Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bdd4bb-56ec-4762-958e-ecd998e05714/1/DEmtKgJdytCFTwotet7C1J_VKXk.roa
File: DEmtKgJdytCFTwotet7C1J_VKXk.roa (raw, json)
Hash identifier: F8xip4ZpSTpK2FEvwiKjU+GP2yhUm2Wtx3unIccPGLI=
Subject key identifier: 0C:49:AD:2A:02:5D:CA:D0:85:4F:0A:2D:7A:DE:C2:D4:9F:D5:29:79
Certificate issuer: /CN=29eca6737beea4c03b8e0678bea9838e1e52bf32
Certificate serial: 0185730379502DC7A4CF2E29B919A6A9AC80
Authority key identifier: 29:EC:A6:73:7B:EE:A4:C0:3B:8E:06:78:BE:A9:83:8E:1E:52:BF:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Keymc3vupMA7jgZ4vqmDjh5SvzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bdd4bb-56ec-4762-958e-ecd998e05714/1/DEmtKgJdytCFTwotet7C1J_VKXk.roa
Signing time: Mon 02 Jan 2023 15:04:45 +0000
ROA not before: Mon 02 Jan 2023 15:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34517
IP address blocks: 195.182.212.0/23 maxlen: 23
194.102.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:79:50:2d:c7:a4:cf:2e:29:b9:19:a6:a9:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29eca6737beea4c03b8e0678bea9838e1e52bf32
Validity
Not Before: Jan 2 15:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c49ad2a025dcad0854f0a2d7adec2d49fd52979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:06:a3:1a:b2:95:75:3f:42:4f:7a:05:2f:
54:13:cf:15:da:9b:b8:fd:fc:6a:fc:ad:5c:ed:37:
56:aa:a8:02:cf:af:b7:e6:f4:d7:45:4b:22:90:5d:
83:83:f5:17:8b:bd:c8:02:5d:d8:49:c6:75:9a:cc:
24:3c:bc:2d:98:2c:fb:46:66:fd:19:57:a4:9f:20:
c6:a6:3a:6a:bc:01:d4:7e:1f:48:13:7e:86:64:9f:
82:a1:a3:38:21:c1:f6:f5:eb:55:1e:bd:eb:61:47:
ad:e1:a7:fe:86:30:a8:91:c8:2e:0c:43:f0:d5:7a:
3e:e4:00:10:a0:5e:3f:cb:6a:b4:ed:52:6e:85:93:
54:94:3a:cd:60:75:bc:8b:05:c7:e9:a0:64:2d:76:
34:49:e2:35:f6:ec:52:ab:98:58:f4:9b:f7:a1:de:
f3:35:ed:99:d2:a5:0c:c6:3e:af:73:04:91:da:11:
b1:47:22:d0:9a:54:f5:f3:5b:f0:90:0c:12:37:0e:
ff:4e:ab:c7:d2:a0:80:46:62:4f:15:94:23:e9:58:
ea:f0:c5:9e:0b:0e:da:a0:3b:9c:20:f6:7a:37:b3:
be:df:33:7c:42:8e:7f:31:70:44:b8:cd:3f:a2:83:
7e:42:a3:76:a4:eb:2c:6d:01:8f:6f:1e:46:01:1f:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:AD:2A:02:5D:CA:D0:85:4F:0A:2D:7A:DE:C2:D4:9F:D5:29:79
X509v3 Authority Key Identifier:
keyid:29:EC:A6:73:7B:EE:A4:C0:3B:8E:06:78:BE:A9:83:8E:1E:52:BF:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Keymc3vupMA7jgZ4vqmDjh5SvzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bdd4bb-56ec-4762-958e-ecd998e05714/1/DEmtKgJdytCFTwotet7C1J_VKXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bdd4bb-56ec-4762-958e-ecd998e05714/1/Keymc3vupMA7jgZ4vqmDjh5SvzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.215.0/24
195.182.212.0/23
Signature Algorithm: sha256WithRSAEncryption
70:8c:20:36:9f:ad:1a:0f:68:a3:30:01:ee:c4:8e:74:76:89:
b7:3c:b5:f3:1a:eb:66:6f:9a:54:e3:d8:d1:e1:6a:30:6c:a7:
8a:6a:90:d7:c2:e5:7a:5f:7e:d0:3a:9b:30:f4:4e:66:c1:9d:
8e:cf:81:dc:67:4c:86:d4:65:d8:30:4b:ac:19:34:f7:ad:a8:
28:28:6c:32:93:4c:21:2f:bb:2a:93:eb:83:7a:60:05:94:2e:
1c:87:29:e6:c8:d3:f3:2c:04:37:1d:72:50:07:54:7a:7d:68:
e9:f3:fc:5b:8a:ab:44:f1:6b:05:c6:45:4b:61:b8:fa:2d:20:
91:ed:98:31:63:3f:d0:2c:64:15:d6:b0:aa:eb:dd:79:61:04:
b5:a6:df:04:1b:41:fd:4a:dc:9a:cb:b1:d5:c0:02:e8:64:d4:
22:cc:e1:3e:bc:d6:40:10:15:a2:02:7a:e5:23:fc:12:aa:39:
76:74:f0:27:de:ec:f7:1f:c4:d3:a2:b5:bd:b5:a7:33:d3:c6:
87:26:08:08:0a:96:a4:3c:97:c2:c0:57:ac:63:05:ae:76:c1:
84:40:db:64:13:fb:80:db:e7:e6:bf:72:39:c3:38:c6:60:8d:
68:54:b6:13:07:e9:3c:24:1b:17:21:a3:d6:f5:8a:9e:1c:16:
ff:05:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:37 2024 by rpki-client on console-fra.rpki-client.org