Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/XsIZq2L9wKv2hJ5f6OwVzME-83k.roa
File: XsIZq2L9wKv2hJ5f6OwVzME-83k.roa (raw, json)
Hash identifier: n7NGukzZ/5C4HoinXe9QMdLRlGhuMptHBte5o7Pp6qA=
Subject key identifier: 5E:C2:19:AB:62:FD:C0:AB:F6:84:9E:5F:E8:EC:15:CC:C1:3E:F3:79
Certificate issuer: /CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Certificate serial: 06872127
Authority key identifier: 78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/XsIZq2L9wKv2hJ5f6OwVzME-83k.roa
Signing time: Sat 01 Jan 2022 12:56:28 +0000
ROA not before: Sat 01 Jan 2022 12:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 193.105.165.0/24 maxlen: 24
193.105.177.0/24 maxlen: 24
193.105.207.0/24 maxlen: 24
2a0f:8ac0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109519143 (0x6872127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Validity
Not Before: Jan 1 12:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ec219ab62fdc0abf6849e5fe8ec15ccc13ef379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:a3:25:53:ce:fd:60:4b:6d:07:2d:59:18:
d8:42:22:8f:10:bc:00:77:6f:e3:e4:4b:73:f1:2c:
7c:e1:2b:b9:94:ed:5b:a9:f1:e7:6d:e0:e5:78:7e:
ae:7f:6c:1e:ea:6f:4d:ba:fc:71:2d:e7:8d:69:b3:
a6:b2:7f:a5:74:92:02:6e:9a:2a:c0:f5:cd:ad:bf:
8d:bb:e9:8b:75:7f:cb:36:12:55:c4:ee:e8:f9:6c:
d3:1e:bc:15:56:09:29:d0:49:73:4b:8c:e7:bf:97:
cf:b2:06:98:0a:fc:12:09:ad:e0:41:94:8c:c9:7a:
42:09:4f:fc:72:67:ed:11:da:38:6a:ad:1b:fa:9f:
e8:7d:fc:93:af:57:19:bf:c8:92:1f:03:3e:00:ba:
0f:89:a4:03:cc:6e:b6:fa:b6:09:5d:a1:e6:f0:12:
ec:2c:5c:a0:24:db:7a:20:7d:e7:6f:4b:6b:ea:d2:
32:d4:8b:3a:f1:54:69:ff:e2:75:0e:86:bc:0a:48:
37:73:db:74:eb:bc:8f:e1:47:51:38:2d:fa:91:0d:
53:a1:18:ec:69:ee:96:31:2c:4f:0d:70:10:4b:7b:
ac:49:66:69:e7:c4:8b:71:0b:e0:03:37:0f:a8:8b:
92:2c:cf:f2:de:2d:71:9e:2d:d1:6e:bf:7f:89:ca:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C2:19:AB:62:FD:C0:AB:F6:84:9E:5F:E8:EC:15:CC:C1:3E:F3:79
X509v3 Authority Key Identifier:
keyid:78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/XsIZq2L9wKv2hJ5f6OwVzME-83k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.165.0/24
193.105.177.0/24
193.105.207.0/24
IPv6:
2a0f:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
34:b3:ca:09:6e:a6:6f:25:d9:05:fe:98:bf:67:75:27:c1:16:
e9:10:5c:0b:36:15:2e:85:10:22:72:3f:9c:e2:7c:ce:bf:ff:
95:b6:ea:62:6d:39:bb:12:c3:0c:7d:64:8b:08:f5:05:44:87:
ac:3a:99:a3:19:84:dd:1a:7c:1b:cd:73:3a:cb:ac:56:bc:67:
a9:63:98:40:45:8d:b3:4e:1c:f2:c4:50:d2:07:b2:49:22:f4:
f6:bd:af:41:0f:55:c5:6e:c4:89:44:9e:47:18:28:65:4a:2f:
51:53:c1:b3:3c:16:f3:ac:f0:f1:cd:5b:3c:a5:c7:cc:cc:fe:
9f:9a:ab:c2:02:a9:89:52:40:d3:fd:84:e9:60:47:26:41:5d:
ad:96:3d:fc:94:b0:da:e6:00:08:30:b4:57:0c:94:0d:55:43:
19:86:5c:4a:5d:b6:22:b4:a4:ae:1c:52:1c:ee:fc:25:08:c6:
dc:d0:7b:9d:00:08:b2:a7:58:db:6f:d4:c6:f2:27:91:61:ef:
07:39:8b:2e:ea:14:9e:b5:ed:cf:52:52:0c:58:1d:5f:ee:a5:
65:eb:42:4e:4c:db:30:47:ec:cf:2e:52:ee:bc:83:06:e7:63:
ca:75:88:2b:03:35:dd:fe:86:c6:51:aa:73:e4:ec:18:f1:3b:
09:5d:3c:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:04 2023 by rpki-client on console-ams.rpki-client.org