Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/9BEiR56kAvjJSYvBWAEe9BSpE4c.roa
File: 9BEiR56kAvjJSYvBWAEe9BSpE4c.roa (raw, json)
Hash identifier: qY4mS1/D3hiQYLmPodZVvPCQvdppwmHzAiPDsteLemE=
Subject key identifier: F4:11:22:47:9E:A4:02:F8:C9:49:8B:C1:58:01:1E:F4:14:A9:13:87
Certificate issuer: /CN=9237925190bfea65e92f829e4f67f7f8a46d2ff5
Certificate serial: 01857139EE196EC616CEA447E47654CF3226
Authority key identifier: 92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/9BEiR56kAvjJSYvBWAEe9BSpE4c.roa
Signing time: Mon 02 Jan 2023 06:44:59 +0000
ROA not before: Mon 02 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 193.178.157.0/24 maxlen: 24
193.178.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ee:19:6e:c6:16:ce:a4:47:e4:76:54:cf:32:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9237925190bfea65e92f829e4f67f7f8a46d2ff5
Validity
Not Before: Jan 2 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f41122479ea402f8c9498bc158011ef414a91387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:84:65:66:fc:86:ff:41:9c:6c:fb:ab:6e:
4e:01:cb:9d:75:a2:d6:4e:5d:56:c6:79:6d:51:74:
8c:11:15:6e:64:16:60:e9:40:3e:db:3d:f8:a7:b8:
63:66:f1:e9:dc:dd:ca:ba:08:36:55:db:da:97:17:
72:aa:c3:b8:fe:37:1a:0a:62:0c:43:cc:fd:08:ea:
25:9c:78:34:f4:11:a7:08:a9:5d:31:33:ea:ee:22:
90:d3:7c:8d:7b:be:bd:dc:9e:f1:0a:5d:56:cd:2d:
10:18:79:fb:fe:ad:48:d1:a4:db:c2:be:72:f8:e8:
c1:d1:6f:aa:ff:ab:06:a0:fd:19:2b:d0:48:ec:d9:
5d:cc:ee:4a:41:bb:fc:7e:b3:89:ab:80:bf:c6:43:
d2:4b:d1:32:85:c6:d9:b0:c3:8a:3e:a6:11:8a:d2:
a7:18:41:cc:cb:cb:00:24:3b:33:ef:ab:5a:01:3f:
7e:48:43:f0:c1:4e:d2:68:81:bf:d7:83:01:2d:55:
fd:e5:f2:03:b3:58:53:b0:70:c6:11:d2:2e:ff:14:
df:ba:46:30:4b:14:4d:32:c5:b1:85:d9:02:0e:40:
05:88:85:e6:e7:04:ab:35:8a:e0:d2:f3:af:2b:3e:
e3:66:d1:43:14:d3:2f:b6:86:be:9a:8b:1c:1f:54:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:22:47:9E:A4:02:F8:C9:49:8B:C1:58:01:1E:F4:14:A9:13:87
X509v3 Authority Key Identifier:
keyid:92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/9BEiR56kAvjJSYvBWAEe9BSpE4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.156.0/23
Signature Algorithm: sha256WithRSAEncryption
09:b6:94:a7:83:bd:04:99:99:1f:f5:78:aa:27:61:da:41:45:
a3:b9:a0:62:31:b7:cd:02:6e:ab:f1:db:36:53:b9:0e:1f:4c:
02:ba:d4:76:4c:32:7e:25:75:3d:8e:2c:bd:8a:99:e4:6e:65:
5b:c4:15:15:71:41:18:93:c3:df:b1:66:42:f1:bd:e1:b9:4a:
57:db:0e:00:96:90:9b:ca:ff:d2:bc:e7:b3:94:4d:5c:f8:88:
70:bd:73:c2:76:9c:a4:cb:4b:93:8f:6b:77:5d:3d:f0:c5:21:
f3:10:e9:f9:21:d7:2e:f0:96:80:ef:94:79:8b:41:72:30:f7:
42:40:55:51:ff:48:8a:ee:4c:df:1c:62:bb:79:a7:41:71:b4:
a7:8e:8f:2f:54:db:f3:5e:23:b7:27:44:40:6d:bc:a1:2a:5d:
91:dd:92:50:18:89:97:4e:d7:64:cc:0c:a3:e4:48:b7:a9:d1:
a6:a7:70:49:65:0d:f4:38:3b:3d:52:cb:82:c6:57:fe:cf:93:
d1:72:f5:50:c4:1e:2d:60:98:80:3f:c1:7e:cd:cb:88:a9:a8:
e0:b7:6b:0f:ed:5a:04:f8:f3:48:fb:0d:48:0e:73:29:dc:e9:
92:56:78:12:f3:b1:fc:08:3c:5a:62:32:e6:54:36:a5:5e:e5:
f8:9c:3f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:09 2024 by rpki-client on console-ams.rpki-client.org