Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/_I_Z3uVb71Y3dEkKFHFz_Ts6Mm4.roa
File: _I_Z3uVb71Y3dEkKFHFz_Ts6Mm4.roa (raw, json)
Hash identifier: UtKcfC1h80hfS9MtxV0oLwlN7PSNvD3y4kdW/aDkdfQ=
Subject key identifier: FC:8F:D9:DE:E5:5B:EF:56:37:74:49:0A:14:71:73:FD:3B:3A:32:6E
Certificate issuer: /CN=98deece20f0b24085fc69cf7a02affc7b1328250
Certificate serial: 01856F8B8266A62D8F4361C95997B41A98DD
Authority key identifier: 98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mN7s4g8LJAhfxpz3oCr_x7EyglA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/_I_Z3uVb71Y3dEkKFHFz_Ts6Mm4.roa
Signing time: Sun 01 Jan 2023 22:54:51 +0000
ROA not before: Sun 01 Jan 2023 22:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 193.162.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:82:66:a6:2d:8f:43:61:c9:59:97:b4:1a:98:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98deece20f0b24085fc69cf7a02affc7b1328250
Validity
Not Before: Jan 1 22:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8fd9dee55bef563774490a147173fd3b3a326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:97:28:d1:9b:98:72:80:e1:d2:c3:9b:b7:d9:
b6:ca:fe:4d:a2:36:54:79:e5:eb:80:58:ab:97:7d:
ea:bf:db:61:ad:ff:34:f6:7c:1d:c1:4f:bd:9c:1f:
bc:bf:90:1a:e9:5f:a0:0d:08:b5:87:ac:d2:7b:57:
80:b8:b8:00:3a:f4:5e:26:c8:29:16:e0:bc:f8:fb:
a0:71:81:b0:40:c3:46:19:24:7b:33:0f:cf:6d:3f:
1e:cf:fb:67:1b:25:3a:a7:52:9b:31:78:c9:78:cd:
18:d2:e2:f6:b5:36:54:6f:52:40:f8:65:95:77:e1:
c6:cf:bb:d6:86:c0:2c:21:5e:67:19:ea:6b:ea:bd:
be:9b:ed:cb:da:f9:1b:67:b4:b9:95:21:fe:5d:c7:
c5:9c:41:20:94:9b:7e:e8:c0:ac:13:02:c9:4e:ef:
96:c1:b6:e7:80:8f:a2:ec:5e:ef:76:2d:48:57:1e:
82:85:77:b7:3e:38:d5:70:54:ab:0d:b7:1a:87:b9:
06:29:0c:95:be:66:33:bc:27:c1:e0:53:7e:0b:ad:
6e:4f:12:6c:bc:ec:b0:2f:1c:4e:5a:d8:6a:c8:23:
e5:29:26:96:5d:6d:f5:ff:b7:43:11:52:89:1f:23:
33:89:5c:ab:0e:9c:bc:8c:e6:15:f8:70:d6:5b:ae:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:D9:DE:E5:5B:EF:56:37:74:49:0A:14:71:73:FD:3B:3A:32:6E
X509v3 Authority Key Identifier:
keyid:98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mN7s4g8LJAhfxpz3oCr_x7EyglA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/_I_Z3uVb71Y3dEkKFHFz_Ts6Mm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/mN7s4g8LJAhfxpz3oCr_x7EyglA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.135.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d8:dd:12:f1:8f:4e:f3:ba:8d:79:63:d1:32:cd:d6:d0:82:
95:6e:09:ab:aa:a8:64:35:ff:4f:46:35:98:94:94:f6:d4:ac:
cd:af:02:2b:d9:5e:87:77:e4:5f:fc:b3:b2:b6:5f:bd:28:31:
b8:c4:59:49:5c:9b:02:c2:db:d5:9e:9f:b3:eb:8c:1f:d2:7e:
21:65:85:ea:b8:01:8d:80:c8:e3:77:6d:7c:2a:15:ae:a6:83:
d2:a2:6e:d9:6b:35:7d:30:b6:31:f5:1c:dc:76:92:3e:c0:8b:
60:f8:a2:56:05:55:2d:52:4b:dd:e3:33:5b:76:de:33:3e:65:
89:f5:32:fc:f0:70:18:af:15:46:83:17:c9:52:dc:1f:31:45:
e6:7d:fc:e1:06:83:61:6d:68:3c:53:98:0a:a4:87:59:74:a4:
96:b2:10:f3:68:06:a5:bf:19:3d:77:60:ce:f6:bd:a0:f7:b1:
0a:27:61:a8:e4:6e:34:4e:36:43:b8:59:4e:e5:56:96:ab:84:
78:cb:e0:34:a9:cf:03:a5:a4:77:59:39:17:ae:ac:eb:86:ed:
75:68:ae:eb:a8:48:21:31:f4:8d:0c:dd:66:0a:f9:98:b4:c5:
85:4e:36:17:11:bd:dc:4e:e7:39:c5:b2:c1:6a:f1:85:c6:01:
af:d5:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:32 2024 by rpki-client on console-ams.rpki-client.org