Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/X2NqJTo45LlGyVw1FviqeU-TkqI.roa
File: X2NqJTo45LlGyVw1FviqeU-TkqI.roa (raw, json)
Hash identifier: gyDFS2IZ8lQMKzCT6E6D230HwajRy7GJT8JFMIpYKnE=
Subject key identifier: 5F:63:6A:25:3A:38:E4:B9:46:C9:5C:35:16:F8:AA:79:4F:93:92:A2
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F7141FEEC3367C01D24036EDC84B
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/X2NqJTo45LlGyVw1FviqeU-TkqI.roa
Signing time: Thu 15 Aug 2024 09:35:00 +0000
ROA not before: Thu 15 Aug 2024 09:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6688
IP address blocks: 193.41.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f7:14:1f:ee:c3:36:7c:01:d2:40:36:ed:c8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f636a253a38e4b946c95c3516f8aa794f9392a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:bf:a2:24:f5:de:9f:31:81:51:ff:9e:87:
e8:b1:c8:2b:d4:43:96:d2:82:52:38:b5:e9:28:72:
89:9f:82:6e:a5:18:a8:4c:0b:d9:84:30:cf:08:f4:
4b:b2:37:e9:a5:01:73:04:12:31:68:2f:f1:41:81:
d9:3e:05:b3:ee:b5:6d:63:01:14:69:70:03:b5:ab:
8f:c7:f7:3b:c9:a1:eb:6a:95:e5:7b:c6:3a:e3:02:
0e:ff:4a:34:43:e7:71:3a:3d:4f:f2:9d:24:79:af:
a5:81:0a:0d:83:a6:cb:e4:ad:a6:e8:98:06:56:8c:
d1:de:bf:2d:c4:e9:81:62:2a:50:e0:e1:fb:11:3a:
1c:a5:8a:c8:3a:3f:b3:fe:b3:06:68:60:6f:5e:92:
c9:b8:8b:b7:20:73:e9:1f:3c:84:d7:d0:a3:55:f0:
05:63:ed:a4:10:76:d8:37:45:f6:d4:f1:35:85:f4:
88:de:cc:28:64:ff:ca:41:a6:0b:d0:f6:d2:77:09:
84:94:ca:88:cf:5e:76:64:c1:0c:25:4b:54:8d:7a:
e6:a5:7c:3a:36:0a:1d:78:7b:a2:f0:3e:e4:37:ea:
04:cc:0a:3c:5e:d6:ab:eb:9f:02:60:f4:f5:59:07:
e8:c9:20:a5:23:4a:d9:98:eb:ec:60:88:ac:c6:d8:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:6A:25:3A:38:E4:B9:46:C9:5C:35:16:F8:AA:79:4F:93:92:A2
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/X2NqJTo45LlGyVw1FviqeU-TkqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a6:cb:e7:d1:91:23:6e:90:ca:4e:53:62:fe:ad:f8:c7:a9:
bd:a6:65:01:e3:dd:09:60:e8:88:74:0f:86:ea:88:6f:33:ee:
68:1e:83:6a:14:42:e0:ce:8b:06:e8:44:98:04:0d:e4:f0:de:
ba:26:32:88:88:b9:0f:95:ce:ea:9b:7e:8a:bc:fd:5e:45:ee:
69:b1:1d:17:e0:a4:55:d7:37:18:8a:14:5f:34:76:15:11:23:
03:96:0d:ad:83:05:32:ef:68:9c:9e:bf:73:f1:9e:77:e2:e6:
3c:c3:ad:a2:e6:3e:3d:7e:06:5c:5d:be:0c:09:35:94:42:ef:
93:57:32:4c:43:69:2b:1d:73:6d:b3:20:76:86:5b:d0:92:60:
2c:78:5f:f6:c9:9f:03:00:0b:38:3d:3c:42:a7:6c:98:fb:7e:
0c:13:1a:91:e6:1a:16:d2:fa:01:16:0a:53:9f:a9:5e:01:4f:
c9:e9:9c:db:5b:c7:50:66:62:42:cf:d4:f8:79:94:7f:9e:f7:
96:bb:53:8a:d3:c8:9f:94:88:71:a2:77:67:ce:c5:58:7e:22:
ad:ac:76:d4:33:c9:b1:16:e1:64:ee:45:60:2c:85:e2:30:3e:
e0:e8:56:25:ff:98:b8:d0:3d:5b:c6:b9:1b:5d:89:32:56:6d:
da:9d:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org