Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/EJi-ZFi_0Vj557r6-vhmBtMKPVA.roa
File: EJi-ZFi_0Vj557r6-vhmBtMKPVA.roa (raw, json)
Hash identifier: Mq/rR8lwDX39R0omBVlY84rBTsD+0MArSDaeLFmA+1E=
Subject key identifier: 10:98:BE:64:58:BF:D1:58:F9:E7:BA:FA:FA:F8:66:06:D3:0A:3D:50
Certificate issuer: /CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Certificate serial: 018571279032FBFDAF4295F01E23173A523E
Authority key identifier: C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/EJi-ZFi_0Vj557r6-vhmBtMKPVA.roa
Signing time: Mon 02 Jan 2023 06:24:56 +0000
ROA not before: Mon 02 Jan 2023 06:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207480
IP address blocks: 195.39.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:90:32:fb:fd:af:42:95:f0:1e:23:17:3a:52:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Validity
Not Before: Jan 2 06:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1098be6458bfd158f9e7bafafaf86606d30a3d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:12:98:0d:bc:c0:f2:3c:eb:a7:6c:13:4b:
cc:5c:3e:93:29:32:94:7b:b0:fe:5c:a0:6c:d4:1a:
22:94:bf:56:fd:dd:ec:8e:43:6e:bd:c9:7b:8d:50:
b3:d5:94:45:2b:be:32:0b:76:29:6d:b4:69:1e:b3:
16:a2:ae:2e:1c:69:bd:53:35:7f:32:60:f7:bb:c6:
18:cf:92:2c:67:33:2a:d9:0d:1f:33:64:f3:ce:65:
7a:35:a9:2e:35:34:ae:c9:19:cd:fb:e7:39:0b:28:
b7:2d:e6:c6:fd:25:bb:98:47:74:48:f2:15:d9:f2:
7a:50:78:92:22:ec:74:d8:8e:cd:9b:88:f8:6d:bb:
a5:15:9a:2a:7e:9f:31:a2:9b:3f:8a:bc:23:45:fd:
51:7a:d1:c2:1b:06:87:01:20:64:29:d4:e4:19:41:
9f:88:a6:f0:a8:5d:2c:e0:76:96:b4:2c:55:91:23:
0f:25:3f:f3:f0:88:a2:04:e2:f8:b0:35:5f:15:6f:
f5:06:91:d5:3c:85:cd:d0:a8:a4:af:bc:1d:b4:c9:
ee:44:62:1a:d2:2a:53:c4:7a:9a:7e:b2:c6:f8:d9:
4b:77:05:b2:d1:76:ce:5c:1e:79:84:b4:bd:61:fd:
2b:31:4a:f9:97:e7:22:ff:a6:22:e7:be:08:81:13:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:BE:64:58:BF:D1:58:F9:E7:BA:FA:FA:F8:66:06:D3:0A:3D:50
X509v3 Authority Key Identifier:
keyid:C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/EJi-ZFi_0Vj557r6-vhmBtMKPVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/w31BJ82v6b-10_Ttiiry4D9tYH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.220.0/24
Signature Algorithm: sha256WithRSAEncryption
17:7c:78:12:7a:40:8c:d3:a3:7b:02:52:d8:e9:cd:63:86:3b:
61:e9:4c:0a:8f:73:25:6b:41:5b:b6:03:a3:ea:68:89:55:50:
c7:d8:5f:6f:6a:02:0d:20:dd:5d:ee:01:58:dd:84:ea:f9:d8:
61:7d:d8:0c:24:41:03:ce:80:b3:3e:94:28:19:1c:c6:08:15:
b7:4a:5b:2f:f3:4c:3f:6e:28:49:8b:6c:0c:c9:be:8b:d1:29:
f3:86:b5:f7:16:30:13:4c:ca:34:b2:e3:d6:5d:e1:06:12:40:
8f:bd:26:3f:79:ea:76:34:c5:b3:c5:fc:17:51:22:33:88:0b:
32:97:4d:f4:ed:d3:5c:1d:fe:3a:c8:1b:81:be:a8:80:21:68:
7d:d9:99:5f:0c:5e:82:d7:30:01:69:fc:14:92:79:4a:8f:c5:
90:58:db:af:9c:be:f7:74:8f:80:05:06:5d:b6:f5:55:92:bd:
10:fb:92:59:f9:4d:62:17:88:cf:5b:93:20:e7:77:34:e9:bd:
5d:38:a2:3b:bb:09:d8:58:70:09:d6:0d:ba:38:08:e2:05:e1:
09:13:e9:52:1f:76:0d:ec:57:46:5e:78:d5:d2:fa:f0:8d:17:
d5:ce:9f:f0:53:a3:4a:54:7b:74:ed:be:a6:a9:19:b5:ad:ab:
77:c8:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org