Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e8e8d0-8cdd-40f8-b989-d3df49f9c4c4/1/iVUBffIghQIufdgm7ekmEF9CwI8.roa
File: iVUBffIghQIufdgm7ekmEF9CwI8.roa (raw, json)
Hash identifier: nnIuQ8XSg7Gc4waPdZvYCHa1ucldLqnZ6YHlcFMLpq8=
Subject key identifier: 89:55:01:7D:F2:20:85:02:2E:7D:D8:26:ED:E9:26:10:5F:42:C0:8F
Certificate issuer: /CN=0ac70efecfd0fc346bf98e55aac252a36cee6e22
Certificate serial: 06BEB3C9
Authority key identifier: 0A:C7:0E:FE:CF:D0:FC:34:6B:F9:8E:55:AA:C2:52:A3:6C:EE:6E:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CscO_s_Q_DRr-Y5VqsJSo2zubiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e8e8d0-8cdd-40f8-b989-d3df49f9c4c4/1/iVUBffIghQIufdgm7ekmEF9CwI8.roa
Signing time: Sat 01 Jan 2022 12:55:49 +0000
ROA not before: Sat 01 Jan 2022 12:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35280
IP address blocks: 193.16.213.0/24 maxlen: 24
193.16.221.0/24 maxlen: 24
193.16.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113161161 (0x6beb3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac70efecfd0fc346bf98e55aac252a36cee6e22
Validity
Not Before: Jan 1 12:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8955017df22085022e7dd826ede926105f42c08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:43:98:e1:29:63:98:bd:f7:aa:12:5f:ab:
4f:a6:63:b1:ca:6e:05:28:ea:44:35:10:30:b1:7e:
36:6a:84:5a:8b:20:99:32:c2:38:90:ef:dd:0e:dd:
51:ce:18:77:93:39:c6:bf:ff:98:80:ff:a7:71:7f:
4d:f8:33:b3:f3:20:fa:b2:ed:04:4d:38:4a:fb:8b:
49:bd:b7:18:48:2e:f8:51:f1:25:3e:48:e1:36:c4:
6d:b7:65:ed:6c:f6:b3:67:79:84:0d:e9:ef:ce:41:
5f:45:61:17:32:17:07:ff:08:10:7d:70:6b:a8:00:
3f:6d:ba:bb:f3:03:12:39:4c:3d:20:88:83:a3:ff:
d9:34:9f:d3:2c:c3:87:83:b4:4f:a0:f0:5e:08:ea:
8d:0f:a0:6b:b9:ba:36:88:b2:ad:64:69:45:b8:e7:
9c:bc:d8:4a:57:de:70:51:92:e8:b4:99:04:7a:f5:
48:5d:72:8f:d0:c7:af:ec:29:5c:40:cb:b8:ec:d5:
52:eb:3f:b6:a6:be:bc:bc:32:d8:42:8c:f4:06:be:
c3:d0:00:c2:4a:79:ad:7e:9c:3c:94:2c:e0:a6:00:
64:b9:d3:d6:41:37:7b:9f:c5:05:67:47:78:da:92:
af:69:ac:d0:b5:39:7f:01:82:77:0d:27:df:f3:73:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:55:01:7D:F2:20:85:02:2E:7D:D8:26:ED:E9:26:10:5F:42:C0:8F
X509v3 Authority Key Identifier:
keyid:0A:C7:0E:FE:CF:D0:FC:34:6B:F9:8E:55:AA:C2:52:A3:6C:EE:6E:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CscO_s_Q_DRr-Y5VqsJSo2zubiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e8e8d0-8cdd-40f8-b989-d3df49f9c4c4/1/iVUBffIghQIufdgm7ekmEF9CwI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e8e8d0-8cdd-40f8-b989-d3df49f9c4c4/1/CscO_s_Q_DRr-Y5VqsJSo2zubiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.213.0/24
193.16.221.0/24
193.16.236.0/24
Signature Algorithm: sha256WithRSAEncryption
37:22:0b:68:c9:8b:ee:63:5d:7f:0c:3b:96:31:8e:4f:84:a2:
84:1c:6b:33:fc:5c:5d:be:23:93:d6:30:4f:db:26:df:e7:e4:
70:f4:e0:9d:65:50:c1:4a:25:0a:0d:b5:d6:07:64:7e:69:99:
0e:32:6e:ca:b4:f4:33:2d:a1:d5:d3:7b:b4:9d:5c:9f:94:b5:
4c:05:04:bf:bd:7c:19:95:55:f3:b5:4f:08:6d:4e:e6:40:bb:
84:dd:56:e5:8b:02:04:34:f0:7f:5b:d8:65:f0:f2:bb:ca:66:
63:8a:3d:39:ee:b4:1b:f7:87:1c:cb:20:f0:93:6e:ea:90:53:
43:c5:38:7d:69:45:bf:31:b6:db:3d:b2:b1:f8:a0:a2:42:11:
09:aa:79:5f:bb:f9:d4:d2:1e:ce:2b:13:99:93:17:8b:6c:84:
c0:9f:32:9b:eb:d2:9d:06:c8:ac:e8:8d:1a:51:19:f4:64:34:
11:53:13:b5:5a:ba:68:d1:40:dc:d4:4c:df:45:f5:a7:d1:65:
34:d9:a1:b9:57:c7:41:12:e7:11:1c:b1:37:69:73:ce:96:b2:
30:47:b8:d1:c0:38:c1:d5:9f:09:98:46:f9:c4:2a:bc:92:24:
3d:0c:ec:51:35:f6:0f:2b:8a:ac:97:a3:62:4f:9d:0b:60:b0:
b5:f9:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:43 2024 by rpki-client on console-ams.rpki-client.org