Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/1CSdCQkwsWAPWt667w2_6t2v7ZA.roa
File: 1CSdCQkwsWAPWt667w2_6t2v7ZA.roa (raw, json)
Hash identifier: htcUQpMcLkzRhc5vqtuq4/pcHloRI9XnlQJdiCx46Rg=
Subject key identifier: D4:24:9D:09:09:30:B1:60:0F:5A:DE:BA:EF:0D:BF:EA:DD:AF:ED:90
Certificate issuer: /CN=ba8026b1852ed6ffa6d03d8e9bb71b484640d4dc
Certificate serial: 01857246AD5D9771AAAB49575DF8A1F88965
Authority key identifier: BA:80:26:B1:85:2E:D6:FF:A6:D0:3D:8E:9B:B7:1B:48:46:40:D4:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoAmsYUu1v-m0D2Om7cbSEZA1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/1CSdCQkwsWAPWt667w2_6t2v7ZA.roa
Signing time: Mon 02 Jan 2023 11:38:32 +0000
ROA not before: Mon 02 Jan 2023 11:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.17.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ad:5d:97:71:aa:ab:49:57:5d:f8:a1:f8:89:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8026b1852ed6ffa6d03d8e9bb71b484640d4dc
Validity
Not Before: Jan 2 11:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4249d090930b1600f5adebaef0dbfeaddafed90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:ca:79:cc:d2:c0:31:b4:9f:46:70:20:4e:
dc:14:31:f1:e7:2a:a2:1e:92:81:d3:14:61:8f:57:
f6:69:e3:f5:ce:cd:79:65:8a:a6:99:98:6c:cd:34:
a9:81:ae:58:8e:76:d9:ad:ea:d1:81:48:df:2f:8f:
45:68:d1:42:3a:0b:a2:ba:40:95:cf:bf:14:d8:3b:
3b:ae:41:26:6f:ef:50:8a:59:44:62:f9:97:d2:98:
29:4e:8e:23:e5:83:88:37:51:8e:94:13:ad:fc:ec:
56:80:fd:ea:25:6c:79:ed:7e:64:e1:5c:d5:68:4f:
3b:12:db:08:62:26:2b:74:79:57:e7:30:25:78:9a:
dd:09:b6:5a:64:3a:c6:2b:a3:1f:06:99:26:f9:7f:
1f:5e:9f:49:29:61:26:f5:be:13:04:93:c4:cd:23:
46:71:cd:1e:e8:81:96:d0:eb:7f:3d:7b:e8:d0:8d:
58:6a:3c:45:02:4d:f8:bf:9f:61:4b:6b:20:f7:1e:
be:01:88:2a:6b:99:a7:62:49:b9:d6:d5:1c:a4:ae:
b3:5b:3b:53:5a:a0:34:23:dc:56:05:58:91:41:69:
14:f8:40:cd:74:16:c8:a7:2c:fd:9b:c6:1d:8f:2c:
ca:7c:dc:8b:5e:95:a9:bf:a9:e4:79:ab:7d:af:b2:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:24:9D:09:09:30:B1:60:0F:5A:DE:BA:EF:0D:BF:EA:DD:AF:ED:90
X509v3 Authority Key Identifier:
keyid:BA:80:26:B1:85:2E:D6:FF:A6:D0:3D:8E:9B:B7:1B:48:46:40:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoAmsYUu1v-m0D2Om7cbSEZA1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/1CSdCQkwsWAPWt667w2_6t2v7ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/uoAmsYUu1v-m0D2Om7cbSEZA1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.201.0/24
Signature Algorithm: sha256WithRSAEncryption
42:03:22:5c:ae:e5:ce:1b:54:38:0c:fc:b1:c7:40:27:ed:2d:
97:05:77:fa:11:88:03:18:7a:59:8c:d7:19:ad:cb:c2:27:1a:
49:c4:f0:d4:5d:78:9d:41:91:37:1e:cd:68:ba:2b:be:99:87:
d8:e7:00:6a:b3:9c:65:ae:00:d8:7b:48:d0:7b:0e:39:60:9e:
ee:73:3a:37:6b:54:27:15:82:10:a4:d3:83:80:83:66:2f:4d:
dc:d8:88:a9:29:31:8e:95:f4:24:68:a5:e7:72:99:22:90:5f:
d6:85:88:6c:41:01:51:e4:d8:31:3b:cd:08:8e:25:6e:fc:1f:
00:66:a4:bf:bd:fa:fa:ff:21:14:94:b6:38:00:79:84:ff:62:
b2:7a:36:ab:1b:02:38:08:6f:a4:e7:0c:d8:fb:b7:5c:55:df:
ed:cd:76:31:eb:09:02:dd:07:46:3c:13:c7:2b:13:be:6d:a5:
76:d9:53:07:a0:98:14:9d:9f:bc:91:ad:75:28:df:34:24:53:
be:c1:e3:94:02:19:01:26:cf:c9:80:af:1b:8b:59:35:20:4c:
36:30:9d:4a:21:b0:ab:ad:41:32:fb:66:12:40:6d:ad:b8:96:
d8:72:ca:30:46:e3:0e:6e:41:1b:05:26:95:0b:3f:0d:55:1b:
bc:24:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net