Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/dEHHuaVD7KfWyTSGq1cVvekNLfY.roa
File: dEHHuaVD7KfWyTSGq1cVvekNLfY.roa (raw, json)
Hash identifier: J9Rw7dPKfXpvUtIWhyx2qflmQOmsDX4993wVQYG0ubg=
Subject key identifier: 74:41:C7:B9:A5:43:EC:A7:D6:C9:34:86:AB:57:15:BD:E9:0D:2D:F6
Certificate issuer: /CN=c43256a81911d13cd80c53673e0517ff225c6d08
Certificate serial: 01850FBC431190C200B6AA67267A40DF9ACA
Authority key identifier: C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/dEHHuaVD7KfWyTSGq1cVvekNLfY.roa
Signing time: Wed 14 Dec 2022 08:24:34 +0000
ROA not before: Wed 14 Dec 2022 08:24:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210636
IP address blocks: 193.228.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:bc:43:11:90:c2:00:b6:aa:67:26:7a:40:df:9a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43256a81911d13cd80c53673e0517ff225c6d08
Validity
Not Before: Dec 14 08:24:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7441c7b9a543eca7d6c93486ab5715bde90d2df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:4a:59:2a:64:e3:79:7e:38:d4:63:c3:95:
17:ab:af:5e:99:c1:46:f1:4b:75:de:d6:99:45:f5:
e8:35:54:cf:0c:59:b2:61:8b:c6:60:af:29:e1:a6:
c3:c4:c6:58:0f:a0:7c:28:6e:f8:9a:67:05:c3:e7:
36:21:81:01:fb:cc:01:35:16:0d:30:a5:82:64:58:
82:54:a1:70:c8:da:ed:ab:7c:e3:5f:36:57:81:64:
6f:98:06:85:a4:87:49:93:6f:44:39:8c:ad:ac:b7:
07:78:5b:40:c4:8b:f5:e6:a7:b1:61:82:7d:81:62:
e8:e7:43:e8:50:41:f4:97:be:14:4a:45:56:7d:5d:
0c:b6:e8:3c:86:08:c2:63:ee:ce:9e:24:70:5f:02:
68:e9:96:a2:9d:8f:cf:15:a3:96:9e:b5:d0:a7:f4:
02:57:76:32:00:8c:fa:22:05:40:f3:1f:2e:63:c8:
c0:ec:a7:4a:c4:9e:90:5c:c2:c6:76:88:ed:37:31:
2e:24:a8:37:12:37:99:c9:d1:07:bf:11:40:26:0f:
dd:40:c3:fa:c4:64:aa:47:e9:a4:1e:d8:66:f9:97:
6f:be:1c:b5:66:21:b2:9b:bb:1e:ed:f0:78:a9:6d:
15:5c:a7:21:fb:71:52:49:13:76:e8:c4:50:55:04:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:41:C7:B9:A5:43:EC:A7:D6:C9:34:86:AB:57:15:BD:E9:0D:2D:F6
X509v3 Authority Key Identifier:
keyid:C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/dEHHuaVD7KfWyTSGq1cVvekNLfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c9:09:35:f7:74:20:8c:a6:84:95:a2:fd:85:ff:4a:a8:29:
85:b8:63:ef:e8:21:bb:e6:eb:21:fe:1c:2e:3b:9d:15:c1:fd:
ce:04:6f:eb:da:cd:7b:21:6f:ff:aa:7d:52:f0:44:70:10:3d:
e7:82:33:c1:64:6d:fe:ca:c5:e3:84:fb:71:87:48:2f:dc:ad:
91:11:52:ae:b1:90:67:d7:85:0f:70:7d:89:c5:83:03:10:80:
6b:97:9d:76:33:47:51:3b:08:54:9b:9f:7f:81:18:57:d0:7c:
c1:47:29:a4:b9:93:5d:d7:53:1c:3a:04:7e:32:0f:dd:b0:c6:
06:8e:cb:7c:12:ac:e6:56:d0:49:a3:55:e7:32:14:26:36:91:
02:78:be:93:7a:77:3e:10:6a:a7:92:22:04:2b:5c:4b:3f:99:
c5:39:8b:c5:94:94:e7:15:14:2a:4d:e4:0d:51:b5:62:94:3f:
1d:e3:56:1a:ac:31:4a:3d:01:78:7d:af:f7:ff:0c:e3:04:30:
4a:dd:19:3a:cd:9d:a5:90:c0:1d:22:79:b6:cb:e3:c5:b1:da:
e7:24:d4:d2:be:f6:8e:4a:18:d9:f7:d1:6f:56:61:22:d2:da:
ba:57:b0:b9:dc:b8:6b:c5:18:21:99:ba:f8:a3:51:44:ea:9f:
5b:08:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:41 2023 by rpki-client on console-ams.rpki-client.org