Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/_ImqgS9dRR0T2cnopgCjiwAdv-U.roa
File: _ImqgS9dRR0T2cnopgCjiwAdv-U.roa (raw, json)
Hash identifier: r5yVMw3cL5C2mH8QhMHB+QDj1IyNSvsO7HI+tJOQAok=
Subject key identifier: FC:89:AA:81:2F:5D:45:1D:13:D9:C9:E8:A6:00:A3:8B:00:1D:BF:E5
Certificate issuer: /CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
Certificate serial: 010BEB17
Authority key identifier: F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/_ImqgS9dRR0T2cnopgCjiwAdv-U.roa
Signing time: Thu 20 Jan 2022 11:22:59 +0000
ROA not before: Thu 20 Jan 2022 11:22:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.25.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17558295 (0x10beb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
Validity
Not Before: Jan 20 11:22:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc89aa812f5d451d13d9c9e8a600a38b001dbfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:98:57:d8:df:b3:ff:8f:4d:d6:7f:b3:00:
6e:c6:31:72:e6:ee:ba:68:5d:28:96:89:a3:13:35:
b8:49:20:e2:51:ad:87:1b:bc:47:cf:17:e5:f3:01:
3e:ab:9b:bf:68:1b:fc:9b:4e:74:72:b9:86:6f:5a:
81:cc:7f:0f:7b:69:f2:99:11:c7:d4:33:0b:8d:e4:
f1:79:25:63:6d:81:3a:36:3e:f9:d7:dc:df:9b:05:
dc:9f:ed:c8:23:56:8d:72:6e:53:e2:1f:4e:cb:46:
68:6d:9c:d3:3d:b0:b3:c2:36:58:23:9c:eb:d0:22:
eb:5e:e0:87:57:ec:1d:3b:85:b8:00:d8:66:35:43:
cf:d2:96:b3:17:a0:51:dd:0b:db:6a:5f:af:b2:7d:
1e:17:3c:c1:da:fa:cd:6f:05:76:7e:36:c4:cd:e3:
e8:b1:05:a6:8b:b6:b5:a3:d5:93:19:b8:84:91:84:
d0:47:66:b6:8d:04:90:da:99:39:f3:93:df:14:04:
22:ec:b1:e5:63:0a:1b:53:08:5d:31:e7:d4:18:e7:
0e:f6:16:f1:c9:d9:da:ec:8f:a6:ca:a3:cc:47:79:
9e:c8:36:2e:09:7e:73:00:c2:fd:e8:b3:c5:da:d1:
ab:05:54:dc:4c:1c:d6:41:5c:bc:66:e7:7c:50:66:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:AA:81:2F:5D:45:1D:13:D9:C9:E8:A6:00:A3:8B:00:1D:BF:E5
X509v3 Authority Key Identifier:
keyid:F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/_ImqgS9dRR0T2cnopgCjiwAdv-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/9CeuFzuErzmhDrvQfdY8LVzo_cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.207.0/24
Signature Algorithm: sha256WithRSAEncryption
75:66:a4:fa:24:7e:48:03:21:7d:74:ad:b8:e9:06:b3:f8:d1:
51:e9:50:bd:ab:4d:0b:2b:82:77:c5:f2:41:81:e1:81:3a:ea:
1b:4e:8f:37:ce:52:b7:33:6d:14:83:a3:7e:29:1b:bd:67:4c:
d7:44:23:5c:c7:84:69:e6:bd:6f:d7:2a:a0:6a:a3:79:67:c9:
02:17:25:57:72:d6:ad:e2:fc:38:4f:d6:46:bb:57:1c:dd:19:
4d:63:be:c9:1f:be:28:64:9b:8f:2d:40:e4:a1:be:9c:6e:d4:
03:ac:6b:ec:85:30:ac:b3:25:b6:85:7e:9d:c2:e4:d6:66:87:
1e:03:03:8e:df:0e:65:ce:f6:a4:3e:75:30:cb:39:12:a5:99:
af:17:89:fc:dd:71:e0:90:8d:ea:83:a4:66:e4:6d:4b:45:2c:
b6:4b:40:8b:a1:f6:93:06:87:0e:70:72:ff:6c:45:db:b5:fe:
1f:5b:3e:51:61:08:06:79:6a:91:8e:ee:0e:90:34:04:84:7b:
e0:16:f8:25:b9:54:a6:d0:bf:8e:a2:b9:64:15:90:97:9f:6f:
59:a1:c2:2e:43:1e:b8:22:42:15:ba:d7:bb:41:f6:24:38:75:
8d:f5:2b:e5:58:ea:70:18:fa:9a:b3:f9:fb:0d:e5:a5:8a:d6:
bf:fe:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-ams.rpki-client.org