Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/P3pBm-8arCN7FbGC_mWQctbt034.roa
File: P3pBm-8arCN7FbGC_mWQctbt034.roa (raw, json)
Hash identifier: beYXtn2RyM0CKxftHCEwYOcdtH0KqA0vrVXev8b1d74=
Subject key identifier: 3F:7A:41:9B:EF:1A:AC:23:7B:15:B1:82:FE:65:90:72:D6:ED:D3:7E
Certificate issuer: /CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Certificate serial: 01856FF97FA2A8D046E7B0B7513BCC48C5EF
Authority key identifier: AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/P3pBm-8arCN7FbGC_mWQctbt034.roa
Signing time: Mon 02 Jan 2023 00:55:00 +0000
ROA not before: Mon 02 Jan 2023 00:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.163.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7f:a2:a8:d0:46:e7:b0:b7:51:3b:cc:48:c5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Validity
Not Before: Jan 2 00:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f7a419bef1aac237b15b182fe659072d6edd37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:ad:32:f0:a2:0c:a7:ee:a1:90:a3:fb:5b:
65:63:3c:2d:d4:f7:6b:27:36:17:31:8a:64:f8:f1:
4f:1f:97:e4:d4:bf:f5:d0:e4:b2:1a:bb:02:6f:8a:
28:70:85:2b:1b:35:91:b2:db:fc:81:64:4f:ee:97:
62:66:6d:bf:cd:98:a5:75:2b:47:f9:06:89:e9:91:
f0:1d:40:7c:8f:64:f6:92:04:eb:47:c2:a3:b5:78:
8a:a7:34:99:34:05:b4:77:c6:da:21:2b:1e:59:36:
74:4e:89:74:f5:bc:fa:3c:57:69:13:e8:49:de:d7:
13:eb:7f:16:aa:69:2f:04:b7:f0:e8:66:41:63:3d:
88:84:0c:d8:1b:3c:d2:5f:24:09:62:b1:f4:62:3f:
f2:5f:46:bb:1f:ea:c9:81:c3:d8:6b:d3:6b:83:ab:
03:2f:64:59:39:e4:41:2f:73:ef:3a:2c:86:a6:7b:
e5:71:08:06:c0:3c:b5:6c:f4:25:e8:82:71:e0:c2:
1e:91:d6:cf:e6:e0:a8:1d:bf:14:69:94:1d:70:f2:
42:c2:9f:a1:30:46:a8:9b:b5:90:bd:3d:c3:d0:4b:
d9:c4:9c:f6:a6:9d:67:c1:08:59:b5:47:85:8b:fa:
9e:b8:43:4e:0e:6b:65:63:22:18:9d:e8:6c:0e:d7:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:41:9B:EF:1A:AC:23:7B:15:B1:82:FE:65:90:72:D6:ED:D3:7E
X509v3 Authority Key Identifier:
keyid:AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/P3pBm-8arCN7FbGC_mWQctbt034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/qyfU9itbqY36V9c9bdWJdZbqc-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:51:08:e9:91:03:d2:b8:5d:54:d4:e4:8f:08:fe:53:0c:f4:
35:f8:f7:1b:29:31:d4:c0:4d:38:59:c5:33:72:cc:e1:84:b1:
24:6d:74:2d:fc:9e:7f:54:a1:43:be:ab:2b:f7:2d:95:20:80:
bb:d2:e0:73:8f:3d:0e:84:13:37:b0:1d:3d:c2:ee:b7:63:dd:
91:bb:76:fd:dd:4a:ec:75:90:3a:d9:da:dc:da:92:85:07:50:
8e:00:d4:85:c8:6d:dd:91:1d:51:df:0d:35:3f:4e:a8:7a:59:
95:f5:a9:c2:1f:84:92:0e:c4:58:39:9d:ab:2b:13:12:ae:ea:
02:89:ba:ce:d0:3a:18:f5:0d:18:11:6e:0c:7c:33:11:65:84:
a8:ef:7c:4e:d0:ef:9c:72:83:e7:26:8c:ef:3e:e4:64:74:d4:
41:96:9a:49:b1:17:d4:1e:a8:ff:b9:48:de:a9:0b:ae:2f:37:
5d:46:e5:b4:c1:bd:f6:82:f3:ff:81:4b:d0:51:80:fa:d4:7a:
e1:05:a0:be:d2:dc:17:5a:db:0b:91:ce:d3:92:4a:a0:26:8c:
c1:69:00:a0:2e:5f:c6:56:6d:24:ed:d3:e7:01:72:f5:99:4f:
65:79:a5:fd:f1:47:3d:a1:da:62:93:69:84:2f:71:80:60:26:
9e:53:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org