Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/2508c5-84e9-4d66-bffb-53dc23d10733/1/EnMEJQjhhm68IK97Qwliyg2e-S0.roa
File: EnMEJQjhhm68IK97Qwliyg2e-S0.roa (raw, json)
Hash identifier: GBAqyQMJKsvKQw28PWS6Cvax3B/y0YTL277XwMT+w30=
Subject key identifier: 12:73:04:25:08:E1:86:6E:BC:20:AF:7B:43:09:62:CA:0D:9E:F9:2D
Certificate issuer: /CN=cf6680f898961fcd4b2012f0e8008b5c5180ef42
Certificate serial: 01856D0165A0CDC93C934DE1AAA0E63353BD
Authority key identifier: CF:66:80:F8:98:96:1F:CD:4B:20:12:F0:E8:00:8B:5C:51:80:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2aA-JiWH81LIBLw6ACLXFGA70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/2508c5-84e9-4d66-bffb-53dc23d10733/1/EnMEJQjhhm68IK97Qwliyg2e-S0.roa
Signing time: Sun 01 Jan 2023 11:04:46 +0000
ROA not before: Sun 01 Jan 2023 11:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.221.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:65:a0:cd:c9:3c:93:4d:e1:aa:a0:e6:33:53:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6680f898961fcd4b2012f0e8008b5c5180ef42
Validity
Not Before: Jan 1 11:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1273042508e1866ebc20af7b430962ca0d9ef92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:88:a3:dd:de:b3:3a:b2:b9:d2:69:09:94:
a4:41:12:94:9a:b1:98:0f:d1:1c:62:28:0b:b4:6c:
11:82:78:ad:60:7d:e2:ac:c5:36:91:d3:30:26:4d:
7c:25:d8:d3:82:23:76:6b:84:9a:71:e5:c2:4a:00:
c0:7f:65:1e:13:45:ad:45:56:5d:8e:41:d8:f0:0f:
25:73:43:40:7d:de:09:b0:a9:63:cc:ea:93:e3:c7:
02:78:97:bd:55:d0:48:f9:65:8b:92:99:f0:dc:1e:
f2:20:8f:1e:bb:74:9e:dd:26:f3:da:20:cc:0b:88:
d0:6d:aa:6d:05:10:b6:e5:3b:e0:cc:e2:aa:4b:c5:
48:50:5c:29:af:ab:f4:94:21:00:8a:cb:80:8a:08:
ef:1d:2e:81:9e:9b:84:e0:fe:c8:84:01:43:6e:b0:
f7:30:a8:82:98:b1:0f:32:51:10:41:a0:6e:80:be:
9c:d1:66:d1:81:7b:00:9c:f0:57:4d:76:cc:92:eb:
3e:25:1d:a6:f1:dc:0a:65:46:98:98:13:03:ba:33:
f3:01:23:98:c6:64:59:f3:36:29:6a:de:bf:2f:60:
f7:e1:38:86:dc:b8:88:6f:a3:47:2c:ed:c5:e1:fe:
c4:a7:65:84:e3:3c:08:0c:8d:48:a3:d5:0b:e5:34:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:73:04:25:08:E1:86:6E:BC:20:AF:7B:43:09:62:CA:0D:9E:F9:2D
X509v3 Authority Key Identifier:
keyid:CF:66:80:F8:98:96:1F:CD:4B:20:12:F0:E8:00:8B:5C:51:80:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2aA-JiWH81LIBLw6ACLXFGA70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/2508c5-84e9-4d66-bffb-53dc23d10733/1/EnMEJQjhhm68IK97Qwliyg2e-S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/2508c5-84e9-4d66-bffb-53dc23d10733/1/z2aA-JiWH81LIBLw6ACLXFGA70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:de:b4:80:d6:67:fc:e7:76:15:1a:8d:ac:bc:d0:5d:8d:d7:
d7:1b:5f:59:a1:be:03:14:eb:cf:65:06:d4:91:96:70:b4:17:
e5:e0:d3:c8:c0:93:d4:54:49:ec:a6:d5:d6:7d:e5:93:bb:1c:
e2:bd:13:20:83:c3:dd:8e:85:de:f2:20:99:3b:0e:29:60:34:
4a:d7:cb:7d:00:79:bd:16:bf:6c:d9:d5:71:e4:07:e0:45:b5:
7e:ea:62:46:03:ec:9b:63:39:2e:5a:f3:9a:d5:0f:0c:0d:39:
c6:6e:92:90:c3:33:a4:4b:30:4b:8a:ed:0c:86:5c:56:0c:1a:
67:c2:38:2d:7d:90:20:9a:5d:db:79:8c:36:7a:e9:15:5e:d5:
df:2a:e7:d4:6b:0e:cc:03:f0:3f:c7:45:1c:fe:37:66:bc:c4:
0e:5f:42:3d:83:bb:cf:0e:34:6d:07:4b:1a:64:89:8d:85:17:
a1:20:59:d2:8f:c6:6a:cb:4e:86:09:f1:eb:a9:24:04:e2:8f:
7d:3f:ac:5b:7d:8b:36:06:fb:38:e4:ff:6c:b8:5c:49:6a:b3:
b7:7d:e4:25:4e:4a:d5:b8:b5:4f:bc:86:6a:95:ea:52:65:9c:
0b:75:59:39:03:b1:9d:56:9d:a4:fb:b7:3e:17:21:29:bc:01:
ce:6d:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org