Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/rj923Z00lHPU5XCxsZG4jNje078.roa
File: rj923Z00lHPU5XCxsZG4jNje078.roa (raw, json)
Hash identifier: 7vi1jnhl9a4xAM46TZ9LvGwCkmM8iShwnF8o1I1O3aU=
Subject key identifier: AE:3F:76:DD:9D:34:94:73:D4:E5:70:B1:B1:91:B8:8C:D8:DE:D3:BF
Certificate issuer: /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial: 081FF284
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/rj923Z00lHPU5XCxsZG4jNje078.roa
Signing time: Sat 01 Jan 2022 15:58:36 +0000
ROA not before: Sat 01 Jan 2022 15:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201624
IP address blocks: 193.238.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136311428 (0x81ff284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
Validity
Not Before: Jan 1 15:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae3f76dd9d349473d4e570b1b191b88cd8ded3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:f2:56:9a:27:ca:ff:06:63:1b:07:de:7d:
2d:2d:0a:59:14:77:2c:1f:10:c5:9d:59:14:db:ab:
98:b4:97:b5:9c:5b:15:38:58:4f:b3:6b:4f:3c:80:
52:81:3d:d9:b7:50:ac:18:d2:31:60:fc:58:cf:bb:
eb:df:6c:2a:8e:13:5f:ab:4f:66:9a:c7:00:47:0b:
e5:36:b3:d8:06:06:7a:d2:24:28:5c:79:09:c2:69:
c7:16:db:cb:96:60:b3:1a:9f:f4:83:55:f5:ba:fb:
c8:a7:31:19:a4:f1:69:30:25:c7:dc:fa:7b:98:41:
ad:27:b1:5d:6b:dc:d2:9b:bc:fb:a6:2f:f1:49:4d:
4e:aa:1e:e2:17:f5:d9:01:4d:a7:58:1c:9e:ed:5b:
4b:a0:d0:a4:7c:dd:f9:b5:76:df:d8:e6:2e:35:52:
31:c1:ea:ec:3a:7f:79:6e:63:bf:a8:a6:e8:19:7b:
fd:99:ad:b3:e2:e0:4e:e5:94:72:d9:17:e0:5e:81:
5c:1c:5d:23:5d:1e:a6:54:d1:c9:36:00:77:f1:7f:
9f:57:00:cb:f7:13:78:eb:e8:de:e8:c7:a5:63:6b:
99:86:a9:03:8a:15:c9:9e:a1:1d:50:0c:e7:9f:4d:
77:0e:e0:1a:bd:ac:d5:09:76:1d:3b:80:96:d8:82:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:76:DD:9D:34:94:73:D4:E5:70:B1:B1:91:B8:8C:D8:DE:D3:BF
X509v3 Authority Key Identifier:
keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/rj923Z00lHPU5XCxsZG4jNje078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.44.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ce:1d:98:16:c3:30:76:b8:09:b4:e9:2c:05:8d:5a:d3:1b:
ee:4c:e3:9f:52:3c:52:29:0b:03:99:66:39:b7:c8:63:84:d7:
fa:9f:f0:0c:23:0e:1f:c6:7d:ff:05:24:3c:f0:9a:f0:cf:ae:
d4:89:91:87:a0:49:79:ae:a5:8c:f5:36:4c:92:13:4a:df:ba:
f1:d6:be:91:1c:e1:83:a0:e1:4b:c7:15:de:ed:a6:0f:f6:88:
e6:44:40:98:26:d6:7a:94:20:df:13:7d:e1:f3:88:fd:1c:0a:
4c:af:bd:8b:d8:31:27:a7:4c:e8:32:bb:f3:e6:f3:f2:4f:30:
91:c7:73:c2:7e:56:41:db:9e:8a:b3:8a:bb:60:d1:2e:8c:08:
db:8d:4f:e8:a1:09:c1:41:b3:0e:23:be:c6:3b:fa:4d:92:3c:
cd:14:9d:3a:17:90:ad:eb:2f:84:a1:ab:fc:57:09:23:84:cc:
ab:8d:bd:d9:11:2e:ba:a6:78:08:87:a1:4a:32:a0:fe:4a:a8:
79:df:ce:fb:f2:0e:e1:ea:4b:3a:3a:e3:ef:5f:66:20:ca:15:
91:3b:02:36:7c:2a:8f:b9:23:3c:46:fa:60:a0:96:98:bc:57:
76:31:93:6a:41:ae:34:bd:4c:22:b5:ac:a7:95:1d:a1:ea:5f:
8a:25:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org