Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/9e2ChQmI3VpiwFUaxfWJOBkhWig.roa
File: 9e2ChQmI3VpiwFUaxfWJOBkhWig.roa (raw, json)
Hash identifier: CcVOxh/L/uE7srXQptumEb6LWyIHiVm8n35c8hhPcC0=
Subject key identifier: F5:ED:82:85:09:88:DD:5A:62:C0:55:1A:C5:F5:89:38:19:21:5A:28
Certificate issuer: /CN=3ea1d8b2fd27626f7b49664bf05bbde6d59bdad3
Certificate serial: 052B0DF0
Authority key identifier: 3E:A1:D8:B2:FD:27:62:6F:7B:49:66:4B:F0:5B:BD:E6:D5:9B:DA:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqHYsv0nYm97SWZL8Fu95tWb2tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/9e2ChQmI3VpiwFUaxfWJOBkhWig.roa
Signing time: Sat 01 Jan 2022 10:06:05 +0000
ROA not before: Sat 01 Jan 2022 10:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50268
IP address blocks: 193.104.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86707696 (0x52b0df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea1d8b2fd27626f7b49664bf05bbde6d59bdad3
Validity
Not Before: Jan 1 10:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5ed82850988dd5a62c0551ac5f5893819215a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:1b:49:78:bc:98:27:90:4b:8d:2f:c3:b3:
38:da:bc:81:56:b9:ec:2e:2e:df:90:40:32:39:be:
ab:95:ca:ed:e8:aa:21:62:94:c6:52:4e:3a:7c:e2:
33:76:9e:7a:b1:58:aa:2b:aa:c7:8e:8c:74:e2:46:
95:9d:bf:35:5d:bc:09:0b:fb:13:60:04:42:23:96:
4a:40:db:f6:9c:e1:08:d5:ce:f3:2e:d7:eb:d2:10:
ea:29:d8:3c:45:02:26:37:5c:5a:2c:d8:3c:ae:4c:
f9:67:5a:69:8b:84:5d:f7:e2:de:a2:6d:55:a9:59:
0c:1b:b9:c7:92:15:52:ff:86:d4:fe:d5:ee:96:71:
a4:c1:c6:74:37:12:ef:bc:1e:ed:23:31:a1:37:17:
72:62:90:b6:da:74:e6:ea:fc:39:fe:5c:76:f7:df:
46:38:a2:58:61:4a:f5:a3:95:e9:e5:05:c6:69:88:
65:37:77:28:b6:56:68:15:0e:81:d5:4f:9e:56:43:
a4:0f:63:ec:06:2a:2b:74:6d:24:36:6b:6e:6f:64:
be:64:56:00:ea:56:6a:e3:43:d6:ca:2f:c6:2e:c7:
b4:49:77:09:18:e7:08:ba:84:0c:ce:a9:51:3f:e4:
64:91:a7:36:3f:b2:7e:ed:76:01:88:c6:ff:f3:1a:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:ED:82:85:09:88:DD:5A:62:C0:55:1A:C5:F5:89:38:19:21:5A:28
X509v3 Authority Key Identifier:
keyid:3E:A1:D8:B2:FD:27:62:6F:7B:49:66:4B:F0:5B:BD:E6:D5:9B:DA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqHYsv0nYm97SWZL8Fu95tWb2tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/9e2ChQmI3VpiwFUaxfWJOBkhWig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/PqHYsv0nYm97SWZL8Fu95tWb2tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.157.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8f:06:f1:bf:1c:bc:c6:63:d9:fc:97:40:cd:4e:31:2d:7c:
9c:f9:25:fc:7b:4a:7f:27:0c:57:5b:f0:08:53:df:67:f1:48:
0e:df:9e:5c:b0:49:23:04:11:e5:21:1b:07:b1:74:b3:ef:dd:
7b:20:f8:2d:e3:71:b8:1b:bc:1d:7b:45:ab:33:dd:88:e0:d9:
d6:27:85:81:9a:98:31:85:74:35:83:d0:95:ed:21:1d:71:11:
f3:07:7a:8f:c6:43:c1:d7:88:ca:93:3a:85:1a:1a:3b:3c:ce:
b8:fc:26:0a:f9:7f:d9:cf:74:12:03:8f:07:5a:b0:11:93:bb:
66:49:8a:ef:6a:3a:bc:ad:c5:74:6e:1b:b8:38:67:12:99:b8:
f4:6d:1b:28:c5:7a:2c:5d:cb:6b:09:7c:29:f7:d6:cd:ee:74:
ef:7a:f6:bf:5b:e8:58:08:5b:c4:58:36:28:dd:24:5f:5e:14:
01:f8:e5:fb:aa:a2:b8:3d:5e:be:f8:6b:7f:37:f4:d5:99:78:
08:8e:ee:31:dc:b6:e3:4f:d3:bc:d5:8f:71:39:54:97:e9:38:
30:68:18:08:b2:c6:d9:49:dd:cc:e9:37:1a:cd:86:34:cb:bb:
4b:67:ab:4e:55:ed:5b:f1:93:d0:37:d9:a5:ba:81:98:09:ec:
75:f2:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:04 2024 by rpki-client on console-fra.rpki-client.org