Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/5CEB3YP-gGUgb6Ws8f4zB6vXTdo.roa
File: 5CEB3YP-gGUgb6Ws8f4zB6vXTdo.roa (raw, json)
Hash identifier: ZQBbaDPDzcKLy/tsJGthMnja4Tw9UHFPfqhtGTB+0Zs=
Subject key identifier: E4:21:01:DD:83:FE:80:65:20:6F:A5:AC:F1:FE:33:07:AB:D7:4D:DA
Certificate issuer: /CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Certificate serial: 018B683F411D27A22479E6664903EF06BE5F
Authority key identifier: 2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/5CEB3YP-gGUgb6Ws8f4zB6vXTdo.roa
Signing time: Wed 25 Oct 2023 19:10:57 +0000
ROA not before: Wed 25 Oct 2023 19:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19762
IP address blocks: 193.243.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:3f:41:1d:27:a2:24:79:e6:66:49:03:ef:06:be:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Validity
Not Before: Oct 25 19:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e42101dd83fe8065206fa5acf1fe3307abd74dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:e4:dd:a8:c9:92:6a:83:0f:99:1a:68:23:
4f:62:3e:1c:d7:35:ed:46:41:8c:fa:99:4a:56:ac:
c5:19:29:af:ba:2d:e4:bb:c2:33:87:19:3f:1c:42:
10:e2:3b:81:18:67:d5:a8:ba:d0:41:59:54:ac:16:
38:27:e4:3a:a3:3a:dc:f0:96:e5:47:f0:80:0e:04:
7e:f4:c3:64:fe:02:42:51:d7:78:a7:9b:d4:ca:3e:
11:00:c5:e5:06:97:c7:bb:a5:c7:f5:54:86:b3:35:
63:db:7d:11:8c:5e:4d:0b:fb:87:6e:2c:8d:43:3c:
57:ce:b2:92:ef:67:77:39:04:70:0e:13:0c:31:55:
59:8a:db:d6:dc:49:33:ed:84:6d:09:9e:3b:cb:26:
2f:c1:04:d2:89:32:b5:6c:1f:1e:ee:8a:65:ad:5e:
5e:a7:1c:df:ec:9e:8c:be:5a:20:fd:4e:b5:5b:b4:
ff:bd:93:a8:9e:78:2f:8e:5a:22:ee:8d:cf:d9:7c:
a9:d9:3b:7f:33:8c:6c:a8:0b:ae:45:61:0a:e6:bb:
b4:cc:4e:9f:c1:bc:2b:03:ff:87:20:d6:ce:10:5f:
d9:eb:ba:92:52:fa:ee:89:50:fc:07:88:06:93:0e:
ab:dc:87:a5:d5:26:c1:99:27:4b:47:95:0b:d0:0b:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:21:01:DD:83:FE:80:65:20:6F:A5:AC:F1:FE:33:07:AB:D7:4D:DA
X509v3 Authority Key Identifier:
keyid:2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/5CEB3YP-gGUgb6Ws8f4zB6vXTdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.190.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d6:e7:27:a1:2b:2a:fe:13:b1:c7:c3:12:ce:c7:d3:fa:ee:
47:00:0d:fd:7b:70:52:7f:04:37:24:64:6f:80:f6:ca:f8:01:
67:5d:d5:97:32:32:cc:a6:e7:8e:23:9a:a7:03:fa:48:92:46:
46:1f:64:7b:59:f2:24:23:d5:be:d2:d3:2f:ec:57:fd:6f:e0:
9f:94:3b:e8:5b:fd:a1:56:bc:4a:2d:f3:37:2f:34:af:47:9b:
82:4c:2d:d9:51:6f:a3:94:03:de:c7:d4:bd:aa:0c:60:ef:ac:
ef:db:13:62:c7:fc:bc:d5:45:0c:62:7d:97:51:39:b0:25:65:
56:b6:68:38:c3:5d:f3:25:81:ca:f8:c5:07:5f:16:c6:ad:37:
63:18:d7:ae:b1:eb:74:a4:5d:57:61:a1:8b:8a:d5:4a:82:0b:
8f:d1:cc:db:03:8c:f4:88:8d:7e:7f:00:35:58:de:66:62:ec:
d3:c6:fb:d0:64:bd:10:93:58:62:6e:ab:83:cc:d4:a9:d1:c4:
a2:ae:14:c0:1f:5b:64:0a:47:5d:6f:d4:2b:d8:b9:d5:af:45:
ba:13:df:9f:80:36:11:1c:2c:50:8e:8a:4c:70:94:ee:50:50:
b0:54:86:76:31:4a:11:fa:a4:f8:8a:c8:12:55:b6:44:e6:67:
8d:68:6b:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtoP0EdJ6IkeeZmSQPvBr5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGI2ZmY3YjY1ODk0MzMyY2JiNDFkM2FlYjczNTMwMWY0
OGIyOTgwHhcNMjMxMDI1MTkxMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDIxMDFkZDgzZmU4MDY1MjA2ZmE1YWNmMWZlMzMwN2FiZDc0ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvjk3ajJkmqDD5kaaCNPYj4c1zXt
RkGM+plKVqzFGSmvui3ku8Izhxk/HEIQ4juBGGfVqLrQQVlUrBY4J+Q6ozrc8Jbl
R/CADgR+9MNk/gJCUdd4p5vUyj4RAMXlBpfHu6XH9VSGszVj230RjF5NC/uHbiyN
QzxXzrKS72d3OQRwDhMMMVVZitvW3Ekz7YRtCZ47yyYvwQTSiTK1bB8e7oplrV5e
pxzf7J6Mvlog/U61W7T/vZOonngvjloi7o3P2Xyp2Tt/M4xsqAuuRWEK5ru0zE6f
wbwrA/+HINbOEF/Z67qSUvruiVD8B4gGkw6r3Iel1SbBmSdLR5UL0AtemwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQhAd2D/oBlIG+lrPH+Mwer103aMB8GA1UdIwQY
MBaAFC4Lb/e2WJQzLLtB0663NTAfSLKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGd0djk3WllsRE1zdTBIVHJyYzFNQjlJc3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZWU3ZTAtOWY4YS00NzhjLTk5ZTYt
Njk4ZjQ4MzcxOWNlLzEvNUNFQjNZUC1nR1VnYjZXczhmNHpCNnZYVGRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZWU3ZTAtOWY4YS00NzhjLTk5ZTYtNjk4ZjQ4MzcxOWNl
LzEvTGd0djk3WllsRE1zdTBIVHJyYzFNQjlJc3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfO+MA0G
CSqGSIb3DQEBCwUAA4IBAQAQ1ucnoSsq/hOxx8MSzsfT+u5HAA39e3BSfwQ3JGRv
gPbK+AFnXdWXMjLMpueOI5qnA/pIkkZGH2R7WfIkI9W+0tMv7Ff9b+CflDvoW/2h
VrxKLfM3LzSvR5uCTC3ZUW+jlAPex9S9qgxg76zv2xNix/y81UUMYn2XUTmwJWVW
tmg4w13zJYHK+MUHXxbGrTdjGNeuset0pF1XYaGLitVKgguP0czbA4z0iI1+fwA1
WN5mYuzTxvvQZL0Qk1hibquDzNSp0cSirhTAH1tkCkddb9Qr2LnVr0W6E9+fgDYR
HCxQjopMcJTuUFCwVIZ2MUoR+qT4isgSVbZE5meNaGtI
-----END CERTIFICATE-----
Generated at Wed Nov 1 14:09:55 2023 by rpki-client on console-ams.rpki-client.org