Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/aNaEAxfCPqDyucnLf5eIuDCEHt8.roa
File: aNaEAxfCPqDyucnLf5eIuDCEHt8.roa (raw, json)
Hash identifier: 91Oy2QbmJshacyL1hL0MsUUgMYAyXtFuuvg4H9lfQ3M=
Subject key identifier: 68:D6:84:03:17:C2:3E:A0:F2:B9:C9:CB:7F:97:88:B8:30:84:1E:DF
Certificate issuer: /CN=98deece20f0b24085fc69cf7a02affc7b1328250
Certificate serial: 01040684
Authority key identifier: 98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mN7s4g8LJAhfxpz3oCr_x7EyglA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/aNaEAxfCPqDyucnLf5eIuDCEHt8.roa
Signing time: Sat 01 Jan 2022 10:00:46 +0000
ROA not before: Sat 01 Jan 2022 10:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.162.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17041028 (0x1040684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98deece20f0b24085fc69cf7a02affc7b1328250
Validity
Not Before: Jan 1 10:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68d6840317c23ea0f2b9c9cb7f9788b830841edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:33:c0:f3:f0:49:90:be:89:8d:5b:56:eb:
80:46:2a:5c:fe:84:35:40:4f:3e:6b:2e:00:30:8a:
89:2a:7f:bc:29:5d:70:65:47:e4:be:cc:e4:e3:ac:
e5:49:56:ac:35:3d:fa:a4:74:99:64:b6:c5:d5:8f:
68:bf:f2:85:3d:3f:8a:a8:70:49:3d:b8:2f:a5:8d:
10:99:9b:94:3c:11:4d:97:37:e9:a7:c3:0c:84:63:
f9:c2:c0:23:c3:b2:0f:23:d6:50:78:4b:3e:64:85:
30:34:13:fc:2b:55:04:81:dd:a6:39:bc:f3:25:a1:
45:f2:38:b7:87:65:00:06:df:46:a3:ba:d7:05:3d:
f8:77:7a:39:9e:87:4a:85:ae:77:ae:e4:5a:5c:95:
f0:51:f2:b8:4f:d1:ac:65:16:f1:24:2a:2a:1e:0d:
b6:a7:1b:6b:57:7e:80:92:46:c8:08:4c:17:81:48:
dd:2e:cc:64:26:5f:3a:17:e5:2c:de:86:30:b8:c1:
22:f4:92:5d:d2:89:47:ee:3b:1c:38:c2:ec:1a:f3:
d4:a7:f1:60:0b:de:4d:4f:73:b8:99:d1:1b:df:7b:
1f:07:d9:8c:04:20:b0:01:7c:e8:9d:35:10:c6:da:
cf:de:fd:40:05:3c:1a:39:a8:dc:d2:ba:51:da:65:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D6:84:03:17:C2:3E:A0:F2:B9:C9:CB:7F:97:88:B8:30:84:1E:DF
X509v3 Authority Key Identifier:
keyid:98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mN7s4g8LJAhfxpz3oCr_x7EyglA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/aNaEAxfCPqDyucnLf5eIuDCEHt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/mN7s4g8LJAhfxpz3oCr_x7EyglA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:57:a9:e1:e5:7f:87:02:95:02:5f:8b:b3:0a:83:51:bc:2c:
2c:31:b3:1e:3c:fe:a0:71:ae:f6:f9:4c:c8:e6:46:33:82:6d:
ac:6a:a9:aa:22:ba:21:05:98:c9:df:2f:f3:13:36:4a:0b:01:
5b:40:0e:86:b4:26:dd:9e:5d:8b:93:dc:49:74:d2:c6:4d:8b:
86:80:db:27:ba:36:ff:80:13:2b:cf:f5:d4:de:3c:49:b9:fb:
44:c9:5c:e0:60:c4:ca:70:68:8b:5e:2b:22:d5:90:45:7a:90:
f7:8b:d2:a3:75:64:5e:b4:45:31:d0:fb:65:21:bc:4d:db:cb:
3c:c1:f3:56:6f:96:74:eb:da:21:67:d3:0e:e8:66:4a:c8:2f:
02:43:54:a2:67:b2:ed:7d:52:18:2c:5d:60:f5:67:c3:d8:00:
db:92:3f:35:a4:42:c8:69:0a:69:24:49:d6:ef:42:f0:f0:53:
4c:5e:0c:01:8d:bd:78:d7:6f:32:8a:e6:22:1c:98:7f:80:7e:
4f:bc:89:3f:e2:e1:bd:a7:be:4d:c9:5b:76:f9:ea:a4:09:2d:
21:f7:99:c1:31:60:cb:0c:ea:d9:ad:e1:fa:db:a9:49:85:45:
22:1c:01:12:44:7c:a5:97:e1:20:33:78:61:57:4a:5b:c2:de:
cf:13:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:32 2024 by rpki-client on console-ams.rpki-client.org