Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/1-cZAnUWmhYJT7vOaOuOxkTWOdfk.roa
File: 1-cZAnUWmhYJT7vOaOuOxkTWOdfk.roa (raw, json)
Hash identifier: BTPW9QUwWucbIWFIY1K1pWpIwWXE8Xobam01mgE83Wg=
Subject key identifier: F9:C6:40:9D:45:A6:85:82:53:EE:F3:9A:3A:E3:B1:91:35:8E:75:F9
Certificate issuer: /CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
Certificate serial: 018571D7E0664AD19A72ED7D0AD8E5026EA7
Authority key identifier: F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/1-cZAnUWmhYJT7vOaOuOxkTWOdfk.roa
Signing time: Mon 02 Jan 2023 09:37:31 +0000
ROA not before: Mon 02 Jan 2023 09:37:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 193.163.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:e0:66:4a:d1:9a:72:ed:7d:0a:d8:e5:02:6e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
Validity
Not Before: Jan 2 09:37:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9c6409d45a6858253eef39a3ae3b191358e75f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:f4:c5:71:d1:74:f0:82:15:90:af:82:80:
df:1a:c8:0c:a7:d5:cb:c8:77:6b:03:ba:9c:11:79:
a4:ef:12:e2:fa:86:19:b4:24:ab:58:7f:7e:5e:19:
a3:47:98:d2:2b:17:53:5e:bf:11:60:40:50:a8:28:
43:4a:22:09:c6:b4:07:2b:70:1d:1f:9b:04:55:cc:
f6:e1:01:be:15:76:ab:7d:ff:8b:7f:ac:3f:79:6b:
63:22:d0:bd:5b:f4:dc:de:bd:7a:71:c1:d8:73:44:
9d:7e:13:f7:b7:bd:55:0e:e7:ee:20:db:94:0f:01:
74:fb:a0:42:24:dd:68:c4:47:28:ba:13:50:13:2c:
35:a2:ea:0c:47:cb:81:82:c5:b8:34:81:a9:63:77:
ec:57:a3:33:04:8a:78:6c:2c:ed:95:93:9b:80:a0:
ad:a4:93:7d:98:f5:7f:4c:58:c4:1f:0f:61:f0:8e:
bb:6d:9b:50:dd:c3:c9:38:fc:39:73:78:21:81:71:
dd:ff:8b:c0:f2:b0:3f:b6:90:fd:13:0e:96:16:c7:
a3:d4:15:43:3f:b3:5f:3e:6e:8b:c6:92:e7:c8:cb:
0d:2e:14:33:0c:3c:dc:31:2d:64:79:2c:52:9b:b3:
f0:6b:9e:fc:83:b6:30:f6:0c:4e:83:12:0b:73:f8:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C6:40:9D:45:A6:85:82:53:EE:F3:9A:3A:E3:B1:91:35:8E:75:F9
X509v3 Authority Key Identifier:
keyid:F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/1-cZAnUWmhYJT7vOaOuOxkTWOdfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.22.0/24
Signature Algorithm: sha256WithRSAEncryption
29:55:69:13:5f:93:5a:7f:8b:00:85:c2:f8:a6:3b:9b:3d:0a:
20:3b:9c:ed:fc:73:29:fa:ca:00:5b:58:a2:05:c2:bd:ad:2c:
22:b1:6f:f8:a2:28:ee:02:f3:bd:0c:e9:41:35:4f:99:98:ca:
37:1b:b3:9b:bf:e2:69:46:7a:c6:c0:e0:37:b0:8a:72:a5:83:
8d:4f:11:67:57:26:5a:c8:23:45:7a:a7:26:ef:1c:39:c5:f5:
b2:2f:33:67:98:bf:f0:24:bc:ec:0b:80:36:2d:a3:ac:d3:2c:
7d:e1:24:56:59:3e:67:c9:41:a6:0f:6e:99:89:c2:fe:b9:de:
82:40:c1:30:1c:4b:9f:9d:cd:14:3e:26:ab:a8:70:70:71:63:
f3:0c:33:5a:ab:7c:85:1a:0e:5e:f5:c8:b9:19:8a:2e:37:59:
48:5b:e9:69:40:b3:e1:de:01:ea:38:a3:34:57:5e:30:f9:b7:
e8:4c:ee:79:9f:dc:3e:72:ba:ad:51:aa:5b:b6:71:a1:00:c7:
83:6c:5c:4b:6c:57:7d:96:80:98:24:44:29:97:0c:15:c9:3b:
0f:bf:12:c1:a5:bc:91:f2:6c:6b:d1:88:a4:8d:f0:b0:a2:7b:
e0:52:62:3f:58:96:03:b5:af:f8:d8:9b:a6:78:d6:58:a7:e8:
b4:19:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 09:20:31 2023 by rpki-client on console-fra.rpki-client.org