Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/i2gppOZofhhGWKSYm9OanGqg_lM.roa
File: i2gppOZofhhGWKSYm9OanGqg_lM.roa (raw, json)
Hash identifier: +sQxKWDl9yzS2et33v51RfK/I+ucZ29wbEkd9DqNkaY=
Subject key identifier: 8B:68:29:A4:E6:68:7E:18:46:58:A4:98:9B:D3:9A:9C:6A:A0:FE:53
Certificate issuer: /CN=a53e46ed04730d15c9d74eac410dde9cdc363cf0
Certificate serial: 01856F021BB968F6E798805F8B672A842E4D
Authority key identifier: A5:3E:46:ED:04:73:0D:15:C9:D7:4E:AC:41:0D:DE:9C:DC:36:3C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT5G7QRzDRXJ106sQQ3enNw2PPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/i2gppOZofhhGWKSYm9OanGqg_lM.roa
Signing time: Sun 01 Jan 2023 20:24:47 +0000
ROA not before: Sun 01 Jan 2023 20:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34471
IP address blocks: 193.111.170.0/23 maxlen: 24
193.111.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:1b:b9:68:f6:e7:98:80:5f:8b:67:2a:84:2e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53e46ed04730d15c9d74eac410dde9cdc363cf0
Validity
Not Before: Jan 1 20:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b6829a4e6687e184658a4989bd39a9c6aa0fe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:c6:41:69:d1:92:bd:74:ca:98:a5:1e:d6:
3c:8e:2f:27:4e:9c:d1:13:d1:16:d1:f6:fe:78:d3:
34:69:56:f9:e7:c8:54:6a:53:c9:33:08:22:ba:7c:
5a:bd:8d:6c:ef:1d:1a:b5:0d:be:92:72:29:e9:40:
b8:b7:bb:91:12:58:e6:50:52:0f:52:6d:83:d6:45:
88:95:6c:0b:10:ec:82:10:09:43:a9:a2:a0:7d:a3:
d2:43:69:94:eb:7a:4c:b2:80:ad:dc:51:05:b9:2e:
76:2f:3f:32:3d:63:a8:c7:6c:d1:a8:9c:3a:6a:4c:
9a:69:2f:7d:b5:ff:41:98:65:76:79:85:43:72:81:
52:d5:fc:59:8d:d9:6b:4a:a3:20:7f:e0:65:8e:2d:
ff:cc:c5:8a:a1:50:c8:87:f0:26:6c:f0:d7:58:6b:
90:a1:bd:e2:6f:08:34:c2:a5:58:0b:d4:02:71:d8:
e1:70:8c:20:dc:29:25:6d:c8:dd:4a:89:7d:85:e2:
4f:ee:48:ca:83:0e:6a:37:45:60:d9:bf:dc:63:7a:
28:24:1f:97:ea:b7:ea:50:04:42:cf:7d:06:38:69:
6a:10:f3:17:9c:6b:53:55:a1:2f:4b:2c:ff:64:07:
93:b4:86:9c:3c:b6:51:60:1c:1f:1f:5c:47:49:e4:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:29:A4:E6:68:7E:18:46:58:A4:98:9B:D3:9A:9C:6A:A0:FE:53
X509v3 Authority Key Identifier:
keyid:A5:3E:46:ED:04:73:0D:15:C9:D7:4E:AC:41:0D:DE:9C:DC:36:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT5G7QRzDRXJ106sQQ3enNw2PPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/i2gppOZofhhGWKSYm9OanGqg_lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/pT5G7QRzDRXJ106sQQ3enNw2PPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.170.0/23
193.111.196.0/23
Signature Algorithm: sha256WithRSAEncryption
53:22:a7:59:b0:32:74:60:79:92:5a:47:25:9d:7a:0d:8c:77:
0c:4c:b7:b6:ae:b7:50:92:be:42:95:80:d8:78:e8:57:f6:4d:
c7:0f:df:c5:71:92:bb:62:93:a1:77:ea:54:03:4d:9a:7b:90:
52:54:07:65:08:60:94:9a:4c:0c:84:bc:47:fc:48:2d:db:aa:
2e:c5:b5:b9:1e:93:67:51:c5:0d:d2:79:af:b3:6e:53:75:55:
01:6e:12:83:2f:11:e1:c7:4c:ab:d3:0e:a9:21:b9:31:b0:42:
43:3f:27:b0:3c:24:48:3d:39:3e:9a:1c:9b:fc:c2:c0:ca:15:
bb:c0:85:0c:27:b5:54:e6:00:fc:a4:89:b0:ab:86:68:18:ee:
82:a3:7e:91:e8:a5:6c:a2:03:9b:d1:88:67:18:9e:51:50:74:
a5:fe:56:b5:35:a9:b6:5d:79:82:8c:e6:71:48:61:74:b0:5b:
b2:d1:a2:69:a6:43:be:10:72:df:dd:f4:44:ec:39:87:cf:01:
30:1c:ef:1b:e1:72:2a:f3:2a:62:83:2f:0e:4c:35:e8:e5:7c:
e3:38:42:65:5e:16:22:24:eb:3e:29:08:b4:59:9d:9c:9e:5d:
b4:79:fb:eb:68:99:34:05:5f:4b:e0:d7:b0:bd:36:2d:09:c4:
4c:4f:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:57 2024 by rpki-client on console-ams.rpki-client.org