Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/3byRKsjR9qlKKV9rWmRDUyPYFS8.roa
File: 3byRKsjR9qlKKV9rWmRDUyPYFS8.roa (raw, json)
Hash identifier: FzlP8iODsaZNugrgTuBRwvehYzFuQLnxj15n1qHqUUc=
Subject key identifier: DD:BC:91:2A:C8:D1:F6:A9:4A:29:5F:6B:5A:64:43:53:23:D8:15:2F
Certificate issuer: /CN=5f909814e886d6c099ba909825597fe4579243c6
Certificate serial: 0324C5DC
Authority key identifier: 5F:90:98:14:E8:86:D6:C0:99:BA:90:98:25:59:7F:E4:57:92:43:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/3byRKsjR9qlKKV9rWmRDUyPYFS8.roa
Signing time: Sat 01 Jan 2022 15:55:13 +0000
ROA not before: Sat 01 Jan 2022 15:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47787
IP address blocks: 193.163.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52741596 (0x324c5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f909814e886d6c099ba909825597fe4579243c6
Validity
Not Before: Jan 1 15:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddbc912ac8d1f6a94a295f6b5a64435323d8152f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:a6:a0:49:f6:a5:26:1c:aa:7e:65:f6:c1:
ba:20:29:33:9c:66:ea:a8:2e:87:4e:13:fb:c8:ff:
ff:08:c6:9f:d1:12:ce:fc:a4:d8:14:7d:3d:9a:95:
64:d2:dc:41:60:54:88:7a:1e:4e:44:af:6b:88:62:
b4:fa:af:29:59:cf:9d:53:af:34:55:08:48:2a:a4:
8c:b9:32:5c:63:43:54:d5:0d:e3:63:63:96:96:c0:
ec:cc:a0:0b:e3:97:21:2b:f5:e8:41:80:ad:c9:bb:
09:5c:fb:33:50:02:a1:1a:d3:14:71:b3:62:a9:c7:
84:28:73:4b:f2:48:87:ae:11:9f:d6:98:a9:99:f5:
92:f1:1c:ad:9d:ab:4f:12:c6:5e:fc:99:3f:9c:81:
1e:1a:b8:dc:19:e2:dc:72:b5:18:e2:28:2b:f7:59:
42:b6:87:a7:b7:ea:9a:c0:e5:74:ee:0c:29:5d:16:
7f:b5:36:a8:5a:b0:e1:02:e4:24:af:cf:7e:60:75:
ca:ff:54:5f:af:7c:75:5b:ce:1c:c1:dd:8e:4e:1d:
3d:c3:dd:34:3a:33:70:3f:37:1c:1e:9c:7c:23:52:
02:d9:34:7a:5f:bc:e0:03:96:8b:d3:70:1f:1b:3a:
6c:53:7e:0d:28:74:28:39:84:32:26:67:7f:20:ce:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:91:2A:C8:D1:F6:A9:4A:29:5F:6B:5A:64:43:53:23:D8:15:2F
X509v3 Authority Key Identifier:
keyid:5F:90:98:14:E8:86:D6:C0:99:BA:90:98:25:59:7F:E4:57:92:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/3byRKsjR9qlKKV9rWmRDUyPYFS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ca:60:0e:95:ab:69:15:8d:88:b4:78:71:92:fd:f3:6b:dd:
75:04:04:fe:74:22:c8:c1:0c:c4:ef:bf:d4:cc:bd:bb:7f:c5:
53:df:b1:5f:fb:8b:76:85:c6:40:2b:90:07:8b:84:a5:d3:63:
f9:d5:55:ed:9f:09:6e:1f:6d:4c:6d:cc:26:d6:09:4a:32:db:
27:4b:e5:a5:fd:15:d9:1a:ff:6c:97:31:6e:6d:a3:47:b5:59:
33:61:a6:23:96:c7:0c:a0:ac:b6:f6:69:9e:5d:63:98:1f:c3:
2b:66:10:29:07:c7:a2:93:7c:27:9f:98:a3:a5:86:4e:f7:41:
92:6d:72:46:cf:1e:05:37:0e:a6:aa:f7:b7:a3:e2:db:73:9c:
e0:27:6b:89:8f:59:1e:c7:16:8b:55:c2:57:2c:55:60:17:7e:
c2:2c:d8:32:4f:f8:c7:d6:c9:4c:42:ac:b6:f3:68:5d:46:82:
20:c5:14:9d:8f:c9:4f:a7:f5:1f:43:02:57:61:55:6b:4b:89:
f6:c2:13:c2:0d:50:fb:bd:62:da:cf:1d:34:b5:61:dc:6f:19:
3d:fc:3e:51:3d:48:f2:61:51:30:e2:a5:2e:0a:cc:68:13:0f:
db:ad:ad:47:1b:f5:db:49:07:41:c4:c1:80:0f:2f:45:63:76:
4b:fc:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:03 2024 by rpki-client on console-fra.rpki-client.org