Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/EPwx1OALrvUE3_Qd80cUwjsop4A.roa
File: EPwx1OALrvUE3_Qd80cUwjsop4A.roa (raw, json)
Hash identifier: LYqXtfA186Q1/WElUFEz4X4JZ0BFNFRA9UMw2a4z4xY=
Subject key identifier: 10:FC:31:D4:E0:0B:AE:F5:04:DF:F4:1D:F3:47:14:C2:3B:28:A7:80
Certificate issuer: /CN=33adf9eef1dedc7b35e0da464bfd77a49a5691ee
Certificate serial: 01857102CFA08AF342C34DECA893A0615D20
Authority key identifier: 33:AD:F9:EE:F1:DE:DC:7B:35:E0:DA:46:4B:FD:77:A4:9A:56:91:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6357vHe3Hs14NpGS_13pJpWke4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/EPwx1OALrvUE3_Qd80cUwjsop4A.roa
Signing time: Mon 02 Jan 2023 05:44:47 +0000
ROA not before: Mon 02 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.3.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:cf:a0:8a:f3:42:c3:4d:ec:a8:93:a0:61:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33adf9eef1dedc7b35e0da464bfd77a49a5691ee
Validity
Not Before: Jan 2 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10fc31d4e00baef504dff41df34714c23b28a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:43:95:4e:3a:64:68:69:7c:e4:44:15:55:
8b:1b:f4:95:2f:b4:20:1a:e3:a4:22:bd:ed:e7:5c:
d6:4f:b2:ab:a6:a9:fe:c0:1b:15:31:69:d2:b9:8b:
5c:03:7f:a5:a8:12:41:f8:9b:b0:e9:07:6d:62:6c:
9e:47:47:ff:bf:31:07:54:43:f9:5d:ba:80:37:0c:
59:d1:08:37:f6:32:c7:25:3a:96:a7:0c:66:2a:b7:
4d:6d:b4:71:da:24:d8:c2:2f:0c:df:b8:d1:f7:03:
03:7b:a5:28:0e:3d:a3:1f:fe:0c:a6:76:da:ea:20:
d1:4f:7b:31:f2:b0:54:e4:19:dc:68:3f:ec:04:f4:
75:95:88:30:45:ad:93:d7:82:42:f7:e6:89:77:60:
b8:b6:e9:54:a0:9c:e8:3e:4a:48:d8:db:d1:1b:0d:
dc:d7:1b:d4:ab:c3:14:17:62:d5:db:a3:7d:90:28:
83:62:43:e2:94:2c:ed:dd:3e:7a:35:68:7d:be:a7:
bf:cd:52:8c:1a:3a:8e:16:70:cb:b8:00:c8:14:9e:
48:2e:5e:ae:7b:d4:08:75:c2:6e:8f:7b:fc:0d:1c:
10:8e:d5:f1:e3:60:35:b5:18:7b:1a:29:a9:b3:7c:
90:44:76:75:be:a8:dc:7c:48:f3:a5:3c:9c:6e:c2:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FC:31:D4:E0:0B:AE:F5:04:DF:F4:1D:F3:47:14:C2:3B:28:A7:80
X509v3 Authority Key Identifier:
keyid:33:AD:F9:EE:F1:DE:DC:7B:35:E0:DA:46:4B:FD:77:A4:9A:56:91:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6357vHe3Hs14NpGS_13pJpWke4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/EPwx1OALrvUE3_Qd80cUwjsop4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/M6357vHe3Hs14NpGS_13pJpWke4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.181.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:97:07:84:d1:5f:3e:cd:13:fa:33:bf:64:fc:e9:37:54:
d6:31:46:b1:9d:83:dd:66:30:5c:d2:64:41:3b:0f:44:23:dd:
5c:b4:0c:f2:50:ed:f1:a4:52:f9:76:00:77:4c:cc:35:66:3e:
25:70:ad:e3:50:43:8b:c4:d8:53:3e:e7:c6:19:49:d7:39:c2:
1c:fb:ea:eb:b2:51:10:4a:0f:8e:c0:ea:dd:73:4f:7a:d0:34:
d3:52:3d:52:e0:e0:19:5a:03:b7:d7:b1:bf:a2:52:73:6f:fa:
6d:b7:b9:10:49:36:66:1d:2f:90:c0:27:f7:a6:2b:5c:da:d1:
1b:52:46:db:f4:6d:d9:d3:c5:82:ea:73:39:5c:ab:76:f9:6e:
db:da:e4:14:c0:dc:d4:20:4f:2c:b1:95:a4:bb:9b:d0:0a:43:
35:20:e7:20:a8:2c:14:41:14:ac:96:79:26:91:f7:9b:00:a4:
1a:9c:7c:e5:20:30:48:2b:08:85:9a:f8:07:db:79:4d:b4:37:
d2:4a:69:b2:4c:33:7c:88:2e:4c:9e:de:e7:cd:ad:a9:72:b0:
2b:31:e9:7e:e4:29:09:ce:5b:9a:79:67:32:5d:09:32:49:78:
32:c5:10:74:d0:0a:82:5d:93:df:76:6e:ff:61:99:95:79:af:
ad:1c:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org