Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/ky1HUKye_0bbzTFaUV6AYPU_A7c.roa
File: ky1HUKye_0bbzTFaUV6AYPU_A7c.roa (raw, json)
Hash identifier: Fkv0cW3mpC4agAFWFh3tk82RtRFkXhwMyrx8O1745ts=
Subject key identifier: 93:2D:47:50:AC:9E:FF:46:DB:CD:31:5A:51:5E:80:60:F5:3F:03:B7
Certificate issuer: /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial: 01852C97D3BD9B3AA6666E9A35100FA91EA0
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/ky1HUKye_0bbzTFaUV6AYPU_A7c.roa
Signing time: Mon 19 Dec 2022 22:53:45 +0000
ROA not before: Mon 19 Dec 2022 22:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 193.169.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2c:97:d3:bd:9b:3a:a6:66:6e:9a:35:10:0f:a9:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Validity
Not Before: Dec 19 22:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=932d4750ac9eff46dbcd315a515e8060f53f03b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:3c:2e:f1:0e:01:f9:55:71:32:59:66:c7:
32:48:c2:77:c7:12:a8:88:1a:77:ce:38:90:61:9c:
e3:7c:2c:d3:be:c9:a9:58:e5:9f:38:65:9c:41:b8:
34:cd:a6:a2:d6:32:78:67:07:37:8d:4a:ce:4e:6c:
85:e7:73:aa:ae:e8:3f:d9:65:f9:f3:06:35:5a:64:
71:f4:dc:6c:8d:ac:59:c4:be:b3:a6:63:77:a9:77:
91:97:75:7b:a5:85:4d:6c:4c:45:95:a0:38:5a:01:
87:2d:56:86:b5:4c:61:93:69:1c:d0:99:33:11:6f:
cd:1e:d6:04:27:ab:a6:47:68:da:08:da:f2:a3:f5:
3e:88:27:ee:e9:6c:ad:aa:d8:72:89:39:95:7c:ca:
b7:0c:ef:65:e6:2c:46:0e:85:63:96:0b:d9:94:7c:
c8:9a:5b:66:22:f7:5b:73:71:7d:7e:60:98:ac:db:
df:f1:fa:70:c5:7d:58:45:c2:70:9f:32:7f:4e:34:
b9:c5:4b:5e:24:d5:73:ab:22:34:ed:f1:0b:e4:96:
20:48:83:e1:ea:8e:37:72:16:55:38:db:b5:82:ea:
f3:86:02:df:46:5b:3f:48:8d:20:06:29:7e:1d:e7:
d3:c4:d0:51:ab:27:3c:a8:99:a1:90:c8:32:e3:7e:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2D:47:50:AC:9E:FF:46:DB:CD:31:5A:51:5E:80:60:F5:3F:03:B7
X509v3 Authority Key Identifier:
keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/ky1HUKye_0bbzTFaUV6AYPU_A7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.251.0/24
Signature Algorithm: sha256WithRSAEncryption
94:66:52:90:66:49:5e:46:8a:4d:0d:a9:eb:7d:7f:fb:b5:2a:
63:7d:a7:3b:ce:bc:5c:5a:63:92:a0:17:35:2a:65:84:f4:25:
34:d0:52:87:49:98:ae:f0:ce:48:3e:eb:82:bf:6b:52:5a:bc:
6f:27:43:b0:e7:45:70:bb:53:88:52:62:fa:15:5f:88:eb:a9:
b8:75:99:cb:02:54:a6:35:68:7b:c1:db:fa:9f:a2:fc:73:ec:
66:da:06:c2:bf:6b:51:e2:8c:5f:52:fd:16:57:99:55:e1:f9:
a6:9b:2e:78:78:dd:45:af:7f:3b:b9:e2:dd:98:37:7e:a3:36:
eb:26:55:b3:4f:de:2d:3a:e7:e2:b5:36:b6:b3:2d:47:83:31:
91:8d:b6:29:30:9a:a5:9d:e3:37:ba:70:5d:96:4d:07:89:02:
c5:77:8a:c7:41:4d:7b:b6:a0:4d:df:90:2e:45:e2:2a:55:9a:
68:da:bd:bb:fb:06:1a:e2:e2:68:92:69:5a:62:93:87:67:2b:
07:43:9c:3b:b2:8b:1e:01:42:12:cf:fc:a7:4b:1f:3a:df:0c:
a4:40:4b:d6:17:db:65:5d:28:5f:d3:8e:f9:33:5c:6f:7b:78:
a0:1d:8f:04:8c:b7:99:60:37:65:0d:21:ed:d8:39:97:20:30:
d9:a6:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:38 2024 by rpki-client on console-fra.rpki-client.org