Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/2FjN6JgH10F-24nHW8K7p1PVhYk.roa
File: 2FjN6JgH10F-24nHW8K7p1PVhYk.roa (raw, json)
Hash identifier: WlfsOMr3BaaNKDxaF1NTBf/NMlFaZIM/nfehfZ5Xh34=
Subject key identifier: D8:58:CD:E8:98:07:D7:41:7E:DB:89:C7:5B:C2:BB:A7:53:D5:85:89
Certificate issuer: /CN=eadd39b698e42472f8e1d13f93f2154b66da6e32
Certificate serial: 01856CF837DC020EBDB9B0087C7DDC90963E
Authority key identifier: EA:DD:39:B6:98:E4:24:72:F8:E1:D1:3F:93:F2:15:4B:66:DA:6E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6t05tpjkJHL44dE_k_IVS2babjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/2FjN6JgH10F-24nHW8K7p1PVhYk.roa
Signing time: Sun 01 Jan 2023 10:54:44 +0000
ROA not before: Sun 01 Jan 2023 10:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.37.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:37:dc:02:0e:bd:b9:b0:08:7c:7d:dc:90:96:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eadd39b698e42472f8e1d13f93f2154b66da6e32
Validity
Not Before: Jan 1 10:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d858cde89807d7417edb89c75bc2bba753d58589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:dd:b9:70:50:01:5e:84:1d:45:31:cd:78:
52:48:f1:c7:b4:9f:c2:2f:f7:f8:f1:e4:c2:2e:4a:
8a:ee:e1:df:00:dd:a4:cc:dd:c8:e9:3e:0d:bc:ae:
9a:47:c2:30:60:23:39:0b:51:12:00:fa:d2:ad:eb:
26:57:e1:75:98:12:fa:56:29:61:b5:9e:58:4a:7a:
1d:af:e2:8e:df:f5:33:8f:e6:46:e6:cb:6a:e4:dd:
3f:d8:10:75:57:02:20:46:ae:9d:76:52:bc:93:12:
48:28:6e:73:29:44:a0:fa:da:d3:ed:f5:a9:c7:f9:
0d:9f:4d:b1:4f:73:ef:bd:37:3c:e9:79:b4:95:d2:
4c:ba:4b:cb:9d:a9:bb:fd:1a:b4:e3:db:51:51:1e:
94:c5:9a:8e:ba:64:a9:53:19:ce:06:64:79:13:69:
17:eb:ad:bc:ec:56:a5:05:4e:a4:7d:8d:cf:0e:31:
c1:0f:ff:af:9a:c7:d0:64:8e:e2:7d:ed:41:14:a2:
30:1e:84:46:9d:27:9e:84:bb:a9:58:27:dc:ec:46:
bd:e0:10:35:ae:bb:8b:fb:19:ff:b6:8a:d5:cf:2b:
19:0f:96:dc:aa:7c:c7:4e:0a:79:71:32:1f:13:bf:
58:c4:95:32:34:43:ae:e9:1d:72:b4:e3:7d:f8:99:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:CD:E8:98:07:D7:41:7E:DB:89:C7:5B:C2:BB:A7:53:D5:85:89
X509v3 Authority Key Identifier:
keyid:EA:DD:39:B6:98:E4:24:72:F8:E1:D1:3F:93:F2:15:4B:66:DA:6E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6t05tpjkJHL44dE_k_IVS2babjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/2FjN6JgH10F-24nHW8K7p1PVhYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/6t05tpjkJHL44dE_k_IVS2babjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:90:3b:1b:89:af:88:1f:72:ba:14:fd:25:59:22:24:1b:02:
e3:92:fb:bb:82:a2:da:30:d9:bc:2f:6e:87:6e:6d:f5:0f:a1:
9d:8d:28:aa:5e:53:6a:98:68:4a:60:f4:e4:61:c8:19:a6:e8:
bd:09:d9:f4:d6:c3:0f:11:89:41:cf:24:8c:e7:54:16:a2:35:
44:6a:cc:13:29:31:f4:d4:cf:bd:82:4f:c2:7f:79:b8:fb:0b:
a0:20:14:be:e0:be:ce:90:89:05:62:1d:7e:3c:33:0b:76:3c:
7f:e0:8f:28:53:6e:ad:b3:c9:8b:3f:42:a0:0e:c1:0a:5e:1c:
0d:fb:1a:f4:cf:20:3e:0e:a5:df:9a:34:94:86:81:db:f1:20:
c8:9a:68:7f:82:b4:07:62:0b:9a:b9:ab:93:81:6d:be:29:2f:
47:eb:65:13:ee:17:26:2c:3e:6c:92:ee:32:36:5e:cf:b3:07:
21:8a:1d:68:a8:de:88:d1:8d:e9:01:67:1f:fb:58:08:85:3d:
6c:3d:8e:cc:07:37:35:1a:66:78:b7:9d:15:0d:3d:b9:be:23:
c6:14:9b:b9:c2:bd:da:c0:82:34:82:90:80:e6:82:7f:3f:b6:
4a:62:cd:5c:b1:30:ef:65:0a:40:9d:4a:8c:8d:f3:a9:78:f7:
50:7a:2c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org