Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/ELRq00Y94K3cTdi3sh9LAV34jz4.roa
File: ELRq00Y94K3cTdi3sh9LAV34jz4.roa (raw, json)
Hash identifier: CJAjBn6BwKDH8epuqpyY3ymN55uC3NZWzxHcdGTHJvo=
Subject key identifier: 10:B4:6A:D3:46:3D:E0:AD:DC:4D:D8:B7:B2:1F:4B:01:5D:F8:8F:3E
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 018570708B778209C289D6E33FFD9574D718
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/ELRq00Y94K3cTdi3sh9LAV34jz4.roa
Signing time: Mon 02 Jan 2023 03:05:02 +0000
ROA not before: Mon 02 Jan 2023 03:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 193.106.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:8b:77:82:09:c2:89:d6:e3:3f:fd:95:74:d7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 2 03:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10b46ad3463de0addc4dd8b7b21f4b015df88f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7d:db:ac:94:a1:7c:3c:56:e4:91:65:8a:ae:
12:ed:56:4b:4a:e5:c9:b2:fb:4e:d9:bc:a0:41:07:
1a:52:90:c2:78:2c:7c:eb:5b:6b:90:96:de:d8:b8:
32:ac:c1:00:86:98:6a:7d:ae:85:60:87:53:e6:da:
aa:7c:72:68:83:7d:79:12:34:00:44:9e:84:8e:64:
2d:bc:b2:5a:f4:f2:0d:8a:36:66:99:35:db:1f:00:
cd:e9:6f:c2:71:e5:af:9f:6e:0a:e2:3f:7e:b2:ad:
6a:8f:d1:80:d4:e6:aa:79:64:21:56:57:b1:16:93:
55:df:08:b0:aa:5f:25:ef:6d:b5:69:bd:bb:71:7d:
f4:f0:8d:3b:64:3e:29:72:04:65:90:bb:96:26:63:
c8:91:3b:f5:16:db:d0:73:57:69:17:eb:58:2a:af:
f6:92:f1:2d:ff:07:46:ba:c6:6a:32:ea:69:87:8b:
87:bf:2f:28:0f:bd:b0:c5:be:af:bb:97:92:1f:8f:
ac:2b:e3:70:75:75:22:18:85:76:45:5c:6c:33:f1:
2e:ab:95:de:8f:50:5a:c3:c6:95:1b:5b:5d:94:62:
f2:dd:f3:08:5f:5c:ad:17:e4:40:8d:95:da:24:a7:
28:3b:64:19:6a:57:5d:f8:54:29:9f:f2:32:88:f5:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B4:6A:D3:46:3D:E0:AD:DC:4D:D8:B7:B2:1F:4B:01:5D:F8:8F:3E
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/ELRq00Y94K3cTdi3sh9LAV34jz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
06:91:6b:2e:f3:72:6f:fa:7e:ce:5c:cb:a9:68:78:c8:f3:ae:
e5:0e:1a:ac:49:5a:e6:f0:8e:86:78:22:63:e8:13:cf:fc:00:
04:de:61:8c:74:48:72:4a:de:ec:a9:85:87:25:ee:3e:44:06:
1f:0d:c2:71:95:8d:b0:e0:fc:6a:41:af:2d:48:90:2f:17:df:
0a:a9:88:b7:57:4b:cf:b8:18:16:9b:3d:cf:ce:38:71:6c:a9:
51:c1:24:46:c3:3f:35:ce:ac:0c:16:a2:c4:e3:0b:f1:fc:90:
ff:ea:92:4a:69:c3:c3:4f:32:d7:af:3f:94:84:18:36:c5:3b:
72:35:65:2b:27:8a:57:48:77:1e:7d:eb:a6:15:d1:c8:5a:db:
a3:7b:f0:c8:09:85:8e:44:3e:35:af:05:de:f9:c9:ae:c7:aa:
18:4c:2e:60:3f:72:33:17:8f:c9:2a:14:bc:0e:e1:b1:20:a5:
70:d3:8f:99:49:78:29:dd:4a:59:f3:25:69:75:0c:f8:76:64:
3a:98:5b:8e:f8:23:0a:75:97:e2:a1:c2:7d:cd:a9:88:c6:6e:
3d:d4:1a:9d:a9:b5:14:66:a2:51:dd:12:5d:3a:eb:9c:c1:b9:
73:fe:71:22:96:c0:05:81:c9:d5:dc:f5:fc:ce:fa:db:2a:6d:
a6:7f:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org