Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/JpKWguknM-D5dRmQiYPwqeB3mXI.roa
File: JpKWguknM-D5dRmQiYPwqeB3mXI.roa (raw, json)
Hash identifier: hHDm5dlwS1S7nC7jXxzcgtOXbI8bSJRgdaPtv/u/Fao=
Subject key identifier: 26:92:96:82:E9:27:33:E0:F9:75:19:90:89:83:F0:A9:E0:77:99:72
Certificate issuer: /CN=7e691f9c0db983bf66751f099047781b573a36eb
Certificate serial: 01856BDCB06625BB7AF13F1AB4466958F4B3
Authority key identifier: 7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmkfnA25g79mdR8JkEd4G1c6Nus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/JpKWguknM-D5dRmQiYPwqeB3mXI.roa
Signing time: Sun 01 Jan 2023 05:45:03 +0000
ROA not before: Sun 01 Jan 2023 05:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.3.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b0:66:25:bb:7a:f1:3f:1a:b4:46:69:58:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e691f9c0db983bf66751f099047781b573a36eb
Validity
Not Before: Jan 1 05:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26929682e92733e0f97519908983f0a9e0779972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:8d:f0:14:23:0c:be:98:3c:ec:a5:72:75:
95:97:90:52:f1:1d:d4:e9:f5:e0:7b:4c:92:9c:1c:
96:fe:02:d6:50:8d:49:e3:d7:da:c7:d8:95:9d:ce:
1c:88:60:47:33:17:4e:42:88:c1:75:63:f4:a3:cd:
32:87:36:ac:50:b9:ba:f7:8b:bd:00:db:18:83:ea:
fd:59:d4:7b:12:9d:3d:5e:f7:e7:0d:16:99:82:57:
de:4d:f1:b4:63:51:19:11:c3:53:a0:be:39:c2:c9:
be:a0:4a:e3:f5:c9:ce:d0:94:f0:a0:00:ac:5f:4c:
6b:34:e8:da:9d:c6:1d:00:c8:79:cb:01:9d:0b:ac:
78:1b:69:83:74:fe:7d:16:2c:75:82:8b:0c:38:7d:
40:91:ff:b9:86:2a:c0:3f:37:f3:56:c9:e1:0f:0d:
ab:77:aa:e1:97:33:30:00:67:9f:7f:7b:54:8c:8d:
c3:b6:cd:5a:fc:aa:1f:c8:15:f8:6b:56:7d:d5:9e:
3e:92:9a:44:6e:19:04:fc:d4:ed:6e:80:07:46:50:
f6:ea:73:be:6d:d9:5e:7a:ac:90:d7:5c:22:89:30:
a8:17:5d:10:a0:c3:b2:01:9e:34:ba:6c:69:01:7e:
63:79:e6:4d:99:79:3c:cd:7d:89:5d:34:ad:a3:69:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:92:96:82:E9:27:33:E0:F9:75:19:90:89:83:F0:A9:E0:77:99:72
X509v3 Authority Key Identifier:
keyid:7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmkfnA25g79mdR8JkEd4G1c6Nus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/JpKWguknM-D5dRmQiYPwqeB3mXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/fmkfnA25g79mdR8JkEd4G1c6Nus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d1:a3:7d:2a:71:69:d0:43:42:34:95:9e:ab:7a:59:af:5e:
9e:21:7d:6f:0a:aa:d9:ef:d5:f5:17:9f:f9:c7:67:e1:5c:69:
7e:d0:a7:4e:c8:68:62:c1:81:0b:f2:db:62:05:d5:22:56:f8:
73:75:6e:1f:b5:f3:4b:2d:79:e1:1b:f1:f6:c0:5a:77:fd:3c:
f8:67:e4:4e:a2:de:c9:db:60:4d:4a:e2:c5:a9:12:b0:6b:5b:
29:eb:28:7b:64:b5:1a:9e:51:fc:c0:2e:53:0b:e8:bd:21:f9:
37:ff:37:a2:28:d8:ad:bc:2b:c7:8b:1b:7a:4b:5d:98:f4:a2:
95:42:9c:9c:bf:48:94:44:e5:b1:70:69:ed:ee:42:e5:8c:5e:
ec:70:f1:62:12:19:12:7d:7f:41:89:49:cf:a1:8a:ed:78:00:
cd:47:42:38:b2:e6:95:e3:00:d8:fc:bf:34:0f:f4:25:85:46:
83:68:b4:87:ab:6f:f3:6a:a4:97:0b:65:76:ad:2b:73:6a:1d:
eb:f3:6b:c4:12:aa:0e:51:83:6c:a1:a7:da:72:1e:53:53:cb:
cd:a2:5f:2b:6d:30:93:45:d9:45:84:4b:01:5f:9a:6b:5c:4c:
f4:a8:ca:15:58:65:a7:d2:30:23:fd:15:05:a0:96:82:e4:42:
e7:92:e1:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr3LBmJbt68T8atEZpWPSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjkxZjljMGRiOTgzYmY2Njc1MWYwOTkwNDc3ODFiNTcz
YTM2ZWIwHhcNMjMwMTAxMDU0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjkyOTY4MmU5MjczM2UwZjk3NTE5OTA4OTgzZjBhOWUwNzc5OTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlWN8BQjDL6YPOylcnWVl5BS8R3U
6fXge0ySnByW/gLWUI1J49fax9iVnc4ciGBHMxdOQojBdWP0o80yhzasULm694u9
ANsYg+r9WdR7Ep09XvfnDRaZglfeTfG0Y1EZEcNToL45wsm+oErj9cnO0JTwoACs
X0xrNOjancYdAMh5ywGdC6x4G2mDdP59Fix1gosMOH1Akf+5hirAPzfzVsnhDw2r
d6rhlzMwAGeff3tUjI3Dts1a/KofyBX4a1Z91Z4+kppEbhkE/NTtboAHRlD26nO+
bdleeqyQ11wiiTCoF10QoMOyAZ40umxpAX5jeeZNmXk8zX2JXTSto2kuAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaSloLpJzPg+XUZkImD8Kngd5lyMB8GA1UdIwQY
MBaAFH5pH5wNuYO/ZnUfCZBHeBtXOjbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1rZm5BMjVnNzltZFI4SmtFZDRHMWM2TnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83YzA2NWUtNjgyMi00MTc5LTkyZTct
MThkYzQwODJlNWIyLzEvSnBLV2d1a25NLUQ1ZFJtUWlZUHdxZUIzbVhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC83YzA2NWUtNjgyMi00MTc5LTkyZTctMThkYzQwODJlNWIy
LzEvZm1rZm5BMjVnNzltZFI4SmtFZDRHMWM2TnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMcMA0G
CSqGSIb3DQEBCwUAA4IBAQCf0aN9KnFp0ENCNJWeq3pZr16eIX1vCqrZ79X1F5/5
x2fhXGl+0KdOyGhiwYEL8ttiBdUiVvhzdW4ftfNLLXnhG/H2wFp3/Tz4Z+ROot7J
22BNSuLFqRKwa1sp6yh7ZLUanlH8wC5TC+i9Ifk3/zeiKNitvCvHixt6S12Y9KKV
Qpycv0iUROWxcGnt7kLljF7scPFiEhkSfX9BiUnPoYrteADNR0I4suaV4wDY/L80
D/QlhUaDaLSHq2/zaqSXC2V2rStzah3r82vEEqoOUYNsoafach5TU8vNol8rbTCT
RdlFhEsBX5prXEz0qMoVWGWn0jAj/RUFoJaC5ELnkuFL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org