Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/uDcs942KtqWKkB-LywoGCvALamg.roa
File: uDcs942KtqWKkB-LywoGCvALamg.roa (raw, json)
Hash identifier: 2zgcD1s8yPOrdm4poF9p5oDA2+FuU/AraST9lQCHV4Y=
Subject key identifier: B8:37:2C:F7:8D:8A:B6:A5:8A:90:1F:8B:CB:0A:06:0A:F0:0B:6A:68
Certificate issuer: /CN=98deece20f0b24085fc69cf7a02affc7b1328250
Certificate serial: 018636C6E02A5DEF91FEB33517BC9FD5464A
Authority key identifier: 98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mN7s4g8LJAhfxpz3oCr_x7EyglA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/uDcs942KtqWKkB-LywoGCvALamg.roa
Signing time: Thu 09 Feb 2023 15:24:08 +0000
ROA not before: Thu 09 Feb 2023 15:24:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197328
IP address blocks: 193.162.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:c6:e0:2a:5d:ef:91:fe:b3:35:17:bc:9f:d5:46:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98deece20f0b24085fc69cf7a02affc7b1328250
Validity
Not Before: Feb 9 15:24:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8372cf78d8ab6a58a901f8bcb0a060af00b6a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:53:dd:e7:18:24:b5:e9:4c:4f:8b:2c:36:
5b:5f:9b:a6:72:ab:84:b4:4f:10:2d:68:1c:39:33:
53:4a:a0:5c:95:5a:5d:3f:85:27:b0:d1:20:86:d5:
47:62:59:eb:7a:bd:da:c0:96:a0:be:0c:72:d6:ca:
4a:c9:46:85:94:a4:df:cb:4d:50:42:bf:e8:08:e6:
1b:44:94:eb:eb:ce:08:9b:94:69:f4:b4:1a:9e:f0:
d9:e8:51:7e:1c:78:12:ca:f1:14:3b:e4:a2:4d:8b:
1b:dc:9c:52:ca:ae:b7:55:23:e8:2a:b6:e7:54:bb:
48:26:dd:c1:ec:d8:67:ac:6d:4d:a6:48:89:fc:de:
05:7b:26:e6:49:28:ca:42:1d:40:fa:6a:12:4d:5b:
cf:2d:35:29:49:ce:2b:ad:53:fe:23:79:99:fd:9a:
29:8f:96:3c:58:c2:8a:a7:75:03:95:b1:38:d4:97:
ae:40:f6:a4:8e:38:33:24:ed:41:05:22:ec:69:32:
12:f9:6c:cd:02:f9:be:bd:fa:a3:ee:e9:a8:16:6b:
5a:bf:04:f8:df:83:a0:37:6f:71:0a:8f:39:5c:39:
2d:3e:a6:da:61:79:51:cf:98:f1:dc:1b:d2:19:bc:
b2:a8:0d:88:53:b2:ba:50:c5:03:f9:f7:d3:51:d1:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:2C:F7:8D:8A:B6:A5:8A:90:1F:8B:CB:0A:06:0A:F0:0B:6A:68
X509v3 Authority Key Identifier:
keyid:98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mN7s4g8LJAhfxpz3oCr_x7EyglA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/uDcs942KtqWKkB-LywoGCvALamg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/mN7s4g8LJAhfxpz3oCr_x7EyglA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.135.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:37:af:e8:23:a5:6a:41:44:c2:ee:ff:4d:01:d9:e3:5c:d3:
3d:13:4f:e2:b7:48:22:1b:43:64:22:74:76:da:44:15:00:19:
05:be:11:b2:48:91:37:73:a3:d5:80:b3:77:55:ee:99:a6:f9:
e2:91:e6:8e:4e:69:a8:0d:31:bb:61:0f:90:3f:9e:39:fd:fa:
57:78:b3:6f:bd:ab:9a:b7:8c:9c:df:35:8a:de:f6:4e:2d:38:
b7:40:40:af:b0:d8:63:da:41:e4:67:37:3e:b7:69:3e:74:aa:
c7:c7:18:71:00:45:63:ab:56:a0:e3:19:cd:c8:45:84:ee:b6:
90:2f:2a:03:78:e7:e1:96:a0:26:aa:61:49:c9:df:6b:3f:a8:
4f:52:bc:90:7a:ad:71:01:cf:24:a5:bb:ec:b9:95:27:8a:fa:
0c:4c:a1:90:01:9e:f0:0f:54:90:25:fc:ad:78:88:ae:a5:7a:
6d:ce:6d:6b:a7:1a:3e:4e:2c:60:c8:86:20:7b:ef:ec:5c:5b:
78:8e:2f:3a:f6:8c:f5:6f:f1:11:27:40:5f:73:35:6a:43:30:
bc:d2:20:bb:e3:56:7f:b1:e0:e8:a2:67:c9:af:aa:88:ef:62:
1e:cb:7f:a6:cf:eb:89:43:46:fa:a1:56:ac:c3:c5:e9:d5:6c:
cf:b2:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:08 2025 by rpki-client