Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/11TP45FFaKq7ezmVyIptkCeKkx8.roa
File: 11TP45FFaKq7ezmVyIptkCeKkx8.roa (raw, json)
Hash identifier: 1bEYg9kFXk3ny+HGS9qrF2x879w+OX5Rztm6qlzgh7w=
Subject key identifier: D7:54:CF:E3:91:45:68:AA:BB:7B:39:95:C8:8A:6D:90:27:8A:93:1F
Certificate issuer: /CN=218edf6448492384ffc8dba3ce677d77ab68306c
Certificate serial: 04D6C5A3
Authority key identifier: 21:8E:DF:64:48:49:23:84:FF:C8:DB:A3:CE:67:7D:77:AB:68:30:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY7fZEhJI4T_yNujzmd9d6toMGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/11TP45FFaKq7ezmVyIptkCeKkx8.roa
Signing time: Sat 01 Jan 2022 00:55:18 +0000
ROA not before: Sat 01 Jan 2022 00:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.109.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81184163 (0x4d6c5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218edf6448492384ffc8dba3ce677d77ab68306c
Validity
Not Before: Jan 1 00:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d754cfe3914568aabb7b3995c88a6d90278a931f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:ab:13:44:37:ce:49:60:c4:e5:44:9b:5c:
7b:b5:5c:75:73:e4:53:66:0c:f7:7e:06:11:9f:a3:
c2:55:61:e4:40:15:e1:7b:8a:be:64:73:e7:5e:e5:
83:cf:c0:29:19:ad:af:56:a8:c6:8a:7b:d1:b5:1e:
42:de:96:fd:3a:97:71:cf:bf:1c:96:4d:77:9d:22:
3c:6a:04:eb:2e:b9:d4:23:56:3f:93:0e:20:85:19:
67:c2:a6:ee:e3:6d:79:c5:91:11:8e:9b:08:8a:cf:
44:b9:e0:3b:e4:3d:ae:04:4b:8c:6a:39:12:26:46:
77:1f:cb:80:a7:bd:e1:8b:c5:22:34:31:47:42:b3:
1d:74:95:f7:12:ff:54:16:9e:4e:ee:f8:25:44:cc:
04:8b:aa:47:db:50:80:bf:cb:ca:60:d1:cc:d5:ef:
22:e4:a1:dd:4e:9e:cd:81:9d:cc:3c:e0:79:7a:e3:
47:40:cb:d9:d0:7f:eb:53:09:52:9b:7b:4b:1a:b2:
b4:d8:b1:c5:cc:a7:9a:2d:16:01:a1:80:ce:82:06:
db:4c:30:40:ee:07:73:12:7f:e4:0e:89:93:51:48:
6e:f4:40:ed:7b:ed:97:73:73:8b:22:78:1f:3d:b0:
59:fa:51:b4:c4:82:d9:56:59:e4:ec:58:9c:cb:e2:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:54:CF:E3:91:45:68:AA:BB:7B:39:95:C8:8A:6D:90:27:8A:93:1F
X509v3 Authority Key Identifier:
keyid:21:8E:DF:64:48:49:23:84:FF:C8:DB:A3:CE:67:7D:77:AB:68:30:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY7fZEhJI4T_yNujzmd9d6toMGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/11TP45FFaKq7ezmVyIptkCeKkx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/IY7fZEhJI4T_yNujzmd9d6toMGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.213.0/24
Signature Algorithm: sha256WithRSAEncryption
04:60:f3:89:6f:1e:1e:55:58:34:c2:86:2c:62:17:e9:88:ad:
0a:d4:c8:ae:c2:2c:39:1b:ac:97:d6:49:1b:be:d5:43:40:5f:
b6:de:79:4b:d8:25:35:9d:6c:3b:6a:aa:3d:76:6f:ee:e5:79:
fd:7e:29:87:06:06:10:26:09:8a:77:cc:52:9c:3b:47:ef:44:
4c:b2:25:48:ea:9a:97:d8:a7:94:e8:da:aa:92:d9:a6:07:42:
32:cd:97:97:e6:72:fa:e9:c3:14:d0:6f:c8:7d:0b:e3:97:48:
14:3d:9b:f9:11:8b:04:ed:f6:a4:2a:4d:18:4b:b3:0e:3d:bf:
8b:fe:f1:da:df:6e:c8:74:5b:3a:49:7c:fe:8e:44:ba:b5:f8:
11:0a:1b:e6:52:fd:69:99:e8:de:66:09:8c:4f:b7:e2:08:35:
86:9d:65:5f:50:1c:93:24:d5:72:d3:a9:1a:3f:ed:f8:7f:fd:
2b:b4:8f:5a:4c:b7:4b:9c:dd:37:e9:b7:6e:96:57:72:a6:7c:
9a:3e:f9:b5:c7:1d:4a:dd:19:df:68:ff:cc:1c:9e:bd:ab:07:
59:15:ce:ac:25:eb:ad:72:cf:ac:09:8f:b8:35:84:bb:fa:75:
c6:d1:fc:67:ec:cd:48:3f:da:e6:50:b3:72:04:47:b4:c1:04:
8c:16:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-fra.rpki-client.org