Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/MaxESoJDLSvAa5QjznS4BoOG2dA.roa
File: MaxESoJDLSvAa5QjznS4BoOG2dA.roa (raw, json)
Hash identifier: XLRqsng5mJ0e9g/SxI2hYvuuFwn+8SWPvK0wcdFF4Hc=
Subject key identifier: 31:AC:44:4A:82:43:2D:2B:C0:6B:94:23:CE:74:B8:06:83:86:D9:D0
Certificate issuer: /CN=eb75c0ab5df4dbad8a7a44397dfd6b957972fef1
Certificate serial: 018570CBFEBF8861C5CBC55DABD0970B1A1B
Authority key identifier: EB:75:C0:AB:5D:F4:DB:AD:8A:7A:44:39:7D:FD:6B:95:79:72:FE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63XAq130262KekQ5ff1rlXly_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/MaxESoJDLSvAa5QjznS4BoOG2dA.roa
Signing time: Mon 02 Jan 2023 04:44:55 +0000
ROA not before: Mon 02 Jan 2023 04:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211183
IP address blocks: 193.187.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:fe:bf:88:61:c5:cb:c5:5d:ab:d0:97:0b:1a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb75c0ab5df4dbad8a7a44397dfd6b957972fef1
Validity
Not Before: Jan 2 04:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31ac444a82432d2bc06b9423ce74b8068386d9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:ac:b4:4e:f0:d3:fb:a8:3e:05:0f:90:a7:
fa:c8:bc:62:16:2d:72:15:30:6c:62:0f:25:3e:7d:
ac:1a:4c:16:b0:e7:d6:2a:8a:3d:ee:f1:29:4b:9a:
3e:d4:74:51:d9:79:c3:1f:d4:b8:3d:56:e1:60:51:
10:96:b6:e0:27:a4:51:4a:83:aa:fc:7f:6f:0d:11:
b8:3e:6c:3e:f9:48:82:40:de:79:dc:1b:bb:ef:79:
f8:bd:3a:7e:02:4f:9d:f3:6f:86:4b:13:e9:08:e3:
f9:69:2f:32:81:13:ae:2a:77:46:47:bd:ac:c0:06:
c5:60:c0:4a:c2:ee:59:ef:6d:61:11:76:11:ca:be:
6f:6e:50:07:8a:51:a0:8b:f2:fe:f1:49:ba:24:a2:
90:14:58:2c:bb:23:49:6c:dd:a8:02:27:c1:2f:bc:
98:81:87:c9:85:9f:90:9c:0a:3b:c1:be:42:ff:1d:
f4:68:8b:da:52:04:b2:81:12:0d:20:85:10:bd:28:
0c:25:4d:46:06:79:1c:fe:9f:22:81:3c:c3:73:eb:
6d:90:11:0b:00:e9:0e:71:9f:3f:2c:21:7d:03:d4:
c4:9f:b1:0b:1c:42:31:29:6a:31:8d:e9:d9:49:56:
61:dd:2b:aa:ec:19:b2:48:17:54:dd:7e:cc:a7:05:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:44:4A:82:43:2D:2B:C0:6B:94:23:CE:74:B8:06:83:86:D9:D0
X509v3 Authority Key Identifier:
keyid:EB:75:C0:AB:5D:F4:DB:AD:8A:7A:44:39:7D:FD:6B:95:79:72:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63XAq130262KekQ5ff1rlXly_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/MaxESoJDLSvAa5QjznS4BoOG2dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/63XAq130262KekQ5ff1rlXly_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8c:0b:d3:bc:32:e1:72:c1:68:00:68:da:57:99:8a:38:37:
c3:3d:7c:ef:47:16:bc:5f:a7:db:9a:ef:54:65:6d:f7:34:d9:
6f:48:fa:2e:d2:e5:00:93:43:52:a9:2c:e6:d8:84:66:29:03:
72:92:24:78:56:7b:6a:80:5a:e1:1c:22:5f:af:b0:9c:ac:a1:
5d:91:28:a0:ee:59:80:89:63:e8:4c:02:73:02:43:f9:6d:c3:
ca:da:0e:58:77:88:16:67:40:11:5e:85:bf:be:a1:14:e3:b0:
92:19:51:28:8d:da:df:e6:46:e1:e4:ad:5b:2b:6b:2a:83:30:
1c:18:d4:af:5b:7d:8f:45:ab:69:e2:aa:54:d3:7c:0e:e9:e0:
91:f9:87:ab:e8:c4:b9:07:ae:b4:5d:e0:98:9b:8e:00:df:89:
21:48:3d:c1:d8:42:38:38:73:d4:49:b1:c3:40:e1:04:90:7f:
14:cb:81:1d:99:5a:ee:44:96:b2:cc:1b:c6:28:af:e3:9a:a3:
b2:1b:80:e9:10:49:0e:b0:3c:9e:fe:ce:7e:0f:5b:7e:de:a0:
c1:6b:e6:e7:c7:ad:46:69:95:e5:56:3b:59:49:c7:06:26:6f:
d8:a8:7f:36:17:78:98:25:b7:f5:98:fc:d6:95:c0:75:57:16:
18:8b:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-fra.rpki-client.org