Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1929cf-ff85-4a71-8233-f8e5457ddd2c/1/2K6DEIa97BBI7QvCw7ysqN6rGnI.roa
File: 2K6DEIa97BBI7QvCw7ysqN6rGnI.roa (raw, json)
Hash identifier: WlIjYuoKvc2iS2YhvbBmsl5lYnEoDSIWLnPluc2sE4o=
Subject key identifier: D8:AE:83:10:86:BD:EC:10:48:ED:0B:C2:C3:BC:AC:A8:DE:AB:1A:72
Certificate issuer: /CN=c02e3bf979ea5119306e6ffea981fb0afaf75aa5
Certificate serial: 018570CBD8B4CAE38BC9D673DE4103D0CE7F
Authority key identifier: C0:2E:3B:F9:79:EA:51:19:30:6E:6F:FE:A9:81:FB:0A:FA:F7:5A:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC47-XnqURkwbm_-qYH7Cvr3WqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1929cf-ff85-4a71-8233-f8e5457ddd2c/1/2K6DEIa97BBI7QvCw7ysqN6rGnI.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198134
IP address blocks: 193.161.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d8:b4:ca:e3:8b:c9:d6:73:de:41:03:d0:ce:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02e3bf979ea5119306e6ffea981fb0afaf75aa5
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8ae831086bdec1048ed0bc2c3bcaca8deab1a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:e8:2b:79:9c:35:d7:fa:b1:a7:47:1f:a2:
6e:42:09:6a:5d:d2:80:ff:6c:26:c2:46:c3:e0:6a:
8a:38:60:fe:73:f4:82:f1:e8:8b:82:ec:86:03:1a:
23:c8:af:88:f9:83:8c:b2:ae:6a:44:20:5b:a3:26:
ba:20:59:d3:2c:ff:e8:30:f7:94:d9:da:0b:db:ae:
5f:ab:46:37:d1:a3:49:42:f2:59:b7:52:e0:c5:42:
40:26:66:8b:32:60:ff:82:86:48:22:5e:6a:37:79:
0e:4b:fe:e8:86:95:99:f1:16:e8:db:60:a0:05:21:
67:3b:e9:6d:3d:ab:d9:5f:5e:47:a9:88:84:c0:b8:
d0:a8:9d:ce:2a:7c:a1:bf:c5:03:3d:ef:37:e6:15:
46:23:38:22:d6:e5:f0:ea:69:74:61:5b:7c:1f:39:
9a:61:f7:13:ed:62:a7:91:67:b3:cb:e7:a4:f5:ff:
52:23:09:7e:35:77:04:d1:fb:d2:a6:22:b1:ee:6b:
80:0f:14:19:07:4f:34:e7:1a:8b:2f:9e:23:54:c9:
40:2a:08:49:91:b1:91:b2:13:ad:a1:89:f8:e5:4a:
57:11:be:d3:7c:6a:64:18:47:6f:71:1b:7f:d3:a3:
7a:69:5e:9c:67:00:ea:10:a2:0f:b6:6a:f7:39:62:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AE:83:10:86:BD:EC:10:48:ED:0B:C2:C3:BC:AC:A8:DE:AB:1A:72
X509v3 Authority Key Identifier:
keyid:C0:2E:3B:F9:79:EA:51:19:30:6E:6F:FE:A9:81:FB:0A:FA:F7:5A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC47-XnqURkwbm_-qYH7Cvr3WqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1929cf-ff85-4a71-8233-f8e5457ddd2c/1/2K6DEIa97BBI7QvCw7ysqN6rGnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1929cf-ff85-4a71-8233-f8e5457ddd2c/1/wC47-XnqURkwbm_-qYH7Cvr3WqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:01:78:70:b1:5f:35:f4:54:64:30:b6:46:18:5e:44:90:dc:
3a:a0:18:88:6c:aa:c0:1d:b8:3c:73:8b:50:4a:8f:83:37:31:
fc:06:12:4a:6e:49:f5:99:a7:ac:12:1f:a7:fa:bb:c6:2f:26:
d7:d7:d9:bd:19:c5:39:06:17:7c:4a:77:52:0f:b8:2d:f3:7b:
f2:1f:62:46:12:26:6f:71:8c:79:5f:f7:73:34:3f:af:2d:0f:
6f:54:0d:68:f8:c6:0d:b3:1f:d3:fb:d0:ce:cb:31:04:78:7f:
16:a7:38:fd:0d:d2:d6:85:c8:df:a6:5e:df:63:2b:fa:e1:cf:
39:57:ab:33:53:29:4e:cf:51:fa:6d:cc:98:1a:7a:34:4c:2b:
7f:9d:0b:22:bd:73:95:79:a3:4b:93:47:6c:89:40:e4:2c:dc:
ad:1e:16:65:01:74:2c:bb:fb:1c:fc:09:f3:d3:cf:6d:01:08:
f1:6c:b0:47:62:44:59:a0:a2:a4:46:b8:3d:4b:04:0d:43:03:
45:47:26:c5:38:81:7a:06:8f:55:3b:a5:86:5a:b3:a2:e4:72:
e5:99:c8:3e:96:a0:e6:4d:21:3c:d0:0a:16:d0:35:66:e1:13:
18:46:ac:6b:20:2e:1f:5f:ca:5e:03:ec:09:e3:3c:39:5d:0d:
55:5f:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:41 2023 by rpki-client on console.sobornost.net