Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/m9C8XoFJweb1PUnonyNYSn2bZ9s.roa
File: m9C8XoFJweb1PUnonyNYSn2bZ9s.roa (raw, json)
Hash identifier: Z1VddP8gTCGFLSocKyzqlT7GjZMRXLT9jiEk57/Nm/g=
Subject key identifier: 9B:D0:BC:5E:81:49:C1:E6:F5:3D:49:E8:9F:23:58:4A:7D:9B:67:DB
Certificate issuer: /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial: 01856D53DC7D641F563EAE3A88F7EE88A416
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/m9C8XoFJweb1PUnonyNYSn2bZ9s.roa
Signing time: Sun 01 Jan 2023 12:34:50 +0000
ROA not before: Sun 01 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 193.169.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:dc:7d:64:1f:56:3e:ae:3a:88:f7:ee:88:a4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Validity
Not Before: Jan 1 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bd0bc5e8149c1e6f53d49e89f23584a7d9b67db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:f3:a9:58:e4:eb:6d:32:f8:44:82:a6:02:
36:21:b9:46:29:c7:b1:1b:70:88:95:b3:0f:32:d3:
5a:4a:f6:5d:10:4b:df:64:4a:76:5b:8d:25:e8:cb:
9f:8c:bc:d6:74:9d:2f:3a:5f:b3:bf:32:62:98:fb:
78:a4:78:46:82:ee:60:2e:9e:51:67:7b:64:3a:09:
15:77:01:32:02:27:64:24:11:e6:0d:26:75:f3:02:
c4:cc:20:45:89:3f:2c:1c:82:b3:77:da:f5:46:79:
c5:74:44:05:83:bd:f1:e8:cc:26:03:6e:3b:cd:f8:
8c:2d:b3:c6:a3:5a:43:35:8a:bb:78:53:ac:19:1c:
da:08:3c:bb:d4:34:f9:2b:a1:93:9f:12:71:a6:16:
4c:63:9d:71:f6:e7:4b:21:e1:24:b7:d7:8a:11:7e:
73:68:1b:85:49:2b:cb:d7:73:06:f0:5a:2c:7a:2f:
87:ee:98:75:7c:03:69:99:50:ed:64:c0:d1:fd:86:
8d:41:d6:63:90:b6:bf:6e:a5:7f:42:6b:11:96:40:
0b:ba:55:46:94:32:5d:ae:4d:f9:77:82:c1:d0:74:
58:eb:ec:90:26:68:ad:2c:58:3a:8b:39:6b:2e:67:
ee:f3:86:17:1b:c3:43:3d:97:fa:a4:f0:3f:d2:e0:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D0:BC:5E:81:49:C1:E6:F5:3D:49:E8:9F:23:58:4A:7D:9B:67:DB
X509v3 Authority Key Identifier:
keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/m9C8XoFJweb1PUnonyNYSn2bZ9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:20:6e:f2:60:bd:7e:42:36:d5:3a:40:d8:83:2a:82:97:d9:
65:c4:04:95:3e:65:30:02:61:4b:ae:91:d9:22:4c:17:9f:5c:
2e:7f:5b:00:25:5d:01:6f:1d:5b:a5:34:1c:f2:e4:5f:0a:b9:
ec:df:a7:85:19:d3:88:74:0f:82:25:69:ec:ea:43:b8:6b:70:
b1:27:58:d2:81:0f:ba:f8:fd:c2:61:b5:5d:76:b9:82:19:38:
01:39:de:e3:ae:0f:8f:75:96:9f:ab:96:09:bc:3a:23:04:fa:
75:bc:8b:1e:c9:bd:74:e9:dc:83:51:fe:c1:31:6d:a3:05:d6:
59:cb:1d:ac:04:0e:8c:4a:11:04:11:d8:4c:76:a6:8e:00:18:
41:65:cb:66:c3:a0:a1:15:8b:36:51:2f:11:f4:91:11:65:b3:
31:7c:88:77:63:62:86:a2:00:98:4a:98:ff:4c:3c:c4:e9:ad:
1f:2f:e3:f5:fc:65:68:0e:6d:63:ff:52:9e:18:29:52:7e:be:
8c:a4:41:97:62:d3:de:6f:63:a7:83:fc:61:d9:1e:3e:a7:17:
09:46:8a:8e:8b:2b:83:05:9f:df:43:4a:fd:ed:d5:a2:36:83:
47:24:e9:37:62:f4:eb:46:c8:ef:df:53:5f:0c:73:7e:65:21:
7d:9c:99:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org