Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/EpXAUZSF7SKkBFAI9A5upBZxTdk.roa
File: EpXAUZSF7SKkBFAI9A5upBZxTdk.roa (raw, json)
Hash identifier: DuFTOPI3eWvI1vLxTKvZ9JhEAyAnQfxFWY73szs96rU=
Subject key identifier: 12:95:C0:51:94:85:ED:22:A4:04:50:08:F4:0E:6E:A4:16:71:4D:D9
Certificate issuer: /CN=dd4988b0956206cf86bb680568a247723a46a94b
Certificate serial: 018891C33FE2F2D59547FCDBF9D398DA71D0
Authority key identifier: DD:49:88:B0:95:62:06:CF:86:BB:68:05:68:A2:47:72:3A:46:A9:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UmIsJViBs-Gu2gFaKJHcjpGqUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/EpXAUZSF7SKkBFAI9A5upBZxTdk.roa
Signing time: Tue 06 Jun 2023 17:31:12 +0000
ROA not before: Tue 06 Jun 2023 17:31:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47821
IP address blocks: 91.242.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:c3:3f:e2:f2:d5:95:47:fc:db:f9:d3:98:da:71:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4988b0956206cf86bb680568a247723a46a94b
Validity
Not Before: Jun 6 17:31:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1295c0519485ed22a4045008f40e6ea416714dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:16:b6:c9:6f:ca:09:0f:da:8f:62:67:77:
c9:58:30:fe:ad:d8:57:61:ab:d1:2b:cf:ed:8e:3e:
1d:ae:00:aa:dd:70:a2:d5:88:21:d7:da:88:2f:0d:
cd:a1:55:bc:cd:c9:3f:2e:fa:1d:ef:64:b2:84:e5:
5e:0a:fb:f4:3d:be:4e:ce:9d:ec:20:e7:d5:59:e5:
2c:8b:24:59:3f:19:c2:c2:88:71:03:38:6c:89:77:
30:69:de:e3:9f:c3:5d:60:d6:b1:66:7f:5a:b7:1e:
7b:4f:8f:94:5a:8a:70:4a:1b:c3:9e:98:18:b3:fd:
14:0c:12:79:e3:ec:59:1b:f4:69:ca:f4:d3:c6:bb:
3d:55:ee:f6:be:a0:0a:7b:33:ec:52:78:d0:3b:20:
67:40:9f:f2:67:2e:97:64:4b:55:9a:46:ab:e6:18:
f9:18:d2:ed:60:d2:c5:f1:36:fc:94:b7:35:e6:9d:
92:5f:37:d1:c9:e4:65:1e:73:15:45:19:23:44:0d:
fd:f4:8b:16:16:1d:80:e2:27:c9:1d:24:c3:80:8d:
3b:56:cf:f9:a3:cc:69:eb:17:47:11:53:3b:87:51:
2d:6c:86:67:9b:7c:2a:af:04:1d:55:fc:8c:a6:62:
a5:3d:67:13:18:60:54:7b:73:c4:6e:a6:37:ec:b3:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:95:C0:51:94:85:ED:22:A4:04:50:08:F4:0E:6E:A4:16:71:4D:D9
X509v3 Authority Key Identifier:
keyid:DD:49:88:B0:95:62:06:CF:86:BB:68:05:68:A2:47:72:3A:46:A9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UmIsJViBs-Gu2gFaKJHcjpGqUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/EpXAUZSF7SKkBFAI9A5upBZxTdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/3UmIsJViBs-Gu2gFaKJHcjpGqUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fa:8a:d8:20:a2:4f:e3:0d:76:d3:ee:46:b1:15:60:99:5b:
26:25:15:41:fa:ce:5f:24:54:a3:7d:1b:3a:e2:3e:65:98:a1:
bb:c0:74:4a:d0:b7:90:c4:a2:e5:72:fb:15:74:55:9e:a1:08:
2d:95:86:b6:09:da:4e:d5:8d:aa:02:c2:9d:ec:48:5f:af:f1:
f2:94:c0:ed:2c:03:d9:9c:a6:65:e2:e8:65:d8:ba:d1:71:b1:
07:38:75:43:ce:70:fa:be:84:83:cf:5d:d5:8e:64:c0:81:45:
ea:61:f1:08:f5:ba:38:4e:2a:52:2c:a1:af:29:ce:91:38:97:
33:1e:64:6b:e5:b6:bb:29:df:a6:ac:53:65:d3:99:4b:06:65:
d1:03:32:5f:50:e4:66:f8:e6:d1:b0:53:a2:35:5c:4f:98:5e:
c3:f9:71:4f:c7:4a:ef:5c:a9:5e:da:01:49:1f:69:c9:3b:27:
4a:87:72:28:f6:8b:f2:ab:35:87:c4:f8:7a:d9:a6:c1:02:39:
d5:cd:d3:86:eb:d2:88:bd:11:18:11:80:2e:93:ce:60:8b:26:
6a:43:2f:44:65:c7:6c:ec:95:04:ab:99:ad:e3:dc:dc:97:db:
2f:78:5e:60:d4:77:1f:91:5f:67:29:ce:7a:e7:d5:6d:e7:9d:
bf:b3:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 15:53:01 2023 by rpki-client on console-ams.rpki-client.org