca:d5:
b7:ab:e9:b2:f8:07:d4:5e:06:fb:56:f4:53:39:db:
3e:a9:9c:ae:ed:17:97:bc:fa:55:bc:8b:83:ad:10:
c0:07:e3:84:7a:dc:2f:2e:81:cb:f8:4b:f6:52:55:
c0:5a:1b:69:01:b4:74:c6:6c:f1:81:db:fc:b7:b4:
e8:5d:31:d8:d8:f6:a0:d6:e8:57:47:31:33:24:a3:
cb:d5:6f:44:19:59:0a:07:f0:ed:fc:c6:e9:42:78:
70:cd:b1:48:54:21:83:e9:68:fd:d2:85:d1:17:da:
5a:4d:a7:d5:bf:10:3a:f3:ff:f3:13:2c:1c:8a:da:
ea:0b:7f:5a:ee:d5:0c:74:fa:aa:7b:b6:3a:9e:75:
0a:4f:41:77:5d:32:87:c4:52:46:02:1e:1a:bf:43:
bd:4d:a5:57:36:5c:ec:98:18:5f:b2:5d:59:83:ce:
e8:c1:ac:4d:93:98:5a:c6:45:b5:c5:57:ae:9f:a9:
79:d8:66:63:05:c4:8d:fe:61:3e:e8:75:04:cd:55:
25:e7:e9:b0:7d:a5:c0:79:4d:32:a6:c6:ae:21:c2:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FE:E8:82:A9:06:9B:9C:52:2E:CB:62:73:27:A8:95:29:47:3A:9D
X509v3 Authority Key Identifier:
keyid:87:1D:9B:18:21:C0:A9:D1:62:2B:DD:DF:9E:C0:C9:18:E9:2A:43:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hx2bGCHAqdFiK93fnsDJGOkqQ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/xP7ogqkGm5xSLsticyeolSlHOp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/hx2bGCHAqdFiK93fnsDJGOkqQ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.4.0/22
Signature Algorithm: sha256WithRSAEncryption
59:fa:dc:51:38:2d:3c:60:2e:6f:56:ca:bc:37:31:02:d0:23:
5f:6e:f9:e8:28:f9:c5:51:6e:46:2f:72:e0:46:28:b2:49:90:
85:18:0e:8d:3a:85:02:0d:13:ca:20:7d:9e:f0:77:2a:26:71:
53:eb:a9:89:72:23:95:91:79:68:bf:c6:fc:31:b1:6f:21:d0:
1c:0e:50:58:31:54:6a:0e:be:c4:ae:b6:90:29:d4:28:b0:d9:
86:9c:01:47:36:0c:10:8a:08:91:d7:dd:47:e7:ad:3f:94:91:
ba:8d:7c:f4:20:a5:47:3b:3d:08:e0:d2:04:c8:fc:d2:f4:59:
97:f3:92:ea:f1:9f:40:de:ca:f9:24:8a:57:43:5e:d1:af:71:
1f:00:b3:7c:7c:36:82:10:92:10:5e:b2:56:a6:20:63:1c:6b:
58:9c:84:27:df:8a:50:4d:ad:f2:e5:57:b6:f7:91:cb:57:94:
5c:20:4a:1c:14:53:ce:a5:b1:17:3c:45:df:31:c5:10:42:b6:
fa:c9:b6:33:35:e1:47:f6:7b:31:1c:43:a2:27:81:14:02:89:
87:6f:c8:eb:39:74:84:25:48:f0:60:97:bc:66:6d:d3:9e:46:
2b:f5:83:91:3b:97:26:f1:36:0e:25:23:2f:70:3e:ed:f9:b9:
63:03:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:42 2024 by rpki-client on console-fra.rpki-client.org