Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/v-aP22gKkru2_OLDTUlb0BzoDPc.roa
File: v-aP22gKkru2_OLDTUlb0BzoDPc.roa (raw, json)
Hash identifier: 5a9Sp1MbSyf1rtruisqmS8Fk8FVz269hk5STcjI5km4=
Subject key identifier: BF:E6:8F:DB:68:0A:92:BB:B6:FC:E2:C3:4D:49:5B:D0:1C:E8:0C:F7
Certificate issuer: /CN=d3e788618de5843c630ef3ce628db05f35b0b1c4
Certificate serial: 060CBABA
Authority key identifier: D3:E7:88:61:8D:E5:84:3C:63:0E:F3:CE:62:8D:B0:5F:35:B0:B1:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-eIYY3lhDxjDvPOYo2wXzWwscQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/v-aP22gKkru2_OLDTUlb0BzoDPc.roa
Signing time: Thu 20 Jan 2022 15:08:10 +0000
ROA not before: Thu 20 Jan 2022 15:08:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43659
IP address blocks: 193.29.110.0/23 maxlen: 24
193.29.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101497530 (0x60cbaba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e788618de5843c630ef3ce628db05f35b0b1c4
Validity
Not Before: Jan 20 15:08:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe68fdb680a92bbb6fce2c34d495bd01ce80cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:37:64:ae:61:39:fb:ca:be:df:7c:21:ea:ec:
a4:59:10:a4:3a:0d:06:e1:f0:a2:ff:40:26:a9:d0:
67:25:60:2e:73:ab:aa:39:4b:7e:4b:66:03:d0:56:
2b:13:5e:57:5e:cb:bd:55:9d:22:42:6f:63:bf:1b:
d1:eb:d0:9e:a3:40:4b:26:4c:fb:7b:09:e4:a9:bc:
98:07:6e:bc:04:a2:0f:aa:06:10:74:3e:93:4e:8e:
c7:55:ee:2e:bb:86:b8:cf:d9:dc:98:d0:5d:e4:3b:
04:dd:76:a7:b8:be:73:88:4a:41:7b:26:40:ac:c3:
31:a6:73:d5:c1:ff:43:c0:92:5f:34:b8:84:92:20:
35:b6:98:a4:76:68:e2:bc:02:9a:fd:65:e0:11:b8:
a0:fc:c2:f0:b6:c7:93:71:d3:06:9c:42:ca:5b:35:
31:9d:a9:e3:a3:e3:d0:c3:7d:0b:5d:c0:7a:41:98:
09:81:e2:0e:67:d3:06:0c:7b:13:66:e3:0a:90:eb:
7e:60:c1:16:39:28:5b:7e:c8:e0:de:e0:11:0e:8e:
00:fa:56:02:3d:ef:5d:b2:33:53:7e:41:9e:c5:95:
42:05:e5:df:78:40:e5:a9:51:cd:38:2f:f8:92:58:
33:2b:07:13:f4:4e:29:09:47:c2:50:8a:f2:91:4b:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:8F:DB:68:0A:92:BB:B6:FC:E2:C3:4D:49:5B:D0:1C:E8:0C:F7
X509v3 Authority Key Identifier:
keyid:D3:E7:88:61:8D:E5:84:3C:63:0E:F3:CE:62:8D:B0:5F:35:B0:B1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-eIYY3lhDxjDvPOYo2wXzWwscQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/v-aP22gKkru2_OLDTUlb0BzoDPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/0-eIYY3lhDxjDvPOYo2wXzWwscQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.108.0/24
193.29.110.0/23
Signature Algorithm: sha256WithRSAEncryption
61:ca:69:2e:06:83:c0:86:42:01:f4:e2:f0:71:39:db:ba:31:
3b:bb:cd:df:c4:35:a2:bf:54:f5:8c:c9:91:a8:32:aa:e0:b9:
b6:ff:67:9c:90:a7:dc:49:3d:54:c7:e6:68:85:78:7c:d1:d2:
b8:e0:8b:ec:fc:b6:1a:f6:e2:e4:da:7a:ea:3a:4c:ac:43:28:
f6:13:09:ea:37:d3:ac:cf:27:e1:43:e2:68:f0:ac:c3:0b:85:
17:d3:ef:09:e9:1a:81:48:cc:6d:73:51:22:4b:78:13:5d:ba:
9d:23:e2:31:39:41:3d:11:d0:ad:3a:da:05:70:39:22:08:e9:
1b:c0:21:83:0f:7a:0a:ee:de:9f:d5:c9:35:8e:34:93:b9:45:
86:ff:75:36:74:fa:b8:6d:34:ea:b8:e5:10:a2:5f:1b:01:78:
1a:0e:99:da:36:06:a8:a5:80:10:06:ef:ae:39:bf:9d:8f:e5:
1e:c0:8a:d6:f1:c2:d5:8d:43:48:bf:7c:03:a0:20:a7:3b:93:
d9:fa:47:47:a5:f6:a7:1b:44:8d:1e:27:52:7f:e1:83:b9:6c:
c7:7c:ad:c1:33:44:80:f8:88:2d:75:08:83:c1:e7:1c:97:84:
97:d8:6d:b3:e8:cd:22:12:28:a2:77:ca:03:f4:34:50:77:ca:
16:fb:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-ams.rpki-client.org