Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/R0q8Nvmu7tt7YA0N2vKPOf2YvsI.roa
File: R0q8Nvmu7tt7YA0N2vKPOf2YvsI.roa (raw, json)
Hash identifier: tq9OCqhsG81WwU+nAQ4V5dxwWRNRPF4wXqSUAbM5RPk=
Subject key identifier: 47:4A:BC:36:F9:AE:EE:DB:7B:60:0D:0D:DA:F2:8F:39:FD:98:BE:C2
Certificate issuer: /CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
Certificate serial: 01856E41C434BE3B4745E9582E33F7CC98D5
Authority key identifier: F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/R0q8Nvmu7tt7YA0N2vKPOf2YvsI.roa
Signing time: Sun 01 Jan 2023 16:54:41 +0000
ROA not before: Sun 01 Jan 2023 16:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43366
IP address blocks: 193.178.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:c4:34:be:3b:47:45:e9:58:2e:33:f7:cc:98:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
Validity
Not Before: Jan 1 16:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=474abc36f9aeeedb7b600d0ddaf28f39fd98bec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:05:25:02:11:68:64:27:e9:e9:0a:37:f6:
4d:a9:47:30:00:81:aa:35:bc:7f:38:9e:3b:ba:b4:
84:27:8a:41:61:87:d3:7f:a0:8b:de:49:2b:18:2c:
c1:b4:46:94:38:49:1b:2f:c8:9b:ff:d7:91:13:05:
d2:eb:dc:a7:64:99:43:11:bf:e7:62:0a:67:69:cb:
31:a6:f9:06:ef:77:a8:84:12:fe:b9:b4:98:0c:f7:
d1:1e:d0:c0:e6:31:4b:b1:0c:5a:18:f1:0b:b5:4d:
9c:a6:38:89:c5:9e:60:90:91:76:be:ea:7d:9b:8c:
83:07:de:7c:5c:59:e2:ce:32:c6:2d:1a:44:dc:ee:
2b:5e:bd:ea:d9:c5:e9:b0:42:2a:b6:ca:0c:20:97:
88:ca:ce:a4:7f:be:cf:c6:07:a1:64:9b:11:00:c9:
32:25:7c:65:b4:74:f9:d9:e5:30:ec:a2:97:98:46:
3f:17:15:2e:42:33:3e:14:c9:d6:18:03:c2:cc:ae:
31:e1:e2:f9:72:c4:68:1b:64:71:6c:a2:db:95:c1:
1e:38:1f:93:64:96:7e:bf:bb:b1:03:35:00:5d:43:
30:54:fe:ff:43:53:dd:f4:00:c3:63:1e:2f:53:36:
f3:03:76:4b:b9:ed:b5:c8:22:14:0b:f9:0c:8a:d1:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:BC:36:F9:AE:EE:DB:7B:60:0D:0D:DA:F2:8F:39:FD:98:BE:C2
X509v3 Authority Key Identifier:
keyid:F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/R0q8Nvmu7tt7YA0N2vKPOf2YvsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/1-WUpAejF4KZ84SEoSYDkWhfKCeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f1:68:cb:6d:71:76:4f:23:8c:d2:cb:21:a6:e0:96:de:a4:
23:9b:b2:b4:6d:1e:09:8b:2b:50:9e:b4:96:f3:c7:38:34:f1:
e8:2f:20:43:b6:a0:5a:eb:1d:62:1d:59:bf:fd:db:ac:ce:68:
ee:b5:9a:75:c3:6e:5a:75:4e:34:0b:ba:e4:e5:cb:ae:d3:db:
25:25:61:39:b8:95:0b:a6:2a:ac:32:27:d9:9e:de:cf:60:01:
44:6b:98:41:6f:b4:cd:e8:00:61:73:d6:4a:a1:52:28:17:e3:
59:0f:83:10:22:c5:ed:98:e6:86:8f:9b:ec:d3:f8:5e:80:e8:
e0:6a:e7:56:04:42:1e:8d:74:3a:ce:e1:bf:03:6b:e5:61:cd:
e1:38:fd:73:27:54:ae:fa:ef:20:1e:fd:6f:10:c8:15:93:1d:
d6:22:3b:8b:62:d9:a7:8c:f1:61:a1:da:9a:6b:6a:0f:86:92:
b6:37:b5:90:50:b3:b3:4d:79:6e:6b:56:a2:fb:3e:15:a9:9a:
2e:d7:81:54:5b:12:69:22:a8:3a:9b:f2:3e:c7:ec:9c:97:3e:
7d:2a:86:b0:f6:0a:3b:e8:1b:43:d8:f6:c1:33:0e:1d:af:f0:
ea:00:bc:86:59:fd:c1:66:ae:36:2f:cd:2e:33:77:b7:b4:ed:
59:7c:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:48 2024 by rpki-client on console-fra.rpki-client.org