Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/RBSLyDDkiUqPkhoJl4gUZmW2Unk.roa
File: RBSLyDDkiUqPkhoJl4gUZmW2Unk.roa (raw, json)
Hash identifier: h0qRwQT0m/d9L0chreYtaKeMz3GXpOld/gDjD71USuo=
Subject key identifier: 44:14:8B:C8:30:E4:89:4A:8F:92:1A:09:97:88:14:66:65:B6:52:79
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01896478E9DE4FEA6D4A1043CE56C5409F7C
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/RBSLyDDkiUqPkhoJl4gUZmW2Unk.roa
Signing time: Mon 17 Jul 2023 15:29:52 +0000
ROA not before: Mon 17 Jul 2023 15:29:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 193.58.177.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
2a09:3705::/32 maxlen: 32
2a09:3704::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:e9:de:4f:ea:6d:4a:10:43:ce:56:c5:40:9f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Jul 17 15:29:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44148bc830e4894a8f921a099788146665b65279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:39:6f:0c:64:6f:88:0a:b5:ea:dd:a9:2d:
97:df:53:4b:d0:59:e1:c9:49:b1:45:2c:ac:d8:9d:
65:20:a9:11:23:9b:55:3f:d6:5b:05:ea:99:66:25:
99:42:e2:c4:3d:a8:8c:90:7b:4e:31:ce:df:5e:ca:
a8:de:90:ef:52:60:db:4c:90:56:4c:8c:7d:f8:4c:
eb:88:c8:46:e9:98:4a:d2:b6:e8:ee:25:62:94:ca:
2b:65:a4:95:27:4a:8a:93:e9:42:f5:c6:51:6a:9c:
b2:3f:0b:b8:9f:97:ae:0a:ca:30:b3:6d:17:37:96:
f6:1b:60:ab:73:81:ba:62:1b:1e:77:d7:33:95:43:
e1:b0:94:08:72:e2:87:35:22:45:99:2d:7a:24:4f:
29:8d:37:da:87:dc:8a:e5:25:bf:99:45:2d:b9:53:
af:c8:78:03:79:dc:d4:20:d0:c0:65:01:83:e8:1d:
c4:e9:84:24:74:c6:4d:09:94:c8:d7:32:16:f7:7f:
c0:7f:81:65:0a:72:5d:d0:58:d0:ee:a1:6d:2f:84:
65:5f:7a:7d:70:3f:c1:9a:72:07:3c:5a:d9:1d:ff:
a9:d1:a5:db:75:55:fa:ab:64:45:3c:0e:59:5c:8a:
70:1e:b1:9f:ac:96:fa:50:06:f3:7d:ad:70:b7:dd:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:14:8B:C8:30:E4:89:4A:8F:92:1A:09:97:88:14:66:65:B6:52:79
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/RBSLyDDkiUqPkhoJl4gUZmW2Unk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.176.0/23
IPv6:
2a09:3704::/31
Signature Algorithm: sha256WithRSAEncryption
6a:ae:d1:2d:1f:31:fe:ff:fe:18:87:06:f6:ad:88:5a:0f:12:
8a:d7:56:b3:bb:9a:a7:7c:c2:c3:a3:8e:0a:1c:8c:cc:99:2b:
da:53:2e:90:ab:f6:0b:a6:74:ec:72:01:2d:d8:68:51:30:75:
90:df:35:0d:39:3c:1a:7f:05:15:f4:f5:d8:b8:9c:4b:63:63:
d1:39:66:99:9d:95:28:49:53:d7:b2:ef:cc:eb:8c:e3:ca:df:
37:64:90:0e:8a:9a:12:e1:56:aa:c7:1f:4b:2c:8b:94:c0:07:
3c:a7:f0:3d:56:0b:d9:8c:8a:40:37:8d:e5:c0:7b:6b:69:6d:
e8:c8:d3:75:f2:f2:cd:11:35:fb:56:3d:c4:21:d3:74:bb:bd:
90:44:5d:78:8e:81:7b:2a:91:e1:7f:88:d8:1a:1e:d4:43:49:
27:45:85:47:2a:44:62:07:5a:86:51:26:11:1b:eb:0c:f5:49:
07:de:72:d7:67:8a:dd:56:f6:c5:ce:12:f2:74:0c:cf:0a:fc:
7d:6c:50:3c:b8:f5:85:f1:7b:c9:e3:66:35:88:c6:e8:51:0a:
21:6b:d8:5e:f3:b4:2c:d2:39:12:37:17:eb:89:94:e6:2c:ef:
2b:b8:77:72:5f:12:89:f7:77:52:36:07:aa:13:d7:d7:56:0d:
33:37:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org