Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/odxo1V03sOwY--ynq4xlr5xX8gg.roa
File: odxo1V03sOwY--ynq4xlr5xX8gg.roa (raw, json)
Hash identifier: gJPHS2L7NM4DqvmQWhVJQS0+nzwsXKGI6Iz0La6wA+U=
Subject key identifier: A1:DC:68:D5:5D:37:B0:EC:18:FB:EC:A7:AB:8C:65:AF:9C:57:F2:08
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 920418
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/odxo1V03sOwY--ynq4xlr5xX8gg.roa
Signing time: Tue 12 Apr 2022 05:09:12 +0000
ROA not before: Tue 12 Apr 2022 05:09:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 193.246.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9569304 (0x920418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Apr 12 05:09:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1dc68d55d37b0ec18fbeca7ab8c65af9c57f208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:1c:98:a5:ee:1e:0b:53:ed:d4:68:4a:c0:
57:f4:e8:a1:db:2e:18:ea:9e:0a:37:09:fe:19:ae:
48:22:d1:d4:e5:cc:fa:6d:5b:28:17:8f:92:f1:20:
f6:82:74:ec:92:ac:a0:11:65:f1:00:70:dd:0e:af:
d4:ac:fd:e3:cd:fa:7a:cf:03:5a:7b:02:00:84:df:
06:39:4d:0c:20:db:ff:c4:ef:8a:e0:22:69:bb:35:
4e:34:37:be:c2:8c:ae:14:88:9f:56:a9:57:d5:a3:
18:b4:25:0e:a7:ad:b6:6c:4a:c9:15:86:38:fb:e2:
06:45:2d:62:51:df:67:35:3f:d2:ca:b8:48:cb:fb:
e1:9b:e4:ac:bf:20:27:d2:d6:d1:72:ba:7a:ca:a5:
12:c5:37:1b:cc:98:74:4e:0a:2b:d6:ee:b7:9e:06:
4e:31:b6:4c:92:17:fe:65:13:12:d0:68:f1:f5:90:
a7:67:cf:1f:6b:df:2f:59:b6:e4:25:b0:45:7c:50:
b8:65:c6:0f:f3:cf:84:4b:72:64:e6:24:47:a4:ec:
db:9a:c9:4b:b7:65:ac:e9:29:3e:aa:f8:27:3a:98:
a1:0c:d8:49:9e:83:ca:6d:13:dc:2a:bd:94:04:82:
89:5e:c7:d1:a3:0b:2c:e1:81:33:cf:b1:48:36:5f:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:68:D5:5D:37:B0:EC:18:FB:EC:A7:AB:8C:65:AF:9C:57:F2:08
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/odxo1V03sOwY--ynq4xlr5xX8gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.4.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:88:28:6d:14:76:8a:7a:ad:60:e7:6d:cf:a4:e0:7c:77:20:
48:90:3a:8a:6b:d0:22:ba:c0:63:97:f6:cf:74:f8:56:f5:26:
5f:89:f0:ad:46:63:95:a7:e4:1e:32:2d:09:83:bb:c7:b7:39:
65:de:98:c8:fd:50:3e:70:7a:e0:c6:2e:ac:a9:79:5f:e9:d9:
30:f4:63:9f:64:ca:90:dc:01:8c:ea:67:36:2b:35:74:09:a0:
f3:22:b1:9c:52:53:e8:92:4c:fb:a4:3a:74:7f:f2:3c:55:32:
aa:f7:8d:1a:a7:c8:66:07:b8:d4:39:8a:81:34:9d:57:39:a7:
62:9a:16:8a:76:6b:6e:4d:c3:00:eb:cb:af:f7:12:7c:91:0c:
72:39:94:0f:8f:97:1d:35:d3:87:1f:d8:3b:93:4c:39:50:9a:
0c:fd:12:bd:bd:62:6a:19:4b:5f:9d:b7:72:cc:d2:1e:a7:36:
56:e5:a9:c3:40:a7:0b:af:e1:1d:bc:e8:49:4c:f8:9a:dd:a1:
a5:36:f9:5d:58:8a:f4:ef:53:1c:04:68:42:5c:15:00:ea:f4:
9b:e5:63:53:a8:bb:d5:68:1d:e1:bc:e5:88:27:d2:70:6e:81:
5c:41:28:c6:cb:b4:6c:02:8b:17:73:2a:de:c1:9b:35:c7:46:
77:75:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org