Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zkvDE0nUxC3DpwM2XX-8f_AjM94.roa
File: zkvDE0nUxC3DpwM2XX-8f_AjM94.roa (raw, json)
Hash identifier: O5PAxoMVNrzPVJu0+6CQpvHQLE05+Ati3Su/4qj2M3g=
Subject key identifier: CE:4B:C3:13:49:D4:C4:2D:C3:A7:03:36:5D:7F:BC:7F:F0:23:33:DE
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 094F0C1E
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zkvDE0nUxC3DpwM2XX-8f_AjM94.roa
Signing time: Sat 01 Jan 2022 12:04:03 +0000
ROA not before: Sat 01 Jan 2022 12:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 193.37.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156175390 (0x94f0c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 12:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce4bc31349d4c42dc3a703365d7fbc7ff02333de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:81:cb:3c:53:72:53:37:bb:f1:06:54:fb:
51:a7:74:7b:1b:24:ec:99:1e:81:b8:70:38:65:68:
18:60:d5:23:e2:fe:56:31:be:29:04:f0:8e:d9:71:
3c:de:d0:3e:a4:6c:24:91:ff:1b:1f:0c:2e:37:e1:
54:b2:a4:89:93:89:a7:58:10:23:b9:9c:66:27:64:
0a:44:55:58:d4:7a:46:c6:da:5d:2f:13:c3:7f:6e:
67:1a:24:32:6c:62:61:9d:20:00:98:5e:58:94:08:
5d:d2:fd:7b:f2:1c:03:a0:d3:0a:2b:c5:81:b9:f4:
20:0f:fa:c5:db:22:ab:01:93:87:6e:4d:2a:a5:f8:
6d:f3:13:f7:6f:34:c6:10:b7:b5:3c:82:68:f7:30:
d5:3d:61:ee:f5:c5:54:ef:6c:6a:63:28:54:10:90:
ee:e3:b0:3f:3b:b6:1d:ae:40:32:41:14:87:24:d7:
9a:c2:12:98:1c:4d:10:4d:04:c2:4c:9a:37:5f:68:
eb:ef:8b:3a:5d:30:4a:46:f8:3b:80:42:21:e6:63:
c8:03:e2:cd:71:24:b3:08:36:b0:5d:f8:f5:98:11:
a7:54:1f:94:5e:0e:85:0c:a3:d7:35:af:1f:59:99:
11:d1:f8:17:3e:5e:3f:d3:46:5d:0b:ff:f9:ae:17:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4B:C3:13:49:D4:C4:2D:C3:A7:03:36:5D:7F:BC:7F:F0:23:33:DE
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zkvDE0nUxC3DpwM2XX-8f_AjM94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.239.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bc:af:e6:2d:f2:93:fb:3f:e7:08:fc:6e:b3:5a:df:41:11:
e5:2d:f0:de:9d:3b:29:55:aa:33:05:9a:46:5d:2e:49:36:78:
dd:0d:55:9c:63:bd:e0:87:f6:ad:4f:87:8b:90:ae:94:d8:53:
ef:77:2a:28:d9:19:95:63:aa:c3:df:0c:82:32:7e:33:98:77:
19:87:de:bf:e5:cd:11:ce:31:6f:16:5a:8f:25:d9:c5:5e:51:
2d:f9:4a:16:85:e8:0c:dd:db:ca:a3:3a:81:33:37:78:c5:07:
5e:c4:25:05:ff:3c:27:15:05:d9:38:e1:7d:a6:11:a9:68:e0:
f1:73:b3:15:7f:f5:f8:d4:32:15:5a:75:b4:5c:a4:3f:1e:1f:
96:89:1e:ed:c3:42:d9:4a:2f:c8:9c:36:12:3d:e2:67:e7:9a:
83:45:6f:b0:db:d3:cc:84:83:a4:69:23:2f:63:a1:a4:23:14:
be:85:b8:72:65:4f:24:b9:7a:b4:85:56:7e:f4:ce:8c:17:41:
51:3e:9e:e7:4c:38:ef:29:71:8d:95:cc:f1:4c:c8:26:e8:1e:
e8:11:96:a7:6c:6f:67:60:07:42:13:dc:a6:79:7b:da:59:cc:
02:6e:7a:52:a5:70:f1:b9:2b:8f:0a:35:d7:0b:cd:07:f4:0a:
a4:24:dd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org