Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/eLqfv2rzQ-dZXQ71X9uCe0AGnbA.roa
File: eLqfv2rzQ-dZXQ71X9uCe0AGnbA.roa (raw, json)
Hash identifier: 6IyseTa4vrxb6zg1a//oRFDLqf+jJEfsrV1mQFGRzgs=
Subject key identifier: 78:BA:9F:BF:6A:F3:43:E7:59:5D:0E:F5:5F:DB:82:7B:40:06:9D:B0
Certificate issuer: /CN=4aa7df0a05bdf2ab5f060405d78d2fda00fa9cbf
Certificate serial: 0185710300ECDC82A41230B015B177F9FAE6
Authority key identifier: 4A:A7:DF:0A:05:BD:F2:AB:5F:06:04:05:D7:8D:2F:DA:00:FA:9C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqffCgW98qtfBgQF140v2gD6nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/eLqfv2rzQ-dZXQ71X9uCe0AGnbA.roa
Signing time: Mon 02 Jan 2023 05:45:00 +0000
ROA not before: Mon 02 Jan 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34425
IP address blocks: 193.107.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:00:ec:dc:82:a4:12:30:b0:15:b1:77:f9:fa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa7df0a05bdf2ab5f060405d78d2fda00fa9cbf
Validity
Not Before: Jan 2 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78ba9fbf6af343e7595d0ef55fdb827b40069db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:45:2e:45:f7:7e:ba:91:11:c2:9c:2e:70:
f8:f0:ae:ed:86:75:12:b6:68:b4:03:f4:b4:f0:8e:
51:f3:af:53:a1:f4:c1:61:c5:28:ae:b3:40:25:36:
d4:bc:53:24:cb:05:f5:1c:68:24:55:f7:48:83:ec:
e3:8a:79:d6:12:8c:04:c8:f6:0f:f7:8a:68:d6:53:
31:76:5b:b1:77:cf:92:46:28:9a:49:1b:b5:b3:06:
6c:23:ef:34:75:02:a6:20:04:3b:58:29:e3:83:e4:
95:fd:55:95:32:bb:e2:20:8c:07:34:6c:65:d2:13:
64:d6:8f:ac:17:0d:5f:f4:67:78:f4:1e:6f:22:f6:
28:04:39:c4:27:1c:8c:b8:e1:8b:ef:5c:d8:5b:c6:
74:69:7d:fa:e5:9f:1e:dc:01:6b:02:58:29:ee:51:
05:41:66:e8:9e:6e:96:ff:58:f1:c8:94:93:30:2d:
e5:54:87:be:26:50:3d:ab:ed:63:8f:0a:05:82:bf:
4b:ba:c0:9b:67:2b:37:ad:74:6a:fd:09:9f:d0:80:
14:f3:b7:06:5b:fe:98:54:9f:61:d0:d1:7c:33:42:
85:32:70:0c:25:27:02:fc:5b:00:4d:1e:53:3c:47:
f7:e9:d8:c3:e9:38:56:61:1b:d3:1e:5a:bf:66:9c:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:9F:BF:6A:F3:43:E7:59:5D:0E:F5:5F:DB:82:7B:40:06:9D:B0
X509v3 Authority Key Identifier:
keyid:4A:A7:DF:0A:05:BD:F2:AB:5F:06:04:05:D7:8D:2F:DA:00:FA:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqffCgW98qtfBgQF140v2gD6nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/eLqfv2rzQ-dZXQ71X9uCe0AGnbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/SqffCgW98qtfBgQF140v2gD6nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.13.0/24
Signature Algorithm: sha256WithRSAEncryption
34:85:8c:e5:46:86:18:bb:cf:50:b4:f4:96:3d:2b:dd:23:d1:
3c:bb:d1:51:9e:91:62:b1:3d:70:2c:e2:03:3d:41:6a:b3:a6:
e9:4e:29:ec:16:f9:7e:e2:fc:f1:6e:96:96:c2:ac:b2:83:ba:
50:dd:03:3f:6c:70:bf:23:5e:33:ea:04:09:41:0f:23:f8:c7:
21:d8:f7:07:c6:52:53:20:35:c4:a1:dc:4b:e2:15:c3:8c:dd:
33:89:e1:83:7d:12:36:c3:d7:63:57:55:53:dd:95:ac:2b:0c:
14:fc:36:0f:86:54:21:37:4a:e7:b5:00:a3:cf:f0:f6:34:31:
b7:f1:5e:96:33:f1:d0:f6:80:6a:38:21:dd:6c:1a:62:da:65:
d2:68:be:d3:bf:84:3a:6a:d8:01:7c:99:97:8d:7e:96:83:bc:
4e:65:ba:0d:2c:a0:4b:df:50:8a:00:a0:ef:00:23:19:e5:67:
85:c0:1b:42:d8:17:4a:a0:83:2b:70:25:96:1f:e9:ed:13:4f:
e7:45:8b:cd:2e:8f:f4:c6:2a:4b:79:f3:8d:ec:d6:da:f5:10:
b4:26:40:98:eb:a3:be:2b:05:f6:34:ee:e7:67:52:c9:02:57:
69:fe:0b:12:5a:51:9f:9d:e8:d6:89:0f:82:17:f5:0e:56:38:
49:7f:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:05 2024 by rpki-client on console-fra.rpki-client.org