Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/IFjkidUdcpUHPRGV3oC3t-6pC2A.roa
File: IFjkidUdcpUHPRGV3oC3t-6pC2A.roa (raw, json)
Hash identifier: 6N/qubXbyLvcZvKW+ollPKyTEE4Wv89TtV6fis795WY=
Subject key identifier: 20:58:E4:89:D5:1D:72:95:07:3D:11:95:DE:80:B7:B7:EE:A9:0B:60
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 018215541C9406C7E57D67882E8DD64FDCA4
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/IFjkidUdcpUHPRGV3oC3t-6pC2A.roa
Signing time: Tue 19 Jul 2022 07:20:09 +0000
ROA not before: Tue 19 Jul 2022 07:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 193.246.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:54:1c:94:06:c7:e5:7d:67:88:2e:8d:d6:4f:dc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Jul 19 07:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2058e489d51d7295073d1195de80b7b7eea90b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:98:e0:0f:ea:cc:97:83:f7:83:f9:f6:2a:
36:ca:cb:a9:16:2b:44:f5:64:63:aa:71:6f:98:9d:
85:8d:2e:f7:7b:44:0c:30:d6:06:3f:e5:d9:45:f0:
a9:d8:e4:69:b9:2d:5b:db:7c:b9:8a:f9:95:af:9b:
b9:b2:00:00:31:81:5b:00:5c:a4:0a:e1:f0:df:e7:
83:f9:07:1b:85:53:5b:37:cf:ed:f3:e5:61:a1:52:
91:69:7e:1c:87:64:bb:29:c8:a2:0a:87:38:a7:c9:
cb:28:ba:76:81:9a:d7:d7:97:f7:45:22:73:91:d0:
79:7f:e9:1e:01:df:99:71:52:85:20:ea:64:ba:7d:
c9:b5:be:26:84:68:00:35:9b:0c:fd:fc:46:63:4c:
a3:09:b1:18:29:10:1f:29:4d:b7:73:c5:5c:ad:ad:
a8:dd:b0:c0:cf:7d:c1:3d:f6:10:b1:b2:46:97:5d:
25:34:19:90:14:f5:02:45:6c:0d:93:80:07:03:80:
36:a5:f4:7c:53:5f:ca:7a:3d:91:8a:5b:f2:22:85:
7a:fc:1a:4c:00:56:09:41:eb:ae:4a:f7:0b:c2:6f:
0e:11:b4:3e:0a:30:e6:0c:ae:56:96:19:79:2a:01:
ec:df:59:ba:6c:be:19:06:a3:02:75:c9:15:60:67:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:58:E4:89:D5:1D:72:95:07:3D:11:95:DE:80:B7:B7:EE:A9:0B:60
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/IFjkidUdcpUHPRGV3oC3t-6pC2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:d3:0e:c4:58:5b:a5:73:b6:44:fc:0a:4d:e0:52:9a:08:61:
a5:2b:81:64:63:2e:f7:41:ee:c5:8e:dc:33:c9:3f:4f:46:47:
ba:ad:5f:43:1d:83:1d:ed:af:d7:50:b8:63:f4:7a:89:8e:ad:
f2:67:5c:17:cc:3a:b8:70:a5:b7:00:42:e0:71:ff:8a:f2:ec:
76:dd:55:bc:39:4e:a8:40:9d:ef:fb:3f:cf:78:79:fe:4c:64:
dd:e0:91:3f:2b:41:5c:6b:6e:3c:9f:32:62:69:f9:5b:7d:32:
6a:ab:f1:64:ad:36:6b:dc:80:c3:4a:cf:80:6a:5a:a2:47:e7:
32:31:f1:98:5c:c9:4e:9f:de:af:63:71:80:3e:46:d0:7d:34:
79:e1:86:ed:7c:70:cf:52:5e:85:65:55:6f:17:2b:08:9d:ae:
ee:26:23:de:97:e3:94:c8:81:3c:cd:e3:d3:4e:9c:8e:96:a6:
ef:39:95:1e:ca:d0:b8:e2:bb:5d:28:ee:04:cc:d9:33:e6:9c:
12:b8:c6:3a:90:04:a2:5f:e4:7a:cf:25:9b:23:82:48:c7:fc:
9d:03:7b:8c:39:4c:7b:81:2f:2e:be:f3:10:d9:bc:97:9f:ca:
e7:f0:5f:9b:5d:bf:21:d3:7d:1f:e4:14:8b:d9:48:c2:3e:3e:
17:8f:b1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org