Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/V7HXQqWFA7ELCCjcF8F-ETJ-Qhs.roa
File: V7HXQqWFA7ELCCjcF8F-ETJ-Qhs.roa (raw, json)
Hash identifier: hlNE8zoK4zsFybcm9Af6CTkqk3XISsAW/+adBm++sgA=
Subject key identifier: 57:B1:D7:42:A5:85:03:B1:0B:08:28:DC:17:C1:7E:11:32:7E:42:1B
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018CC86F87501C6224DAEEE0ABB1935C1A31
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/V7HXQqWFA7ELCCjcF8F-ETJ-Qhs.roa
Signing time: Tue 02 Jan 2024 04:30:01 +0000
ROA not before: Tue 02 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202097
IP address blocks: 213.192.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:87:50:1c:62:24:da:ee:e0:ab:b1:93:5c:1a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Jan 2 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57b1d742a58503b10b0828dc17c17e11327e421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:26:b5:d4:92:10:f7:7e:fd:91:8b:64:f7:
fe:ae:32:bc:81:ab:f3:3d:73:a6:9a:03:f7:27:b8:
73:31:15:b3:da:26:85:67:e3:77:92:4b:a9:f5:a5:
f2:5b:62:c8:da:c3:c0:f7:70:22:b5:8d:8f:3b:75:
e7:67:17:92:79:ff:79:3c:fa:f8:2b:fc:38:5b:e6:
96:a3:16:af:54:c7:a0:aa:78:b0:2b:4d:bd:4d:7b:
2e:59:9b:27:e6:7b:c2:46:7e:2b:da:ad:dc:8e:23:
c8:7c:5d:85:a9:61:4f:ee:93:0e:64:92:70:e5:5a:
92:84:44:fc:20:73:ae:5c:4c:4c:7e:0f:56:66:73:
95:fc:13:45:5a:cb:1d:50:48:ba:d2:57:4d:1c:5d:
84:c6:a6:de:3e:65:02:1a:11:8f:1a:53:57:23:98:
36:fd:94:6a:fa:a1:e7:45:3d:1c:05:ca:8b:47:51:
2a:23:91:c4:e7:54:74:40:bf:56:2d:43:c4:67:f3:
34:b9:f2:b4:4e:fc:b7:05:42:5a:d6:79:46:4e:c7:
e0:03:1e:a5:5f:68:84:0c:1e:3a:cb:45:08:9b:54:
40:aa:76:62:92:e4:a3:4e:8e:04:75:88:14:d4:88:
dc:68:2d:b3:35:44:9b:e2:d3:d2:33:ef:d2:e7:9a:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B1:D7:42:A5:85:03:B1:0B:08:28:DC:17:C1:7E:11:32:7E:42:1B
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/V7HXQqWFA7ELCCjcF8F-ETJ-Qhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.243.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6b:a9:23:0e:60:2f:81:90:21:b9:82:94:ce:89:43:d5:00:
89:04:86:61:6a:6a:dc:5a:fc:d1:ed:a9:54:58:0a:51:9f:61:
21:1a:a5:e3:73:24:ca:e8:b2:1a:66:5b:aa:99:dc:6f:ca:6d:
c6:28:5f:84:a6:d4:19:ea:d8:6a:13:81:2d:99:e4:ef:01:9d:
b1:b4:cc:8d:2e:6c:f9:4d:9c:0d:fa:c0:5e:7f:fc:60:1b:d6:
c6:4d:bc:10:51:30:84:9d:4c:1f:68:82:5d:58:e9:7f:77:60:
4d:16:9a:5d:49:c9:bd:0a:30:60:0a:03:4c:8d:67:aa:6a:a7:
96:9c:2e:24:46:46:9a:58:d5:e5:83:5a:dd:87:32:3a:3d:f1:
e2:16:bf:68:16:8e:4c:f8:01:95:b5:5e:65:43:5c:ce:21:ba:
df:a4:be:c4:d0:4e:19:48:b4:91:74:02:be:2b:12:55:e8:ef:
98:1b:9e:7b:cc:69:f1:e6:27:67:99:cd:af:9a:59:58:67:4e:
1a:02:a5:6f:8e:a7:1f:23:77:c9:dc:b0:e8:3a:8e:ce:10:2f:
7e:1e:73:1a:5c:8e:12:1f:d2:e3:ff:1c:1d:4b:2d:b7:33:f0:
fc:a8:29:63:8d:66:40:fb:e3:64:3f:57:c5:57:af:bf:9d:25:
23:67:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 13:23:57 2024 by rpki-client on console-ams.rpki-client.org