Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/nDqIyOOvsDeAzfFCiAngUR_oqNg.roa
File: nDqIyOOvsDeAzfFCiAngUR_oqNg.roa (raw, json)
Hash identifier: Lar18pWDEVCbnfW4UfG49lws71CK0zcG1AWnx1ZSTMs=
Subject key identifier: 9C:3A:88:C8:E3:AF:B0:37:80:CD:F1:42:88:09:E0:51:1F:E8:A8:D8
Certificate issuer: /CN=5f909814e886d6c099ba909825597fe4579243c6
Certificate serial: 01856D2F43144C8B1997296BF2406A4E9FF9
Authority key identifier: 5F:90:98:14:E8:86:D6:C0:99:BA:90:98:25:59:7F:E4:57:92:43:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/nDqIyOOvsDeAzfFCiAngUR_oqNg.roa
Signing time: Sun 01 Jan 2023 11:54:51 +0000
ROA not before: Sun 01 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47787
IP address blocks: 193.163.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:43:14:4c:8b:19:97:29:6b:f2:40:6a:4e:9f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f909814e886d6c099ba909825597fe4579243c6
Validity
Not Before: Jan 1 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c3a88c8e3afb03780cdf1428809e0511fe8a8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:1e:20:1f:09:b5:9e:4c:4c:28:2a:4d:49:
59:7d:bb:0e:e1:56:ad:af:95:5f:87:06:9c:c0:05:
a9:c4:b5:b2:61:b0:c5:ab:5b:c9:b1:e0:60:37:aa:
96:c0:44:96:85:fc:3d:84:70:67:cf:3e:7d:8d:0d:
ac:65:b0:b9:a8:c2:e4:51:ef:c5:e4:57:65:2e:05:
eb:bd:a9:bf:22:f8:46:f6:09:cc:80:96:b2:4e:56:
e8:f8:17:0f:87:33:98:aa:e5:97:95:5a:a0:45:9f:
cf:c0:cf:a0:ee:da:6d:a2:c5:48:7d:0f:4b:86:86:
7d:1f:50:5b:98:8c:b1:2d:a4:03:b3:c4:1f:cf:02:
56:9b:85:4c:8d:45:d9:62:a5:ca:63:a4:85:33:64:
ba:98:08:8b:c8:7c:aa:c2:07:e3:5c:44:68:7b:05:
56:3f:93:66:f5:fb:87:81:66:dc:57:84:54:8a:2e:
b6:13:c4:a0:43:16:c6:63:9e:cb:1c:94:70:32:97:
ae:1d:cb:bd:db:23:ab:58:97:8c:c2:7d:ca:18:fd:
34:8b:f3:05:f4:0e:a9:a0:d3:af:1a:a1:75:51:4f:
da:c0:d8:91:14:81:b0:d2:7b:e1:05:b8:7c:52:ef:
3c:6a:ac:99:7b:b3:5f:21:d6:01:7d:48:20:f6:1a:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:88:C8:E3:AF:B0:37:80:CD:F1:42:88:09:E0:51:1F:E8:A8:D8
X509v3 Authority Key Identifier:
keyid:5F:90:98:14:E8:86:D6:C0:99:BA:90:98:25:59:7F:E4:57:92:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/nDqIyOOvsDeAzfFCiAngUR_oqNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.151.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ad:86:24:df:9d:02:c3:06:c1:82:2e:2a:94:3c:1a:50:a7:
b1:62:68:e3:ba:96:54:4f:cb:72:01:1b:f6:8d:f4:0a:82:ae:
0c:2f:51:1b:f3:6e:7b:89:d1:84:6f:6e:91:b9:2f:e1:9a:06:
0d:a1:e9:45:f5:e5:d7:82:77:0b:3c:34:70:0d:54:aa:bc:bc:
a7:89:0e:48:b5:5b:fb:7f:19:c3:f0:f5:15:2a:00:fd:7c:b8:
d3:82:9c:92:c8:a3:6d:96:a8:ef:fc:3e:ff:7d:67:c2:aa:1c:
44:fd:f2:84:cd:72:0c:76:da:fd:16:51:5b:b4:d7:ec:ee:b1:
ef:26:c2:42:d8:19:0e:77:f0:f4:1f:30:81:ea:e1:75:11:ae:
c9:19:7b:29:a3:33:9f:6c:df:19:be:0d:b5:c9:f5:25:1c:b6:
77:f4:e4:30:5d:c8:57:08:64:2d:94:20:11:cd:06:f5:a8:7e:
0b:cc:c0:30:d0:2f:2a:b0:ec:7e:78:1c:f2:8c:7d:84:0e:fa:
de:bd:29:9b:40:a7:ef:65:a1:c2:ad:6c:20:dd:c3:9e:3f:05:
e8:32:9b:d3:a0:4e:20:48:96:90:5a:35:3e:6e:b5:23:21:e7:
13:e5:a3:3b:81:24:4a:dd:b0:f2:6a:11:12:ec:f0:0f:2b:91:
82:f3:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:03 2024 by rpki-client on console-fra.rpki-client.org