Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/931c05-0629-4ae5-8806-eb0639081657/1/7WUwH8UPYcrQDTz65K6qn17QfSQ.roa
File: 7WUwH8UPYcrQDTz65K6qn17QfSQ.roa (raw, json)
Hash identifier: dAnBLdF0pmueDLnv6nvkn/K0ogWC0PogwO8qRM+i3bc=
Subject key identifier: ED:65:30:1F:C5:0F:61:CA:D0:0D:3C:FA:E4:AE:AA:9F:5E:D0:7D:24
Certificate issuer: /CN=ac38c63e2a9b4af86c8c493e214bef0975a63082
Certificate serial: 01E8C231
Authority key identifier: AC:38:C6:3E:2A:9B:4A:F8:6C:8C:49:3E:21:4B:EF:09:75:A6:30:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDjGPiqbSvhsjEk-IUvvCXWmMII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/931c05-0629-4ae5-8806-eb0639081657/1/7WUwH8UPYcrQDTz65K6qn17QfSQ.roa
Signing time: Sat 01 Jan 2022 02:59:43 +0000
ROA not before: Sat 01 Jan 2022 02:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57252
IP address blocks: 193.242.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32031281 (0x1e8c231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac38c63e2a9b4af86c8c493e214bef0975a63082
Validity
Not Before: Jan 1 02:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed65301fc50f61cad00d3cfae4aeaa9f5ed07d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:1d:c4:72:e5:28:e1:a2:45:09:00:e6:75:
ee:21:88:6a:b6:a8:db:71:4f:3b:7d:aa:34:ea:c9:
f1:96:6a:75:02:d3:41:c3:f5:63:2d:6c:72:0e:e7:
86:77:64:5d:a1:5c:d5:f6:10:ba:36:f9:b7:6b:e8:
0b:42:89:b3:34:95:43:93:12:39:5c:c8:e8:1e:e4:
5c:95:e6:b9:fc:4f:51:ae:b1:dd:db:6f:74:14:0c:
f3:12:0f:74:1a:70:45:c7:86:8d:75:5a:56:eb:d1:
ce:ef:94:c0:21:b6:ad:94:73:59:8a:24:ca:85:b4:
86:c4:8a:fa:f3:72:72:04:12:0c:e8:a9:59:88:9b:
85:89:3e:40:92:cd:77:06:be:cf:e3:69:bf:68:06:
69:f6:4e:08:d6:9b:5f:23:27:8f:f4:18:49:7f:5f:
4f:ca:0e:7f:98:32:a1:6f:df:f9:0d:d6:be:ce:76:
81:56:9f:cf:6b:e2:e1:9c:74:9f:8f:27:09:37:ba:
b0:5b:25:8d:71:54:36:0b:62:81:63:25:95:11:e3:
e3:10:6e:00:dd:03:b0:49:61:77:51:87:48:2f:16:
ec:4b:65:91:d4:8b:89:77:37:e3:b4:8c:af:51:87:
f7:1e:7a:0d:3d:c5:74:1a:66:07:52:c4:55:f9:2d:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:65:30:1F:C5:0F:61:CA:D0:0D:3C:FA:E4:AE:AA:9F:5E:D0:7D:24
X509v3 Authority Key Identifier:
keyid:AC:38:C6:3E:2A:9B:4A:F8:6C:8C:49:3E:21:4B:EF:09:75:A6:30:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDjGPiqbSvhsjEk-IUvvCXWmMII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/931c05-0629-4ae5-8806-eb0639081657/1/7WUwH8UPYcrQDTz65K6qn17QfSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/931c05-0629-4ae5-8806-eb0639081657/1/rDjGPiqbSvhsjEk-IUvvCXWmMII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.104.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e0:2b:e2:e1:27:4f:99:65:17:6e:fa:52:09:8b:75:e9:53:
fc:54:78:c3:1b:94:0d:b4:5a:e3:58:dc:49:28:d9:fb:79:be:
7e:1d:ac:b3:33:ba:8e:09:3f:2a:7f:69:1a:82:e2:a9:e3:e0:
d3:35:10:a6:d4:d1:87:65:0a:2f:a6:90:e9:3b:10:72:de:01:
e0:7d:49:e1:aa:34:d5:6f:84:f2:f9:fe:cc:dc:e6:21:c6:b6:
5c:4a:2c:d7:8e:be:d0:86:b5:37:b2:36:64:c3:1b:3d:65:51:
b2:9d:d0:af:14:c9:e1:ed:97:bc:f7:18:88:b1:6a:38:94:fb:
2e:f1:2e:c7:8b:52:1b:ca:a9:48:be:36:2d:06:b4:65:83:92:
20:bd:eb:c7:e9:37:30:5d:cf:84:68:81:8a:f7:3a:4e:32:04:
72:dd:e6:e3:45:23:c6:6c:c1:d4:ef:b9:15:4c:50:4b:61:a9:
5a:79:9f:8a:cb:49:0c:e1:0d:c2:a1:09:77:f1:5f:dc:32:d6:
54:e8:6c:a4:22:a4:e2:1d:96:18:82:c6:a0:26:0c:7d:ea:b2:
63:15:c9:e6:44:6f:ec:a4:a9:2a:d8:54:50:97:f7:05:fd:0b:
7d:0d:2d:92:3f:31:8f:64:62:04:e3:a2:e5:23:be:49:a8:71:
8b:61:00:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:09 2024 by rpki-client on console-ams.rpki-client.org