Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/5Lw-ZNXFP3R-MYrowmP0l0VEBKE.roa
File: 5Lw-ZNXFP3R-MYrowmP0l0VEBKE.roa (raw, json)
Hash identifier: WwH84YYRVNJOGq1wqfrGbqRw42GQkPKUzrz4rKtZGoo=
Subject key identifier: E4:BC:3E:64:D5:C5:3F:74:7E:31:8A:E8:C2:63:F4:97:45:44:04:A1
Certificate issuer: /CN=7e691f9c0db983bf66751f099047781b573a36eb
Certificate serial: 02E499F2
Authority key identifier: 7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmkfnA25g79mdR8JkEd4G1c6Nus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/5Lw-ZNXFP3R-MYrowmP0l0VEBKE.roa
Signing time: Sat 01 Jan 2022 08:55:25 +0000
ROA not before: Sat 01 Jan 2022 08:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.3.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48536050 (0x2e499f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e691f9c0db983bf66751f099047781b573a36eb
Validity
Not Before: Jan 1 08:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4bc3e64d5c53f747e318ae8c263f497454404a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:9a:1c:b9:e7:81:77:4e:2b:97:d6:14:61:
7a:2d:0c:1e:66:1b:41:33:22:18:4f:c1:37:3f:46:
65:20:b0:e8:5e:f6:eb:42:5a:f8:63:04:6a:19:d6:
3c:4c:a2:58:87:5c:c8:08:31:b8:13:d9:61:4a:e0:
46:5c:c0:3f:27:88:c2:f3:af:ed:ef:30:24:a2:37:
ad:a9:29:1e:d6:a2:8e:31:a8:62:03:90:71:d5:d9:
72:42:fd:7c:b0:32:06:65:86:d4:a6:9b:26:99:3e:
25:9c:8f:c0:95:95:63:16:20:cb:3f:a7:75:58:99:
50:1a:66:b4:bd:9f:8d:ed:95:de:db:98:55:e1:c2:
28:43:cf:bf:fb:76:60:32:34:f4:ca:a5:c5:ed:4d:
68:f3:bf:d7:80:0e:63:f3:f9:ee:89:86:8a:74:78:
80:8b:61:95:dd:eb:52:17:a0:63:65:c6:15:de:18:
03:c4:f1:5b:b3:96:1a:25:aa:5f:83:d1:be:e3:fa:
7c:d2:e1:60:5b:2f:4e:62:ef:ec:12:f4:e8:c2:be:
47:b5:46:3a:86:e4:42:26:5e:54:b3:b6:a6:dd:ef:
a4:77:4d:9e:bc:c7:5c:a1:55:aa:f3:02:10:11:28:
5c:31:43:b3:77:b9:d6:4c:db:16:5f:e0:ba:bd:2b:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BC:3E:64:D5:C5:3F:74:7E:31:8A:E8:C2:63:F4:97:45:44:04:A1
X509v3 Authority Key Identifier:
keyid:7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmkfnA25g79mdR8JkEd4G1c6Nus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/5Lw-ZNXFP3R-MYrowmP0l0VEBKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/fmkfnA25g79mdR8JkEd4G1c6Nus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.28.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6f:ce:f5:65:b2:a4:19:2c:59:74:ac:13:1a:69:6a:70:4c:
3b:20:35:93:7e:b6:4c:2f:a1:ae:cf:c2:a8:7d:9b:9f:c0:fa:
dd:71:dc:1e:bc:78:9c:3f:4b:df:20:9e:7f:c5:05:68:fd:fa:
c5:fc:e4:47:a2:48:47:30:42:19:d7:9a:15:0e:39:ab:87:16:
07:39:79:25:ff:54:4a:4e:5a:b9:0a:bf:3a:53:92:c9:51:b7:
fa:2f:83:aa:75:30:f8:aa:9c:4c:b0:9d:33:84:be:83:59:11:
9a:aa:d0:03:27:f8:20:ec:3f:2f:1b:ec:bb:5b:b5:7c:66:ea:
f3:1e:b0:34:09:b6:07:28:00:f4:58:47:95:29:ad:88:a7:8f:
d4:16:46:74:da:e3:89:cb:1f:23:ba:05:f8:3e:1c:d9:5b:72:
dc:a0:a1:cd:56:96:0d:4d:d4:f1:ce:a8:be:6b:4a:f1:ef:45:
f4:4c:18:c9:6a:c8:e9:ea:5c:33:2b:d3:6c:28:6d:f2:26:23:
43:7d:aa:90:79:0e:98:b0:02:43:d7:18:28:2c:ab:ec:e3:57:
1f:7e:9b:85:4b:53:b4:e1:25:70:ce:23:b2:09:e5:84:da:d3:
bc:6d:fd:5f:bd:84:9f:1e:57:1e:3a:7a:73:00:e5:f9:b1:f2:
bf:98:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org