Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/NjR5rsIVGONBV1sh9y527aj2ky4.roa
File: NjR5rsIVGONBV1sh9y527aj2ky4.roa (raw, json)
Hash identifier: yRfNxexjy8Lpu6rJnkP5t5W/6UXKDDlaR1w/IKpuM4M=
Subject key identifier: 36:34:79:AE:C2:15:18:E3:41:57:5B:21:F7:2E:76:ED:A8:F6:93:2E
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 0185D41840C41C14DFB6C6E5F82163CD161C
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/NjR5rsIVGONBV1sh9y527aj2ky4.roa
Signing time: Sat 21 Jan 2023 11:30:37 +0000
ROA not before: Sat 21 Jan 2023 11:30:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 193.246.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:18:40:c4:1c:14:df:b6:c6:e5:f8:21:63:cd:16:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Jan 21 11:30:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=363479aec21518e341575b21f72e76eda8f6932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:9f:81:6e:2a:d7:18:81:4d:77:f0:a2:d3:
b6:31:be:51:b7:41:d0:7c:df:7d:17:f7:46:61:58:
9b:94:3e:af:f7:9d:af:8d:8d:a8:21:28:b3:6f:e2:
f0:22:b1:0e:b6:3d:e8:33:e5:95:6b:a0:a3:a6:d3:
14:70:eb:f5:ae:44:32:80:ce:09:05:49:46:7b:74:
b1:be:32:bb:3c:6a:3d:f7:a9:5b:0c:98:0a:03:02:
d5:1c:62:7a:12:3f:d3:f0:be:a9:18:c9:a6:97:e2:
df:62:cd:b7:94:eb:ff:36:67:20:83:84:12:9c:69:
f8:21:b7:ed:75:62:7b:ee:b9:64:2a:5c:54:72:d3:
27:b5:92:1a:ef:75:02:72:8a:54:49:14:b4:96:a7:
d6:1c:d8:cb:e1:62:4f:9f:75:6c:30:1c:32:d8:0a:
8a:d0:b0:62:77:ba:3d:81:33:4a:1d:ba:7d:c8:00:
3d:61:3f:f7:99:f6:01:e1:59:2d:3d:79:aa:df:60:
7b:dc:c0:c8:d7:fc:79:ff:42:9c:1c:71:c4:e3:79:
50:1a:26:28:11:70:aa:e0:75:8a:b8:ca:21:89:0a:
38:07:50:e9:8e:7c:e8:b4:09:cb:e0:a6:6c:90:10:
97:25:b8:25:ca:2e:78:71:a9:7d:7f:38:0c:f7:e7:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:34:79:AE:C2:15:18:E3:41:57:5B:21:F7:2E:76:ED:A8:F6:93:2E
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/NjR5rsIVGONBV1sh9y527aj2ky4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4b:b8:85:3a:37:15:fd:11:7c:28:48:08:5c:26:44:a2:52:
f3:03:b7:5c:0a:53:a4:29:97:de:ba:99:72:35:ff:8f:aa:a3:
5e:8e:d7:be:b0:eb:e9:c3:3a:71:60:4c:d4:52:d6:11:25:21:
23:ed:a9:e8:26:06:ed:df:fa:30:31:ce:cc:70:6f:81:27:28:
81:61:71:9f:e8:87:5d:2d:ac:41:a8:d0:88:ce:be:ef:76:a3:
85:7f:c7:f6:c2:47:4c:16:da:3e:f0:55:4d:8c:4b:e5:e8:72:
9c:03:21:66:5d:da:46:88:35:74:65:b6:62:fa:4f:53:60:14:
81:f1:e8:12:13:23:3f:0b:94:5b:92:42:06:e7:e2:ac:a0:ab:
c5:9c:e6:28:9e:26:cf:60:65:50:b3:c3:30:41:de:44:44:8e:
05:49:5f:01:8b:a2:7f:1a:fc:2c:2b:0f:c7:3d:d0:95:bb:36:
a5:d1:24:4a:9b:15:fe:b0:cd:40:7e:fd:97:42:09:17:bf:4c:
98:90:6d:e3:2b:57:57:f5:75:ab:2d:05:c0:23:84:ee:4e:f8:
7c:8b:85:31:3b:be:75:5d:f8:bd:fe:d9:54:24:a0:15:87:36:
a2:93:40:19:0c:f3:c5:d6:e6:96:5f:18:81:48:d8:f1:74:da:
9d:54:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org