Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/s02slZwNnn_3BoMak-O-1dWLHsk.roa
File: s02slZwNnn_3BoMak-O-1dWLHsk.roa (raw, json)
Hash identifier: jzvlqbLzfgD4nSMfOW+0x13rBDuAKWcYvBzSUqwuE80=
Subject key identifier: B3:4D:AC:95:9C:0D:9E:7F:F7:06:83:1A:93:E3:BE:D5:D5:8B:1E:C9
Certificate issuer: /CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Certificate serial: 08EAE72F
Authority key identifier: EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/s02slZwNnn_3BoMak-O-1dWLHsk.roa
Signing time: Sat 01 Jan 2022 14:06:16 +0000
ROA not before: Sat 01 Jan 2022 14:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 79.143.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149612335 (0x8eae72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Validity
Not Before: Jan 1 14:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b34dac959c0d9e7ff706831a93e3bed5d58b1ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:35:b1:d8:6a:09:ce:5d:f7:75:62:ad:19:
78:6c:fe:a3:85:dd:c9:05:de:76:d6:86:cc:c0:07:
3a:86:64:e1:04:73:3e:5a:55:f2:75:4d:c8:c4:85:
3f:3b:1b:64:80:81:d0:fe:ca:8f:6d:f6:c1:93:47:
a7:02:d2:96:f7:59:81:7c:a7:ae:76:ca:2f:71:a3:
ac:ba:7f:e4:34:e6:a0:3f:69:21:ad:70:ab:80:ac:
b4:70:74:f2:58:c5:28:6b:66:3b:9b:80:2b:e8:2d:
98:2e:30:1e:b9:be:33:0a:70:3f:b6:b3:2b:00:fc:
e1:72:1d:cb:95:c3:75:fe:1e:d0:f3:71:18:3f:38:
dc:41:ee:dd:c0:48:34:5c:e6:85:87:29:02:f7:94:
5d:80:03:78:0b:16:6c:89:a0:69:15:a8:6e:ea:9f:
7d:a6:1a:ed:0f:7d:6b:fa:00:63:32:3e:20:33:47:
33:b4:7c:05:d9:d7:f5:5b:38:6b:22:c6:39:7d:02:
48:ee:d2:00:12:a4:1d:ad:95:ad:41:3b:7d:19:d2:
6e:c9:a8:e7:79:22:6b:dc:53:5a:75:ef:d4:e0:09:
57:f4:ec:3b:d6:0a:6d:cf:c0:c7:95:49:99:db:43:
47:46:bd:00:b7:a9:cb:44:9c:e9:e0:1c:ab:6a:ed:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4D:AC:95:9C:0D:9E:7F:F7:06:83:1A:93:E3:BE:D5:D5:8B:1E:C9
X509v3 Authority Key Identifier:
keyid:EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/s02slZwNnn_3BoMak-O-1dWLHsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:69:f6:27:02:78:02:05:f2:df:ab:bb:5a:c1:91:42:9b:89:
56:e8:9b:a2:0d:dd:6f:a0:73:29:72:fc:ab:e3:9e:f5:de:43:
a3:e5:47:e1:1b:85:d9:25:75:b8:63:af:2d:e5:95:38:d6:a8:
e8:2f:b8:a7:d5:a9:d6:90:6d:ec:9c:f3:79:fd:da:9d:c5:26:
f0:53:60:a4:05:93:e4:aa:42:66:92:d6:a3:f5:2e:95:41:42:
7e:91:05:4b:22:12:64:86:e2:96:c9:86:ae:86:1c:dc:e9:7b:
76:ce:fa:0f:88:42:61:bf:1e:36:8a:67:fb:cc:79:21:ac:d1:
c1:9d:c0:5b:fa:d5:61:d3:78:09:27:2b:52:cc:53:cb:da:fd:
31:46:61:a3:8b:b8:a7:3d:a7:53:3d:d6:63:12:42:14:21:f9:
d2:8a:44:c5:29:95:19:9c:db:01:c8:e0:17:06:e2:14:7c:1b:
6a:d9:42:44:f6:0a:dc:7f:9b:53:51:ca:6e:22:81:72:e9:4d:
4c:63:1e:d4:69:cc:1b:4b:b5:0d:6e:03:97:11:d8:f5:fb:8d:
79:fd:7f:b7:cb:35:0a:77:96:81:15:1f:8c:cd:84:30:4b:37:
c9:19:ae:4a:a6:fb:0b:87:dd:b6:0e:13:4d:59:33:4b:fe:a4:
b3:2b:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:39 2023 by rpki-client on console-ams.rpki-client.org