Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9163a3-c3fc-4053-95e1-cff52866ea36/1/HOnpDBhQtlal2JNlcyoNsu1vEn0.roa
File: HOnpDBhQtlal2JNlcyoNsu1vEn0.roa (raw, json)
Hash identifier: /LEO8W8/f2bVePGUIHM7jPHR0A93wUmMH/VBLXfk244=
Subject key identifier: 1C:E9:E9:0C:18:50:B6:56:A5:D8:93:65:73:2A:0D:B2:ED:6F:12:7D
Certificate issuer: /CN=93b0bf0da13843d61bc0a82fd1e4e2eec4c05bb4
Certificate serial: 018572E8051451530242318E911EEB636276
Authority key identifier: 93:B0:BF:0D:A1:38:43:D6:1B:C0:A8:2F:D1:E4:E2:EE:C4:C0:5B:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7C_DaE4Q9YbwKgv0eTi7sTAW7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9163a3-c3fc-4053-95e1-cff52866ea36/1/HOnpDBhQtlal2JNlcyoNsu1vEn0.roa
Signing time: Mon 02 Jan 2023 14:34:46 +0000
ROA not before: Mon 02 Jan 2023 14:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210512
IP address blocks: 193.3.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:05:14:51:53:02:42:31:8e:91:1e:eb:63:62:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b0bf0da13843d61bc0a82fd1e4e2eec4c05bb4
Validity
Not Before: Jan 2 14:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ce9e90c1850b656a5d89365732a0db2ed6f127d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:ea:d7:7e:c6:0c:2f:e5:25:2e:6d:87:83:
16:5b:de:e1:51:6b:a5:25:22:12:94:46:2c:f3:16:
17:d3:c2:02:03:7b:7e:f1:44:96:35:37:7a:a0:6e:
08:79:90:8b:c3:17:b1:9c:03:db:03:ad:a6:5f:8e:
c2:e0:05:aa:d9:15:34:0b:f0:e6:8f:f7:e5:68:76:
0a:7b:a2:7e:06:15:5a:7e:02:54:83:c0:9f:32:3d:
81:78:fd:a5:06:62:e4:37:4c:48:3f:5d:c7:d7:77:
2e:b9:dc:e3:a7:da:91:93:64:f3:c6:3e:45:9f:e8:
8e:31:b5:b0:63:da:c2:23:74:a1:b9:30:6e:ee:25:
b9:29:44:82:45:88:a6:6b:f9:3b:01:f3:19:68:5c:
ae:ec:11:3a:50:77:19:9d:8b:6c:a5:d6:93:fa:ce:
ea:7b:e2:ec:4a:e0:d7:fd:77:b8:0b:64:26:75:a1:
fc:d1:fb:08:29:70:8d:de:53:3d:b1:9f:e6:5b:ce:
ae:ba:e8:d7:db:30:6b:e4:09:f8:9c:6b:bf:a9:87:
ab:0f:2f:f6:e6:7f:f9:c8:4b:b7:b5:84:96:18:36:
77:8b:a4:20:21:8c:69:4c:44:c8:6b:6d:2d:a3:9f:
32:d1:d1:84:be:e3:17:84:45:94:26:6c:c0:21:dd:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:E9:0C:18:50:B6:56:A5:D8:93:65:73:2A:0D:B2:ED:6F:12:7D
X509v3 Authority Key Identifier:
keyid:93:B0:BF:0D:A1:38:43:D6:1B:C0:A8:2F:D1:E4:E2:EE:C4:C0:5B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7C_DaE4Q9YbwKgv0eTi7sTAW7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9163a3-c3fc-4053-95e1-cff52866ea36/1/HOnpDBhQtlal2JNlcyoNsu1vEn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9163a3-c3fc-4053-95e1-cff52866ea36/1/k7C_DaE4Q9YbwKgv0eTi7sTAW7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.177.0/24
Signature Algorithm: sha256WithRSAEncryption
88:94:1c:60:c6:e9:fc:d9:3d:30:01:f4:42:16:63:34:6c:3d:
56:4c:b3:56:29:f0:f4:97:92:a5:05:2f:fe:ed:4a:b3:04:41:
d2:60:0b:49:45:cb:f2:b5:c6:29:88:7e:d8:85:a8:0e:84:cb:
cd:16:98:63:f4:65:6e:ec:8f:bc:4e:48:fc:c6:d9:d7:e9:28:
5e:e0:32:7a:da:51:e3:59:b2:fa:c6:89:10:78:41:89:3b:d8:
46:6d:3f:64:59:db:f6:aa:bb:e3:81:ff:55:77:ed:18:f3:f4:
89:3f:0b:a0:e2:a0:cb:86:7c:d0:20:23:ee:dc:3d:08:ac:f3:
57:4c:19:f4:56:bd:b3:13:3f:b0:46:ec:90:fd:f2:86:9a:dc:
52:0a:b9:9c:d8:7c:a6:23:41:29:a1:51:8a:db:c2:ba:57:f2:
62:c7:33:ff:36:11:94:27:4a:65:1b:7e:92:9d:76:b4:2b:1e:
0d:8a:37:7b:8d:a4:70:7c:41:58:03:5a:45:92:b6:bc:d2:2f:
e0:3b:2e:3d:e5:6a:85:34:df:0b:18:ea:5f:d8:87:f0:3a:cd:
3f:6c:da:19:ad:de:1b:ae:77:ed:56:51:27:d3:12:45:fd:01:
f2:81:8e:3a:24:83:0d:49:2c:63:c5:d5:2a:a6:64:a1:e7:a2:
0c:af:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:32 2024 by rpki-client on console-ams.rpki-client.org