Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/RxveNgWu-a5IziEjetmZ3cJpWIE.roa
File: RxveNgWu-a5IziEjetmZ3cJpWIE.roa (raw, json)
Hash identifier: CS0VFCsFMC26ZhdcDyCBeqlvBG/KmNNLqGNXhqp8A/k=
Subject key identifier: 47:1B:DE:36:05:AE:F9:AE:48:CE:21:23:7A:D9:99:DD:C2:69:58:81
Certificate issuer: /CN=ebaf6e5387c9d95b84c010794a9f0c8db9d7f53d
Certificate serial: 0185712773CF84422B40CB5F6422AAD0F8D5
Authority key identifier: EB:AF:6E:53:87:C9:D9:5B:84:C0:10:79:4A:9F:0C:8D:B9:D7:F5:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/669uU4fJ2VuEwBB5Sp8MjbnX9T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/RxveNgWu-a5IziEjetmZ3cJpWIE.roa
Signing time: Mon 02 Jan 2023 06:24:49 +0000
ROA not before: Mon 02 Jan 2023 06:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42927
IP address blocks: 193.186.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:73:cf:84:42:2b:40:cb:5f:64:22:aa:d0:f8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf6e5387c9d95b84c010794a9f0c8db9d7f53d
Validity
Not Before: Jan 2 06:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471bde3605aef9ae48ce21237ad999ddc2695881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:76:59:9c:43:11:dc:76:1b:9d:a6:2b:38:
6d:df:e4:62:65:97:b5:7c:63:47:82:94:00:50:cd:
f1:df:85:2a:71:97:c7:70:80:66:33:3b:59:c3:3e:
7e:21:bd:b9:f7:5b:59:e5:78:af:45:32:0b:30:a1:
bf:b6:a9:e7:2a:25:46:8f:2d:02:f9:58:ca:d4:44:
87:59:a1:49:84:7d:83:9d:da:50:18:60:12:ab:d2:
e6:b0:0c:af:7a:63:ae:51:1f:2e:a7:24:05:76:3d:
59:42:dc:5b:fa:59:3a:03:4a:10:5a:a8:d0:67:57:
65:1f:69:0b:8e:3c:29:fd:55:b3:84:3d:71:c2:c3:
4f:a5:af:02:05:b1:36:2b:0c:b4:4e:ef:e0:53:4e:
2d:55:50:9a:c8:f6:e6:ff:41:ae:ad:d3:03:af:19:
70:07:ca:14:00:04:d0:b6:78:4b:e9:7f:da:3e:d4:
1d:aa:46:c5:5a:1d:94:7a:5c:0a:85:57:c6:05:02:
01:8a:95:6f:f7:24:8e:11:65:f5:ba:0f:e4:af:27:
57:bf:20:31:7a:cb:5b:04:8d:b7:08:47:d3:91:e2:
2d:4d:72:6a:e1:d2:b1:de:f1:7c:9a:c5:80:2b:27:
9b:d7:04:73:97:54:3e:02:07:83:36:b7:28:28:a0:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:DE:36:05:AE:F9:AE:48:CE:21:23:7A:D9:99:DD:C2:69:58:81
X509v3 Authority Key Identifier:
keyid:EB:AF:6E:53:87:C9:D9:5B:84:C0:10:79:4A:9F:0C:8D:B9:D7:F5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/669uU4fJ2VuEwBB5Sp8MjbnX9T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/RxveNgWu-a5IziEjetmZ3cJpWIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/669uU4fJ2VuEwBB5Sp8MjbnX9T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.255.0/24
Signature Algorithm: sha256WithRSAEncryption
39:04:35:21:8c:79:08:7d:ec:cd:8c:1f:1b:da:60:2d:21:f4:
0b:4a:49:97:b2:44:7e:20:6d:45:cf:f6:9b:d3:84:70:1b:66:
e9:c3:b0:0c:f3:e0:80:cb:d9:8d:d1:85:be:ca:4a:92:d3:85:
2c:56:a8:bc:af:0d:fb:bb:1f:b1:c5:24:3a:51:5f:c8:f6:a3:
41:04:c0:8e:d6:20:34:a0:7a:81:2c:b7:2a:0c:d2:10:2c:8b:
7e:c6:3d:6a:b8:35:ae:e8:7e:ce:c5:52:01:77:06:78:1b:2b:
ad:8f:c7:88:04:a8:29:43:03:36:45:a0:97:be:13:e1:ae:12:
49:f0:dc:67:f6:f4:ad:35:85:f5:5c:8a:89:db:f1:28:75:97:
6d:ff:f0:c5:e9:14:c4:e5:c3:86:6c:ee:e9:ba:28:f2:b7:db:
12:ec:68:ad:5f:3e:35:29:cf:7d:28:2f:c4:99:37:d7:72:34:
2f:d8:a7:e5:8c:27:a0:4e:45:ad:2d:4f:00:30:db:1c:32:69:
9e:86:43:09:f8:bd:c1:64:26:d7:e0:05:62:95:86:b6:bb:68:
9b:77:b7:49:2b:e1:fd:82:6a:07:e2:2c:ce:28:98:c7:4b:27:
e4:26:fd:82:97:45:41:31:71:75:3b:6e:b4:8c:cb:81:3c:ef:
b6:69:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:54 2024 by rpki-client on console-ams.rpki-client.org