Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/ozyAUrVIiX0mGZCves2sSDOsey4.roa
File: ozyAUrVIiX0mGZCves2sSDOsey4.roa (raw, json)
Hash identifier: ZMopxoDja+ug/kRxGPQh/OnZCMhkmHaDN90NutMknEc=
Subject key identifier: A3:3C:80:52:B5:48:89:7D:26:19:90:AF:7A:CD:AC:48:33:AC:7B:2E
Certificate issuer: /CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
Certificate serial: 018967CFFE051356317511BDD3B8C5DE1129
Authority key identifier: DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/ozyAUrVIiX0mGZCves2sSDOsey4.roa
Signing time: Tue 18 Jul 2023 07:03:51 +0000
ROA not before: Tue 18 Jul 2023 07:03:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 130.193.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:cf:fe:05:13:56:31:75:11:bd:d3:b8:c5:de:11:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
Validity
Not Before: Jul 18 07:03:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a33c8052b548897d261990af7acdac4833ac7b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:b8:86:8a:23:3f:24:68:f8:d0:b3:8a:33:
da:ed:4f:89:e7:ca:0d:4b:ca:c1:55:39:6e:d5:95:
cd:1c:ea:ff:2f:98:c7:df:2a:aa:b8:08:1f:c2:7f:
05:17:5c:72:6d:11:df:a2:f0:ab:7d:9c:9f:40:89:
85:8c:b2:3e:4f:94:00:1a:fd:cc:70:27:58:c6:89:
52:fe:7f:08:4b:1e:cd:a0:98:77:4d:fb:69:43:8f:
85:3b:c9:19:40:3f:b4:59:f2:2a:89:79:a6:1a:15:
4b:a9:44:7e:2a:35:72:8e:00:25:4b:d5:0b:b8:96:
14:b4:a7:90:f2:02:d9:35:68:fc:97:58:71:93:51:
f4:dd:d8:28:91:dc:07:84:78:c5:55:b7:e6:d7:f6:
46:c6:20:dd:21:8f:11:13:4e:26:c6:c6:c3:43:de:
32:c0:13:21:06:98:aa:45:a4:28:93:5c:83:2f:23:
63:7f:3c:84:dc:9d:13:90:1e:28:b0:39:8f:8d:de:
3f:fd:bf:0a:bf:f0:0f:15:51:77:fa:4f:61:74:24:
45:32:9b:15:aa:d1:b0:3a:4e:84:1e:66:10:18:4b:
ca:3b:20:a3:d2:f1:92:f9:d1:04:97:3f:d8:e5:c8:
c2:e4:79:7f:71:a9:73:32:2a:61:c7:97:ee:ff:ba:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:80:52:B5:48:89:7D:26:19:90:AF:7A:CD:AC:48:33:AC:7B:2E
X509v3 Authority Key Identifier:
keyid:DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/ozyAUrVIiX0mGZCves2sSDOsey4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/3PA197_VBt9uGSQPtDrusshSANQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:62:65:79:da:64:49:4f:2e:62:7e:20:1d:d6:ed:ba:24:d1:
2c:cc:a8:5b:cf:e4:bc:c8:ba:fa:da:c4:8d:d7:e5:c3:be:ac:
a2:25:7b:46:21:58:12:80:05:8d:28:f0:3c:91:84:85:92:f5:
a9:d7:fb:67:b3:ad:8f:2d:19:78:d4:e3:20:a2:c3:82:a2:a7:
f1:75:d0:68:54:3e:2c:83:d2:7f:02:58:5d:12:88:03:98:b1:
69:e2:78:54:31:2b:d7:34:e4:98:ee:69:fc:21:12:25:0c:07:
7e:e7:a0:95:f8:e1:50:69:e6:a7:de:d1:09:15:8e:e4:58:0e:
d8:da:53:e2:4b:51:b4:20:8d:58:57:74:96:c7:19:04:bc:f0:
f7:30:a7:e2:3c:07:60:75:0a:a9:82:39:b4:4d:a9:37:93:b8:
8b:ea:dd:09:35:9a:cd:36:a2:48:23:d8:e3:f5:5e:1f:b5:a2:
5c:13:79:d8:c9:10:f4:d5:5c:41:be:af:3b:26:27:cb:c5:66:
c3:fe:bf:4d:ce:30:71:35:a6:95:ae:9b:0a:5d:3d:54:32:cd:
35:42:b0:64:1c:e4:31:4d:af:11:07:55:36:75:52:81:1c:3a:
0f:e6:50:22:5b:68:68:83:f0:22:5d:32:e7:d1:63:4a:50:8a:
ac:6a:7d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 12:39:37 2023 by rpki-client on console-ams.rpki-client.org