Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/l1Z3kZoM8W5zPrg7vCHmNMt7pKw.roa
File: l1Z3kZoM8W5zPrg7vCHmNMt7pKw.roa (raw, json)
Hash identifier: 93wckuylAxa9B/EyemS0wrgkcD9PvS7Sw7sNZcxa8U4=
Subject key identifier: 97:56:77:91:9A:0C:F1:6E:73:3E:B8:3B:BC:21:E6:34:CB:7B:A4:AC
Certificate issuer: /CN=9beaa3f4124ae4fb8d36c416a6b190026a9edb79
Certificate serial: 018331F8768AE8FA62971E07B4227B447DC6
Authority key identifier: 9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-qj9BJK5PuNNsQWprGQAmqe23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/l1Z3kZoM8W5zPrg7vCHmNMt7pKw.roa
Signing time: Mon 12 Sep 2022 13:51:50 +0000
ROA not before: Mon 12 Sep 2022 13:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 213.217.10.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:f8:76:8a:e8:fa:62:97:1e:07:b4:22:7b:44:7d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9beaa3f4124ae4fb8d36c416a6b190026a9edb79
Validity
Not Before: Sep 12 13:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=975677919a0cf16e733eb83bbc21e634cb7ba4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:d6:43:9a:55:f2:c9:0c:26:5f:77:49:a5:
a3:56:c5:61:d2:74:bc:eb:b3:9f:51:19:89:3b:b9:
54:f6:01:c1:f8:51:78:25:82:c9:f3:aa:50:1f:39:
c6:9e:1b:aa:de:9f:68:47:e1:4f:ab:ba:12:60:ce:
79:f2:dd:06:00:7e:78:80:71:3d:f2:ac:58:23:63:
0a:e7:11:74:24:b7:3b:6a:3b:fe:0a:70:84:04:fb:
21:b8:74:23:c8:42:60:37:f8:c8:d1:43:41:ed:06:
73:ff:3e:37:3c:ee:7f:2f:03:78:2a:b5:7e:fb:9d:
3a:65:10:77:82:db:25:a9:b2:af:5c:e7:bf:2b:a1:
49:81:08:9c:24:19:a3:42:7e:09:38:25:14:9c:5e:
ad:f7:ae:84:5f:da:97:17:45:3d:55:d1:9b:c4:5f:
fa:05:93:85:46:8a:b3:92:46:f7:47:b2:41:16:63:
01:ae:cf:c2:bf:4b:b1:eb:5e:f5:58:4a:72:41:fa:
c4:92:24:13:1c:e8:7a:ab:1f:96:60:d0:bf:07:ac:
29:62:7f:e9:48:99:01:58:32:61:ea:76:77:2d:f8:
36:10:ab:ab:1e:f6:9d:0d:26:f0:2b:70:30:24:47:
1f:b0:25:69:50:81:d6:d4:04:bd:ec:27:45:73:ee:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:56:77:91:9A:0C:F1:6E:73:3E:B8:3B:BC:21:E6:34:CB:7B:A4:AC
X509v3 Authority Key Identifier:
keyid:9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-qj9BJK5PuNNsQWprGQAmqe23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/l1Z3kZoM8W5zPrg7vCHmNMt7pKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/m-qj9BJK5PuNNsQWprGQAmqe23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.10.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a6:94:18:af:a4:8a:4e:a0:40:d1:56:2e:07:82:50:30:98:
16:e4:d5:ee:9d:99:ff:8a:ad:e3:43:14:f0:c8:68:52:48:03:
63:39:fb:e0:6d:29:9e:c9:c4:ec:e5:56:9e:16:90:4c:70:1a:
e0:fc:3e:c4:97:0d:01:fe:77:43:bc:fe:b4:6b:60:ae:61:b2:
04:10:9b:0f:b1:70:aa:11:04:d0:ed:b6:01:e8:c6:0f:f5:32:
d9:d6:ff:f0:27:d1:10:91:2f:79:d0:7f:91:49:49:84:d8:45:
c1:dc:73:71:83:ba:b7:e0:85:72:0c:33:b6:1d:c5:6c:14:ee:
18:74:fa:37:af:b6:2e:8e:73:b0:ba:b3:d0:ba:c9:a4:9c:03:
ef:af:c1:5a:46:51:05:bb:66:04:e9:b6:8d:c6:56:3b:0d:c8:
eb:64:d2:18:2a:d8:f9:34:6e:43:8e:f9:ac:f6:92:72:ee:0c:
64:44:c2:53:c7:a6:dd:83:b8:63:25:45:c3:92:c3:15:7a:c1:
36:5e:76:3f:af:3f:db:3e:43:6f:28:b9:28:5a:a6:f8:44:f6:
d7:12:57:11:5b:f4:4e:89:71:9f:ae:5e:25:2a:75:84:dc:89:
5e:7d:10:b9:6f:05:2a:78:43:91:04:2b:7c:e8:26:cb:43:ba:
b2:32:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org