Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/2ujt3gCm69693lB564TiG2x7v3E.roa
File: 2ujt3gCm69693lB564TiG2x7v3E.roa (raw, json)
Hash identifier: kQLCq2hPIsqomyw2ZRhBel9Y3LCm8QaWpKYhXUDPEFg=
Subject key identifier: DA:E8:ED:DE:00:A6:EB:DE:BD:DE:50:79:EB:84:E2:1B:6C:7B:BF:71
Certificate issuer: /CN=c712041bc389ca87c960f3d13e73d5eafc01c152
Certificate serial: 01856E0B016C88C0B53B2004779F6F049E9B
Authority key identifier: C7:12:04:1B:C3:89:CA:87:C9:60:F3:D1:3E:73:D5:EA:FC:01:C1:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxIEG8OJyofJYPPRPnPV6vwBwVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/2ujt3gCm69693lB564TiG2x7v3E.roa
Signing time: Sun 01 Jan 2023 15:54:53 +0000
ROA not before: Sun 01 Jan 2023 15:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.35.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:01:6c:88:c0:b5:3b:20:04:77:9f:6f:04:9e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c712041bc389ca87c960f3d13e73d5eafc01c152
Validity
Not Before: Jan 1 15:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dae8edde00a6ebdebdde5079eb84e21b6c7bbf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:d1:88:94:00:6f:79:1e:d0:4d:f7:37:4b:
c1:99:d0:b1:34:91:20:5b:68:d2:63:97:61:7f:64:
b4:f9:5c:26:ef:a7:70:d5:a1:db:1f:e9:25:e6:10:
f8:6e:e2:5b:ac:6e:37:3d:65:c6:77:c6:c8:39:a3:
d1:bd:60:e4:9a:17:55:09:07:c5:8a:11:d2:e5:46:
f3:72:ee:ca:9c:a3:a8:a9:7c:d0:b4:b5:24:cf:e5:
54:16:b6:d8:29:30:1c:72:f6:74:83:43:41:30:89:
cf:92:64:e5:b8:0c:49:3b:4b:d8:1f:0d:05:aa:b4:
bb:0e:c0:d0:3e:76:67:69:86:eb:ae:f1:f5:97:5c:
a8:73:ac:2e:8b:f0:08:45:b5:04:35:5b:ee:8f:8c:
78:a7:07:1f:ce:02:a5:79:67:44:3c:ad:79:24:b4:
9a:87:3c:77:56:c5:b1:94:d3:15:b2:2c:13:c6:33:
0e:11:d7:14:2a:06:7e:d8:22:26:2a:af:13:ac:fa:
03:73:ec:db:58:18:1c:e5:4f:00:f0:50:4e:c8:20:
32:ba:ec:17:8c:71:0e:db:a3:99:b8:24:97:2f:7c:
95:9d:74:25:2f:97:21:7c:23:db:9e:89:77:63:65:
66:15:78:98:97:87:e8:18:e1:bf:08:bb:fe:61:26:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:ED:DE:00:A6:EB:DE:BD:DE:50:79:EB:84:E2:1B:6C:7B:BF:71
X509v3 Authority Key Identifier:
keyid:C7:12:04:1B:C3:89:CA:87:C9:60:F3:D1:3E:73:D5:EA:FC:01:C1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxIEG8OJyofJYPPRPnPV6vwBwVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/2ujt3gCm69693lB564TiG2x7v3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1261cd-d9b4-4c0b-b694-1b349af20560/1/xxIEG8OJyofJYPPRPnPV6vwBwVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.231.0/24
Signature Algorithm: sha256WithRSAEncryption
02:49:b4:11:26:e3:e9:54:f5:f7:5f:bf:e8:27:08:16:b4:f3:
29:e6:b0:fd:57:df:c8:4c:cc:42:52:ec:5d:96:cb:ae:b8:73:
2a:33:b8:43:0a:c5:f5:23:71:86:36:d7:8b:f8:8a:fb:bd:0f:
2d:eb:35:c3:5a:94:95:ab:b7:7b:fa:b8:06:c9:d1:b6:14:bb:
ea:3a:73:9e:a4:52:2a:30:95:d4:ba:aa:59:12:29:07:ce:49:
d6:21:7d:91:44:d6:bb:1a:39:b5:94:ca:fc:21:64:97:7f:69:
b5:ac:01:c6:62:e4:87:83:c4:ac:bb:3b:4d:f8:db:89:9b:16:
8c:75:fe:1a:a2:95:6c:08:49:30:17:f6:ca:3c:73:dd:f8:92:
68:3a:31:dd:52:45:eb:41:21:25:30:0e:2e:f4:4c:93:13:14:
d7:75:57:42:74:9d:db:8a:c7:43:43:13:e1:95:97:69:4a:a1:
81:dc:58:3e:b6:58:42:fe:53:6f:86:0b:88:a9:1d:f5:eb:9c:
b6:e6:be:d3:f4:7e:12:a7:28:9a:95:e8:4d:c1:03:c0:e3:64:
dd:e6:2f:eb:f8:00:1f:ca:21:f7:69:71:2f:11:a2:01:5e:8b:
3b:f0:16:1b:ab:b2:41:ce:cd:13:18:18:c6:83:da:5b:70:a6:
9d:c9:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org