Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/rfECSZ5O8ite-faXZBKO3H8Wd4E.roa
File: rfECSZ5O8ite-faXZBKO3H8Wd4E.roa (raw, json)
Hash identifier: GglwPufRUjkKXguavcKqaqFsi9/+HXr47Y7QDqYojpc=
Subject key identifier: AD:F1:02:49:9E:4E:F2:2B:5E:F9:F6:97:64:12:8E:DC:7F:16:77:81
Certificate issuer: /CN=eb38b7de5619d5421b15d2debd56d4cded94247c
Certificate serial: 018964C06042F1A470EBFC7B9C3544571AAF
Authority key identifier: EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zi33lYZ1UIbFdLevVbUze2UJHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/rfECSZ5O8ite-faXZBKO3H8Wd4E.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 213.109.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:60:42:f1:a4:70:eb:fc:7b:9c:35:44:57:1a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb38b7de5619d5421b15d2debd56d4cded94247c
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adf102499e4ef22b5ef9f69764128edc7f167781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:61:5d:d7:80:52:9e:dc:11:71:82:ec:ad:
64:a5:00:7e:c8:fe:c5:45:60:a1:5a:5a:ac:a7:fa:
a6:4e:24:e2:94:1e:b7:c7:85:77:54:26:a3:e8:0e:
53:13:fd:44:5e:e1:7f:c4:56:ad:29:21:d8:37:6d:
36:6e:30:61:65:af:68:7c:93:aa:95:c7:0b:56:21:
1e:bf:ee:b1:9e:db:53:d7:fd:b7:f9:25:8e:fd:1e:
9e:df:4a:b2:24:ae:ac:c0:b1:02:b6:7e:1c:a3:56:
c5:24:bc:b1:c9:78:b4:2a:61:75:13:88:eb:c1:a3:
6f:ed:7b:c5:89:bb:bf:09:cf:33:7d:a1:a1:80:e6:
d8:4d:c3:10:88:70:be:f3:02:03:b6:26:4c:3e:b2:
3d:32:36:0a:04:de:84:1c:1c:3d:28:c3:bd:0b:a7:
5e:2f:c9:86:f0:12:53:97:c1:cf:3d:f4:67:76:dd:
1d:8f:59:07:7d:40:ab:e5:f2:bd:e4:2d:0e:0f:e3:
bc:1b:57:a9:00:50:e8:69:52:cf:25:56:55:26:f6:
3b:ae:00:f0:93:b1:e0:2b:03:83:41:a0:43:de:b0:
de:a7:ae:fd:4f:c5:38:78:44:66:0c:5c:ab:88:7c:
0f:0c:e9:0b:f9:a2:18:5c:a9:c3:97:a7:43:0c:f0:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F1:02:49:9E:4E:F2:2B:5E:F9:F6:97:64:12:8E:DC:7F:16:77:81
X509v3 Authority Key Identifier:
keyid:EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zi33lYZ1UIbFdLevVbUze2UJHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/rfECSZ5O8ite-faXZBKO3H8Wd4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:46:20:80:cc:91:ed:d6:af:be:51:d0:08:ed:dc:6f:a2:ee:
84:bd:53:bb:18:35:92:52:e7:8a:41:2b:86:78:70:8e:f0:55:
9c:41:ab:dd:54:4d:20:6f:c9:27:59:29:91:1d:69:14:e3:19:
ef:f8:30:cb:60:71:aa:e2:19:51:fd:be:a6:6e:13:08:62:ea:
3a:df:53:cb:6c:78:9e:35:b3:8e:be:a8:da:b1:91:be:ea:b8:
5d:92:07:23:7d:b6:d8:1e:37:1c:09:5d:cc:e6:76:04:3f:34:
c9:0e:b9:b9:98:fe:5f:3d:71:33:85:6c:dc:2d:8e:5f:83:fa:
d1:58:0f:6d:7d:c8:27:0b:42:7f:fd:fa:fa:0d:e1:83:48:89:
70:39:60:b5:b5:0e:26:39:02:cc:6c:85:55:21:be:bb:12:04:
c3:23:a0:31:18:af:3f:d3:d2:2d:b3:1b:20:9b:20:37:10:15:
76:3e:c2:32:ae:d7:af:b0:9b:40:71:90:c4:ce:b2:d7:7d:45:
10:36:4f:63:04:3d:34:46:f1:8d:94:c2:b1:fe:b6:50:15:3c:
c8:50:e0:9b:f4:60:a6:1b:af:b9:52:cd:4b:1b:0f:a5:6c:9a:
2b:50:89:0e:f3:20:88:69:6b:07:4b:8e:50:a8:c9:d6:53:6e:
9a:c8:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 13:26:14 2023 by rpki-client on console-fra.rpki-client.org