Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/vU_MagyDU5BLHVUckq27uY_2CkI.roa
File: vU_MagyDU5BLHVUckq27uY_2CkI.roa (raw, json)
Hash identifier: HXnNMD/PHooOmACUzOBiczZjM5GE3GSp1edVb9dHOZw=
Subject key identifier: BD:4F:CC:6A:0C:83:53:90:4B:1D:55:1C:92:AD:BB:B9:8F:F6:0A:42
Certificate issuer: /CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Certificate serial: 01856FF980607B4F23C8F9CA54A1E74E4607
Authority key identifier: AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/vU_MagyDU5BLHVUckq27uY_2CkI.roa
Signing time: Mon 02 Jan 2023 00:55:00 +0000
ROA not before: Mon 02 Jan 2023 00:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 193.163.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:80:60:7b:4f:23:c8:f9:ca:54:a1:e7:4e:46:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27d4f62b5ba98dfa57d73d6dd5897596ea73e9
Validity
Not Before: Jan 2 00:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd4fcc6a0c8353904b1d551c92adbbb98ff60a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:32:df:c0:59:51:4a:39:10:fe:0b:dd:b9:
f7:60:f8:62:75:9e:3d:ac:46:ef:74:e6:0a:a1:51:
ea:1f:18:a8:6f:5b:33:c0:97:61:03:9a:08:d5:0b:
4a:7b:c5:36:fc:12:4b:a4:a3:59:26:0f:bf:ca:42:
f3:75:6f:a7:c5:87:72:74:da:d1:24:33:9a:55:a9:
c4:ac:df:0d:b5:91:4b:0b:d7:a8:a4:b2:5f:fd:3a:
83:2c:98:84:94:f4:ba:cb:95:9a:24:e0:fa:ce:59:
6a:8b:92:89:dd:f0:96:0c:35:7b:b7:3b:92:c7:fa:
cb:2d:0f:7b:2b:da:26:c7:2c:5b:88:9f:7d:c3:e9:
7b:df:2f:36:08:44:14:34:b0:09:f8:97:46:d9:71:
ba:e9:19:05:28:7d:cc:16:0f:d1:36:b4:b0:66:c8:
76:73:39:cf:1f:b6:46:a5:df:5f:f7:3d:1f:7b:89:
b7:e7:4a:8e:be:bc:26:c9:60:d6:b5:9a:88:cd:f3:
ed:da:92:5c:38:cc:57:40:33:e5:e2:07:8c:a7:9c:
21:89:94:17:60:4d:38:33:32:06:6b:8b:ba:f5:81:
0f:27:30:e8:9e:a8:e5:fb:23:2c:1d:64:42:12:25:
29:88:0b:2f:9f:32:7d:1d:b0:19:4a:d9:8f:bf:a7:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:CC:6A:0C:83:53:90:4B:1D:55:1C:92:AD:BB:B9:8F:F6:0A:42
X509v3 Authority Key Identifier:
keyid:AB:27:D4:F6:2B:5B:A9:8D:FA:57:D7:3D:6D:D5:89:75:96:EA:73:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyfU9itbqY36V9c9bdWJdZbqc-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/vU_MagyDU5BLHVUckq27uY_2CkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/ecd521-e7d3-4416-9f97-4deec0808d0c/1/qyfU9itbqY36V9c9bdWJdZbqc-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.89.0/24
Signature Algorithm: sha256WithRSAEncryption
09:82:dd:0a:88:2e:ee:ed:6c:87:a5:ca:80:97:d1:9d:f3:3e:
84:d3:3d:8b:ce:8f:84:70:9b:9f:dc:e0:7c:1d:63:47:25:7e:
e8:c3:9a:c3:13:b1:0b:a0:0b:34:80:90:fa:aa:ef:74:4d:55:
5a:94:d8:84:9f:e8:5f:80:c5:b6:46:8f:94:71:6b:72:c7:7c:
50:0d:ed:52:c3:65:82:f7:48:17:d7:d8:f3:8e:40:f0:f1:c5:
7f:cd:cb:e4:24:d9:7a:40:66:e3:bb:84:58:7e:48:06:5b:c3:
0a:b1:e3:15:71:fd:68:81:38:60:2c:aa:1d:38:aa:29:ee:fe:
0a:94:f1:26:43:38:1e:3e:00:cc:77:ef:25:d6:31:ca:a8:70:
6f:e4:6b:1b:51:c8:51:a6:ae:8b:8e:11:b3:f6:66:1d:00:a3:
3c:87:b3:a4:95:e2:e5:3b:ce:07:f7:05:2b:65:49:1f:20:c3:
a4:e7:9a:e9:4f:c8:5e:c5:fe:c2:ab:03:84:6f:52:32:51:fa:
50:e1:0a:94:71:04:f6:d0:e3:0b:2b:53:8f:f4:c0:e0:f0:9f:
92:71:18:d2:0f:5b:5a:7e:26:49:41:6d:6c:5e:51:52:33:d5:
fc:d7:fc:04:a2:a1:9c:ef:46:27:1d:0b:65:62:5b:53:ff:f7:
6e:c5:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:57 2024 by rpki-client on console-fra.rpki-client.org