Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/1-yLMKPQndr9jDrz5Bk3MiUsjoHI.roa
File: 1-yLMKPQndr9jDrz5Bk3MiUsjoHI.roa (raw, json)
Hash identifier: lQzV4gScbq0l94MPd9tGQRpjgZV3y7AGrhXVKG2Mqhc=
Subject key identifier: FB:22:CC:28:F4:27:76:BF:63:0E:BC:F9:06:4D:CC:89:4B:23:A0:72
Certificate issuer: /CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Certificate serial: 23A758
Authority key identifier: AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/1-yLMKPQndr9jDrz5Bk3MiUsjoHI.roa
Signing time: Sat 01 Jan 2022 03:55:42 +0000
ROA not before: Sat 01 Jan 2022 03:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 193.163.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336600 (0x23a758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Validity
Not Before: Jan 1 03:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb22cc28f42776bf630ebcf9064dcc894b23a072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:97:11:04:91:3a:34:35:50:61:e6:70:08:
98:27:6f:93:40:0b:9a:2d:8f:6b:32:e7:3a:ba:5b:
78:f3:75:f2:19:19:58:a5:4a:27:64:3b:9e:09:e8:
ec:bf:54:6b:8b:90:cb:39:d2:ae:ed:c7:74:4f:c5:
90:ab:8b:9f:d9:42:3d:58:e9:b8:48:85:11:d4:28:
eb:ef:65:e5:1d:7c:b6:ec:31:96:78:7f:cf:6f:0b:
0f:9c:a4:55:0a:ed:f7:bb:b2:ab:8f:7e:b6:49:0e:
eb:d8:a1:b7:5b:cb:7a:55:43:e9:ff:02:07:2a:37:
c7:52:9f:63:53:6b:69:2a:d4:0d:f9:02:be:9f:5a:
28:5a:0c:16:79:99:6b:fb:d4:7a:a4:d4:d7:1f:5a:
15:78:aa:13:56:09:77:68:38:4d:1c:9e:e4:03:2e:
d6:56:e6:c1:78:44:ef:7f:71:44:5f:4d:99:ce:d1:
d5:dc:42:35:6a:55:60:65:b8:0d:de:4d:7a:90:7c:
ce:3b:a3:ef:e0:c7:ed:4a:d5:a6:8d:92:b6:e6:91:
a9:13:f1:da:f9:e6:f4:37:39:95:81:7a:94:b8:e6:
6d:d1:44:50:d4:2d:89:c4:56:43:21:9d:a4:9d:4a:
04:14:58:69:b3:2f:d1:42:fb:15:57:4e:8d:68:d1:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:CC:28:F4:27:76:BF:63:0E:BC:F9:06:4D:CC:89:4B:23:A0:72
X509v3 Authority Key Identifier:
keyid:AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/1-yLMKPQndr9jDrz5Bk3MiUsjoHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/qyfU9itbqY36V9c9bdWJdZbqc-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.89.0/24
Signature Algorithm: sha256WithRSAEncryption
87:23:db:92:5c:8c:c0:3f:da:44:f5:2f:2c:40:2e:8a:45:e7:
fe:01:12:c1:f5:f8:de:ef:fc:4a:bc:ac:22:4c:7c:bc:d7:e5:
83:22:0c:98:2f:d6:14:7e:bf:43:cb:9e:d7:84:d6:c2:37:4f:
4c:c3:a9:9d:a0:65:1f:8b:bd:5b:bb:9a:73:d2:ae:c9:17:90:
11:ae:09:1c:8a:ed:0a:2f:f4:af:65:62:42:84:96:27:76:f9:
2c:b7:66:ed:a1:f5:39:50:a5:80:29:01:99:9e:e2:2f:89:cf:
a1:9d:a4:b2:3a:53:1c:ac:9c:75:7d:11:71:2d:d3:cf:12:0f:
53:d5:ca:d7:dd:0b:75:3b:48:fb:7f:30:cc:10:71:f6:62:09:
25:03:e7:d5:f7:01:7c:ce:7b:32:ee:53:02:8e:28:f0:80:12:
31:73:6e:99:db:bf:72:82:97:4a:7e:39:b6:9e:5d:04:6b:38:
72:ba:55:63:16:e1:e4:8f:f4:8d:7d:78:36:9b:7a:41:96:e4:
ce:d1:6c:74:64:57:05:7c:26:01:f8:72:97:ec:47:87:77:3e:
0b:ca:e9:7c:3d:2c:45:6b:ca:43:85:03:38:45:4b:b4:04:af:
9c:a5:b1:fd:09:a3:e0:ac:82:b5:a2:47:d1:df:2e:b8:20:28:
6d:6f:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org