Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/I1g2jEXYTSPM7e5yfVX0zBCinGQ.roa
File: I1g2jEXYTSPM7e5yfVX0zBCinGQ.roa (raw, json)
Hash identifier: Wfas5AzZIUWQ4qy4IsMDcnTlAIy8AIQkp2kYIhQ+3To=
Subject key identifier: 23:58:36:8C:45:D8:4D:23:CC:ED:EE:72:7D:55:F4:CC:10:A2:9C:64
Certificate issuer: /CN=9a9bbdaa00011f6c2f69518895fa023d32d5b7d9
Certificate serial: 01856F9DFE87EF6B412EACA1640F17083180
Authority key identifier: 9A:9B:BD:AA:00:01:1F:6C:2F:69:51:88:95:FA:02:3D:32:D5:B7:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpu9qgABH2wvaVGIlfoCPTLVt9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/I1g2jEXYTSPM7e5yfVX0zBCinGQ.roa
Signing time: Sun 01 Jan 2023 23:15:03 +0000
ROA not before: Sun 01 Jan 2023 23:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24632
IP address blocks: 193.227.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:fe:87:ef:6b:41:2e:ac:a1:64:0f:17:08:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9bbdaa00011f6c2f69518895fa023d32d5b7d9
Validity
Not Before: Jan 1 23:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2358368c45d84d23ccedee727d55f4cc10a29c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:ce:00:19:8c:30:fc:33:de:9f:7e:92:20:
88:41:e1:fc:43:c2:23:3b:6f:a1:82:4a:a8:a9:99:
d2:a1:e5:29:f0:1f:b9:fb:a4:27:42:61:a8:5a:00:
34:fd:49:e8:c4:4f:5b:35:45:bc:cc:ac:55:99:67:
bd:c7:ea:77:ab:ff:8c:19:bc:16:24:d8:b5:9e:a7:
57:dd:19:f0:1e:e4:98:5c:1d:fe:03:29:bd:28:eb:
90:21:0a:c0:f7:4b:6c:bf:96:0c:07:e6:d5:e5:34:
d8:14:7e:a1:9a:46:dc:a9:38:cd:c6:ca:41:fc:0e:
ec:44:0a:0a:d9:98:1f:e3:a1:36:75:ab:9e:b3:80:
ef:0b:00:19:6b:1d:1a:b7:83:16:35:91:24:bd:4b:
c3:6e:09:38:fd:bb:06:50:e8:90:3f:51:78:e9:d9:
ec:c6:a7:de:da:fd:cc:b5:98:bd:3c:e1:e5:26:e8:
5f:97:d6:3d:2a:7d:95:82:06:54:11:5b:f8:8e:30:
42:8f:a2:53:59:34:92:9b:df:a4:3f:f7:be:cc:49:
9f:43:f3:09:60:03:ea:41:7b:1e:74:3e:0d:59:12:
0a:04:03:ec:93:49:3e:7c:41:cc:bb:3e:7e:71:84:
e5:79:d3:32:92:9b:5d:ba:3c:8d:d1:9c:2f:70:d1:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:58:36:8C:45:D8:4D:23:CC:ED:EE:72:7D:55:F4:CC:10:A2:9C:64
X509v3 Authority Key Identifier:
keyid:9A:9B:BD:AA:00:01:1F:6C:2F:69:51:88:95:FA:02:3D:32:D5:B7:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpu9qgABH2wvaVGIlfoCPTLVt9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/I1g2jEXYTSPM7e5yfVX0zBCinGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/mpu9qgABH2wvaVGIlfoCPTLVt9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.254.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:83:a1:bf:91:46:69:fc:79:4e:fa:ee:ec:5e:9d:86:e0:1a:
e3:11:4b:a7:9d:3f:a6:4f:e0:1e:71:ab:f7:54:28:4a:2e:b9:
18:d6:e5:08:3f:12:e1:f6:bd:8c:f1:a7:29:c5:56:72:fd:6d:
0f:68:17:37:ab:14:01:1b:3a:05:d4:f7:f8:ab:21:6e:e0:3e:
f9:f7:40:ee:de:4f:00:13:56:a9:3a:e4:9a:1c:45:2f:7c:12:
62:68:ba:52:83:08:2e:4b:c8:f3:60:13:08:bd:4e:0d:2b:34:
e6:53:1d:c9:d3:03:9a:ae:53:68:ba:b0:07:6d:80:28:8d:98:
26:9d:09:2c:5f:18:ab:e7:fc:ea:e6:71:75:b2:45:77:26:ec:
cd:f9:c7:e6:04:eb:b6:b4:63:ca:ec:ba:72:fd:2c:e0:f6:e8:
82:94:3a:15:8e:91:21:e2:fb:64:b7:e4:31:35:4c:52:29:9c:
5c:37:c2:4a:cd:fb:59:70:5e:e7:6a:89:6f:25:e5:e0:7a:10:
2d:7b:56:0e:e4:a9:f7:15:74:c4:f9:9c:3d:47:88:48:6f:f8:
e9:8a:ab:31:51:92:1a:72:f6:49:92:17:0d:8f:48:7a:3f:d8:
49:de:b3:44:c6:f4:88:5f:1a:91:b4:82:40:33:94:69:38:3b:
75:25:19:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:10 2024 by rpki-client on console-fra.rpki-client.org