Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EZk-IJ4wOel1HqIsDCVxBJTXjZA.roa
File: EZk-IJ4wOel1HqIsDCVxBJTXjZA.roa (raw, json)
Hash identifier: dZ6tRUfscBQ/cWfJP83XC/aMIpSBoilzKo5IOMzJiOE=
Subject key identifier: 11:99:3E:20:9E:30:39:E9:75:1E:A2:2C:0C:25:71:04:94:D7:8D:90
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01865240F184BCD60E1E010224A0AC176CE8
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EZk-IJ4wOel1HqIsDCVxBJTXjZA.roa
Signing time: Tue 14 Feb 2023 23:27:13 +0000
ROA not before: Tue 14 Feb 2023 23:27:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.39.10.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
2.56.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:52:40:f1:84:bc:d6:0e:1e:01:02:24:a0:ac:17:6c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 14 23:27:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11993e209e3039e9751ea22c0c25710494d78d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:8a:a7:dc:72:51:19:9e:1a:dc:2c:31:4d:
a6:40:d9:57:6a:8f:ae:3f:f7:ef:14:38:13:5d:42:
56:69:8c:cb:18:3e:55:a3:fb:99:f8:b1:ec:7b:31:
7e:b8:e8:ac:5c:23:08:0a:40:46:ae:32:99:d0:5d:
a7:64:91:97:c9:2b:9d:cb:0f:11:47:30:34:07:91:
cb:18:39:fc:da:04:6c:ff:a9:ff:dd:1d:0e:7f:43:
a8:1e:6b:16:6d:e6:89:09:4a:2f:a8:3b:22:9f:ae:
e0:ce:17:61:58:f7:41:64:cb:71:ad:76:55:2c:35:
eb:38:0a:31:15:d7:83:e7:aa:bb:75:21:8e:eb:0c:
41:30:c4:c9:d0:fc:51:42:19:41:31:74:92:ad:55:
f0:55:f6:a9:a9:ab:f8:8a:88:50:3d:66:ef:33:9b:
b1:78:c8:85:5b:cf:dc:62:4a:29:dc:96:19:5b:7a:
ed:b8:09:a2:b7:08:58:66:1f:76:13:33:f5:e3:a0:
9a:93:95:31:62:89:a5:cd:08:86:23:70:79:e4:06:
d9:fb:b4:37:2c:24:c1:2f:93:0c:97:09:a5:d2:04:
66:2f:a1:b2:6d:61:3b:8e:32:fa:8a:4a:eb:e5:14:
28:13:b1:94:ea:9b:f4:8c:25:c9:d9:9b:1d:c0:73:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:3E:20:9E:30:39:E9:75:1E:A2:2C:0C:25:71:04:94:D7:8D:90
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EZk-IJ4wOel1HqIsDCVxBJTXjZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/23
45.12.81.0/24
45.87.173.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1c:82:34:98:6e:6f:4e:23:52:30:6d:78:7d:4f:e1:8d:6c:
ab:27:db:86:5f:5c:ed:18:fe:0b:2c:91:79:de:16:aa:11:57:
a7:9a:c1:8a:9d:ac:f7:a9:5a:91:75:c5:7e:17:cf:24:97:d8:
d2:61:6c:68:65:8f:1c:3d:7e:07:63:2a:34:57:7b:f2:55:1e:
09:f2:d0:cd:53:fb:19:21:3a:45:26:a2:a7:80:69:43:fc:de:
18:0d:b3:60:0f:f0:5b:40:2f:b2:b3:35:db:73:4b:98:4e:49:
37:8d:d5:bb:0c:87:c4:16:e2:63:4d:f3:4c:31:59:34:2a:f7:
2a:71:7f:a9:3f:1b:a1:f4:3f:5e:52:ff:18:e6:ab:e9:36:ee:
0b:9f:9c:91:b3:43:ba:b7:cd:e1:bc:0e:38:c2:f5:57:59:ea:
ff:7c:06:76:7d:56:8e:91:19:91:8d:69:ad:06:f4:85:4b:d8:
40:09:b6:85:98:14:92:2f:75:58:72:5d:b2:a9:7b:99:d4:2b:
2c:ad:56:a1:f2:d7:47:11:56:43:5b:2b:66:33:ad:a7:e0:3e:
c4:ad:6c:95:97:75:01:fb:9f:de:ff:12:53:a5:39:a4:df:96:
2b:f5:f0:6a:13:c0:c5:66:e6:93:7b:e7:61:b3:b7:30:5d:8e:
64:c4:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org