Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MzYoxEbR75ls_bfOelNdacEhZuo.roa
File: MzYoxEbR75ls_bfOelNdacEhZuo.roa (raw, json)
Hash identifier: bSFn6PZ2jpptEeSaSbx+nbDsrRn9EabvxxCJ/8+MEnA=
Subject key identifier: 33:36:28:C4:46:D1:EF:99:6C:FD:B7:CE:7A:53:5D:69:C1:21:66:EA
Certificate issuer: /CN=313f49d36296a1565b85107c29aea38920df0dfa
Certificate serial: 01856B37CD2CCDD25D09E042BA145BCE7172
Authority key identifier: 31:3F:49:D3:62:96:A1:56:5B:85:10:7C:29:AE:A3:89:20:DF:0D:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT9J02KWoVZbhRB8Ka6jiSDfDfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MzYoxEbR75ls_bfOelNdacEhZuo.roa
Signing time: Sun 01 Jan 2023 02:44:57 +0000
ROA not before: Sun 01 Jan 2023 02:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15577
IP address blocks: 193.57.127.0/24 maxlen: 24
193.57.140.0/24 maxlen: 24
193.57.104.0/24 maxlen: 24
193.57.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:37:cd:2c:cd:d2:5d:09:e0:42:ba:14:5b:ce:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313f49d36296a1565b85107c29aea38920df0dfa
Validity
Not Before: Jan 1 02:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=333628c446d1ef996cfdb7ce7a535d69c12166ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:2a:cf:38:6a:c1:36:cf:f0:b8:81:93:f6:
13:e5:9d:90:12:0a:a9:40:05:44:fd:5a:ca:9c:96:
e5:6e:e0:9e:89:a4:65:7e:cb:91:92:a2:2d:d8:7e:
10:77:25:6b:81:2b:23:0c:7b:9f:57:e8:12:6a:62:
58:65:a8:aa:04:38:89:5c:b7:38:d1:87:ad:33:aa:
9e:45:e1:0b:fe:22:86:87:0b:48:17:92:8d:e0:b0:
3a:99:10:b9:71:03:84:d9:99:8e:4b:c0:a9:49:5a:
81:98:d1:2c:bf:13:4a:0e:15:a0:85:ad:e1:f1:a2:
c8:b7:ff:2c:c0:d0:75:c6:b8:fa:77:59:76:3e:ff:
a5:eb:57:02:fe:19:1f:78:ef:a1:79:d0:b1:79:bd:
1d:a2:57:7a:68:7b:81:c7:d1:aa:5c:e0:87:5c:28:
e5:ee:9b:ab:61:bd:9d:46:44:03:35:0b:4c:94:f4:
21:c3:76:f3:a2:73:3c:fa:59:6c:69:64:6f:17:82:
12:9b:fd:d3:e8:9f:f0:5e:8a:90:9c:5e:0f:f0:26:
b7:8f:33:a6:ba:e9:5a:11:84:a1:2b:55:f3:01:1a:
2b:f0:f8:75:bb:fa:c3:ba:ba:49:3a:c3:33:21:71:
76:5f:35:81:99:e7:3b:f9:56:a4:ee:13:05:3a:d5:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:36:28:C4:46:D1:EF:99:6C:FD:B7:CE:7A:53:5D:69:C1:21:66:EA
X509v3 Authority Key Identifier:
keyid:31:3F:49:D3:62:96:A1:56:5B:85:10:7C:29:AE:A3:89:20:DF:0D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT9J02KWoVZbhRB8Ka6jiSDfDfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MzYoxEbR75ls_bfOelNdacEhZuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.104.0/24
193.57.108.0/24
193.57.127.0/24
193.57.140.0/24
Signature Algorithm: sha256WithRSAEncryption
88:0a:0f:25:57:a6:24:f3:a4:8b:d7:74:58:88:1f:e9:8f:1d:
3e:56:b9:70:21:cd:73:a7:c6:da:68:e6:30:53:f0:be:78:de:
05:aa:9a:29:67:91:03:1a:05:70:4e:e3:22:46:90:19:0d:05:
59:c8:22:d8:a1:38:bc:ad:52:ea:da:59:3b:56:b5:a9:8b:bf:
1c:53:89:91:74:19:26:28:ea:4c:a7:1c:ca:2d:d2:0b:f2:0f:
21:d2:9f:36:56:64:61:10:9b:9c:ad:07:7e:ce:97:ab:d8:fb:
2f:a5:b6:09:b1:d5:c3:03:d5:3e:28:68:a7:ae:c0:49:d1:83:
98:4b:6b:a8:e9:ac:28:06:b6:a8:a9:69:f9:1a:4d:4e:3b:52:
b3:f7:b2:08:23:90:d4:f7:17:d1:cc:a3:82:95:ca:f9:62:26:
5a:44:34:56:8f:18:65:72:9e:f4:2c:5c:23:a2:f7:3b:99:91:
3d:23:2f:6e:95:52:92:65:4d:06:58:99:00:ec:ae:ce:9a:f0:
9d:01:b9:82:19:41:58:9b:97:a2:9c:89:f4:bc:03:1e:d5:4a:
f0:33:56:30:11:84:99:a9:e2:ee:f2:4e:e9:eb:33:5e:91:47:
82:87:96:40:1f:76:5e:21:f0:bc:a0:d9:24:2b:f3:cf:ff:44:
77:3d:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:16 2024 by rpki-client on console-ams.rpki-client.org