Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/AnPVDkL7rf4Iv00t4jn_1Hu4kR8.roa
File: AnPVDkL7rf4Iv00t4jn_1Hu4kR8.roa (raw, json)
Hash identifier: 7gX2qu3/kgNyHw+NnmYysP1kGvsyQG0QxYf9aWe/fNA=
Subject key identifier: 02:73:D5:0E:42:FB:AD:FE:08:BF:4D:2D:E2:39:FF:D4:7B:B8:91:1F
Certificate issuer: /CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Certificate serial: 01856FF9813850E222BC894C12AFB96CE332
Authority key identifier: AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/AnPVDkL7rf4Iv00t4jn_1Hu4kR8.roa
Signing time: Mon 02 Jan 2023 00:55:00 +0000
ROA not before: Mon 02 Jan 2023 00:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 193.163.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:81:38:50:e2:22:bc:89:4c:12:af:b9:6c:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Validity
Not Before: Jan 2 00:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0273d50e42fbadfe08bf4d2de239ffd47bb8911f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:30:8e:13:be:cc:c9:57:1e:85:94:dd:8c:
3b:6e:8a:6c:71:ab:22:50:8c:05:ee:fd:7d:38:c6:
ff:dd:f1:b1:b4:5c:63:eb:aa:da:27:67:8c:a2:6b:
d1:d2:5c:13:1b:68:87:6e:5a:36:2d:4d:5f:92:98:
4b:52:a2:34:35:bf:84:68:ac:65:2d:19:3e:8b:00:
b5:50:bb:00:7d:7d:75:59:5a:d8:53:4e:68:86:c1:
c0:b0:00:1a:01:ee:db:49:8e:a6:30:53:03:96:fd:
f7:8f:c1:33:fc:6f:d0:bd:16:59:d7:26:1c:03:2f:
18:cf:07:9c:d2:f8:7b:81:f0:fc:30:c1:bc:75:d6:
cf:9f:42:15:b7:d0:38:b0:03:92:fa:2b:2c:9e:54:
ef:0c:6e:15:b7:68:3a:10:8b:32:51:48:20:32:00:
87:14:b7:74:46:01:68:23:08:41:14:ea:18:7d:fc:
f6:fa:f2:91:9a:1f:84:91:0d:46:86:de:22:24:64:
33:05:cc:94:11:f9:5a:03:ac:fa:26:17:48:af:d6:
83:9d:23:6d:00:90:b8:ea:cc:e5:d7:2b:e0:bd:d7:
39:c2:ec:03:21:fe:ce:c4:6b:c1:fd:e3:53:ac:3a:
34:63:86:12:c4:8e:5b:8a:c5:60:df:c6:36:59:18:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:D5:0E:42:FB:AD:FE:08:BF:4D:2D:E2:39:FF:D4:7B:B8:91:1F
X509v3 Authority Key Identifier:
keyid:AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/AnPVDkL7rf4Iv00t4jn_1Hu4kR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/qyfU9itbqY36V9c9bdWJdZbqc-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.89.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ef:c9:71:26:34:6e:e5:73:bd:dc:fb:e1:33:a1:03:97:7b:
e3:ec:c6:53:4c:ff:d7:59:2b:ae:2a:9d:30:d3:03:55:02:62:
0d:f7:aa:86:b8:4b:d5:8a:0f:42:77:5b:c2:46:eb:c9:b5:d2:
63:cd:91:78:2b:86:49:ec:05:98:9b:99:45:79:12:aa:fc:d6:
8a:fd:26:95:0d:a5:ce:85:74:b5:34:cf:70:9f:cb:0b:a6:a1:
68:e0:66:6f:41:81:a8:60:3a:3a:4e:d7:de:d9:29:0c:b1:ad:
c9:e0:a2:a8:bc:1c:53:6d:d0:9e:8c:ad:4d:48:0c:83:86:f1:
bc:1c:b5:43:af:a8:e5:4f:db:b7:f8:7d:ac:38:5c:82:c9:1a:
b1:19:69:72:08:f5:f2:39:ff:40:2c:3f:b1:94:93:f5:a3:cd:
4a:34:93:79:97:15:a2:cf:69:88:e3:2b:db:b0:44:03:16:d4:
8b:23:18:f9:f6:87:cf:15:2d:31:47:82:8e:dc:10:9a:83:c8:
92:cb:8f:66:f3:af:9e:62:6d:02:68:e2:e5:51:bc:28:b6:86:
35:a7:65:95:cd:55:2f:ba:f7:70:f7:18:e1:ba:25:ab:c8:8c:
7f:c4:0c:3a:52:ca:42:f7:e4:ff:75:4b:1b:6d:cd:65:eb:e3:
95:d9:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org