Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/RvNBf5zimOwPlDjnGn-7VjRc9LA.roa
File: RvNBf5zimOwPlDjnGn-7VjRc9LA.roa (raw, json)
Hash identifier: yawy0bQE3fpTxGKv2jVzBgw4Vuv7wXI7ASz/7zGMXk8=
Subject key identifier: 46:F3:41:7F:9C:E2:98:EC:0F:94:38:E7:1A:7F:BB:56:34:5C:F4:B0
Certificate issuer: /CN=cada870dbf7ba5df91fd909ed3d6380316656254
Certificate serial: 01856D418300A8F0EBA279C63D09BCAE0CA4
Authority key identifier: CA:DA:87:0D:BF:7B:A5:DF:91:FD:90:9E:D3:D6:38:03:16:65:62:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/RvNBf5zimOwPlDjnGn-7VjRc9LA.roa
Signing time: Sun 01 Jan 2023 12:14:47 +0000
ROA not before: Sun 01 Jan 2023 12:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25017
IP address blocks: 193.201.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:83:00:a8:f0:eb:a2:79:c6:3d:09:bc:ae:0c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cada870dbf7ba5df91fd909ed3d6380316656254
Validity
Not Before: Jan 1 12:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46f3417f9ce298ec0f9438e71a7fbb56345cf4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:6b:f1:02:c8:7e:44:62:ba:01:e2:69:13:
f5:ff:b0:3a:2a:a7:a5:5c:29:75:29:31:df:a1:8f:
f9:7e:bd:b0:3b:be:8b:37:fe:71:80:e8:e3:29:48:
8f:69:64:6e:36:fa:7d:9a:83:f7:b5:0c:70:66:b3:
a9:52:34:69:14:f2:a4:fa:4a:f4:d7:59:43:e6:99:
51:fe:40:e9:37:aa:02:f7:1a:53:29:69:01:cd:39:
58:8e:f6:1b:19:43:5d:48:9b:a0:b3:16:1d:12:4c:
2e:01:84:a7:eb:3f:b0:a3:68:15:c4:dc:9c:c5:e8:
06:f8:50:7a:70:7f:9e:a8:f2:47:48:ff:fb:e7:f7:
15:23:b6:74:54:ef:3b:d5:23:58:c8:45:dc:d4:02:
0b:72:27:23:7a:9c:c4:42:61:80:6f:ba:b3:64:3f:
2d:db:7c:84:da:08:cf:a1:15:db:58:b5:06:56:49:
60:90:d7:53:ca:c4:b5:b8:62:15:85:42:7d:1d:ec:
82:9a:dd:16:b3:5b:0e:8e:7d:f8:5e:39:9e:d6:76:
11:f6:ea:4e:a3:c0:aa:2c:d3:01:5e:8d:1c:86:3b:
b4:5b:cc:11:03:fa:4b:01:33:f8:ca:b0:94:8a:0d:
6b:cd:8f:3a:78:fe:a0:b4:3a:8e:68:7e:b5:7c:02:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F3:41:7F:9C:E2:98:EC:0F:94:38:E7:1A:7F:BB:56:34:5C:F4:B0
X509v3 Authority Key Identifier:
keyid:CA:DA:87:0D:BF:7B:A5:DF:91:FD:90:9E:D3:D6:38:03:16:65:62:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/RvNBf5zimOwPlDjnGn-7VjRc9LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.101.0/24
Signature Algorithm: sha256WithRSAEncryption
35:47:03:3c:3c:02:28:75:30:3d:21:ac:47:8b:fc:dc:a5:69:
51:25:12:65:12:92:ce:7d:65:5a:14:9c:2d:26:27:68:c8:04:
b0:b0:ed:97:fe:79:7e:78:aa:54:cd:fe:64:83:6f:e2:96:0a:
8b:7b:f4:26:20:fa:7e:34:e8:e3:f6:04:a1:62:1e:0b:39:25:
80:dd:91:bf:16:c1:84:4d:e7:52:f2:16:59:96:ae:33:3c:1d:
2d:b5:ce:d4:fd:0d:9a:6a:ba:79:92:b5:5e:1c:0d:2f:dc:66:
e1:31:69:44:ca:e3:a7:67:f5:62:06:86:62:11:c9:44:8d:23:
82:82:c4:08:e5:75:e8:42:f1:6c:e1:c0:f9:b5:36:ae:5b:cb:
74:8a:89:f1:e3:15:0f:58:12:21:e4:47:26:02:38:8d:9d:a0:
04:e7:61:b2:7b:b8:9a:81:f1:c3:5d:96:de:57:8a:b1:83:1c:
eb:43:41:f7:1f:ef:a8:08:2c:a7:c3:2e:f6:a3:21:0e:2c:4e:
20:b7:c7:6d:c1:98:78:aa:de:5a:d2:c8:0f:eb:84:08:38:c1:
df:d5:99:7f:e5:10:47:c9:75:61:79:74:28:6c:a6:f3:d7:c2:
db:70:7a:18:40:b0:1b:41:f2:86:a1:64:03:5f:e8:07:b0:36:
14:c6:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:00 2024 by rpki-client on console-fra.rpki-client.org