Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/xP9ZkyZQFkAJeKy3qRdV_vELUsQ.roa
File: xP9ZkyZQFkAJeKy3qRdV_vELUsQ.roa (raw, json)
Hash identifier: xojO1ssgPo9sAvTrbJqO0rOBGdvANI3njj1MEaoXtSY=
Subject key identifier: C4:FF:59:93:26:50:16:40:09:78:AC:B7:A9:17:55:FE:F1:0B:52:C4
Certificate issuer: /CN=7e691f9c0db983bf66751f099047781b573a36eb
Certificate serial: 02E40695
Authority key identifier: 7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmkfnA25g79mdR8JkEd4G1c6Nus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/xP9ZkyZQFkAJeKy3qRdV_vELUsQ.roa
Signing time: Sat 01 Jan 2022 08:55:25 +0000
ROA not before: Sat 01 Jan 2022 08:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.3.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48498325 (0x2e40695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e691f9c0db983bf66751f099047781b573a36eb
Validity
Not Before: Jan 1 08:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4ff5993265016400978acb7a91755fef10b52c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:69:35:8f:11:f5:6b:db:4a:51:6f:f2:f2:
9e:2c:3f:db:72:7e:63:b8:4c:c6:70:2e:40:56:ae:
14:6e:b7:3b:c9:eb:c0:30:52:8c:c2:11:6f:43:94:
b1:13:6d:67:75:ee:1d:3f:33:3e:6b:6e:35:4d:11:
f7:77:da:a4:9a:08:49:cf:59:48:55:1b:bb:14:c6:
99:a6:1d:36:09:46:35:71:b5:da:c0:bb:24:85:cc:
7a:ea:77:6b:13:06:44:bb:75:03:23:1d:b1:a0:43:
6a:99:8f:be:74:06:99:9f:89:1a:d3:36:7b:31:7c:
7e:c3:85:cd:da:f7:36:81:3a:9a:5f:a2:40:47:40:
21:ea:82:b1:0b:15:0d:3f:8e:bd:d5:0e:b0:dc:ff:
03:f2:9c:07:32:eb:d5:25:95:db:57:18:36:96:80:
f1:17:14:dd:2e:61:49:ef:62:ed:8a:ba:26:6a:0a:
43:29:93:41:8d:cb:93:b7:24:87:1b:fe:67:06:2d:
58:13:49:af:ab:c0:d4:41:5b:e5:5c:59:62:98:09:
55:6d:1d:22:62:f9:dc:1c:9d:d8:4a:d8:e1:ce:83:
61:27:37:9b:38:aa:bc:11:f4:c8:22:77:6e:57:0c:
09:55:e3:29:48:56:a6:4c:30:69:0e:07:3a:03:5e:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:59:93:26:50:16:40:09:78:AC:B7:A9:17:55:FE:F1:0B:52:C4
X509v3 Authority Key Identifier:
keyid:7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmkfnA25g79mdR8JkEd4G1c6Nus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/xP9ZkyZQFkAJeKy3qRdV_vELUsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/fmkfnA25g79mdR8JkEd4G1c6Nus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:83:af:ac:8f:26:89:e9:1c:41:f6:33:c3:93:1b:c6:09:3f:
f4:af:ec:e4:30:25:a5:8f:fa:60:d7:6b:ec:19:15:bb:5b:54:
5f:cf:db:c2:4b:0b:dc:2a:cb:2e:60:9a:1a:69:39:c1:3d:5c:
aa:51:fa:3b:d0:c0:5b:3d:73:d7:15:6a:d0:1d:9f:4d:1d:70:
2f:1b:f3:83:4e:c2:70:e7:c5:88:38:36:e7:86:33:78:a2:bf:
06:f6:18:b1:2f:4d:8c:c9:f1:77:c1:8c:26:2a:c8:c7:4a:c8:
c8:9e:d8:8e:ab:d4:e0:f9:4b:b0:f3:00:2a:25:aa:a8:dc:a9:
0d:6b:35:7b:91:87:66:ca:de:2a:40:ad:c7:a0:aa:b4:66:57:
37:9b:3d:d9:2d:ef:b8:01:71:5c:71:75:4e:8b:1f:38:ed:a7:
f8:55:8d:91:b9:6d:93:2f:ce:62:58:2f:09:24:15:e7:73:01:
c1:cc:11:ac:e3:8f:dd:10:45:d8:9c:2c:24:0c:14:99:0b:70:
55:1f:0e:d7:e6:9b:bf:73:e4:24:ac:20:6b:d0:99:f5:34:f1:
e5:ff:9b:95:3f:ba:12:9b:f2:76:0d:63:5c:e9:53:f8:d5:72:
a6:0a:35:be:03:c0:e9:ac:ff:b6:63:25:28:1e:29:7a:4c:94:
d8:08:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:00 2024 by rpki-client on console-ams.rpki-client.org