Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/0XF76OLqNFyeOmKxIYxBq_1crS8.roa
File: 0XF76OLqNFyeOmKxIYxBq_1crS8.roa (raw, json)
Hash identifier: EoYGGaaigfDfxQBWXZ2PF9VT3hFWxAdpvEweejPTM7g=
Subject key identifier: D1:71:7B:E8:E2:EA:34:5C:9E:3A:62:B1:21:8C:41:AB:FD:5C:AD:2F
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E8303C2535FEEFA3C20F46723D221B
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/0XF76OLqNFyeOmKxIYxBq_1crS8.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42663
IP address blocks: 213.175.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:30:3c:25:35:fe:ef:a3:c2:0f:46:72:3d:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1717be8e2ea345c9e3a62b1218c41abfd5cad2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:5d:ca:7b:19:e0:dc:ad:a6:9b:39:76:d4:
bc:9d:98:20:15:bc:66:17:cf:a9:3c:70:98:6f:1e:
95:73:15:7c:5b:f9:65:47:2b:40:6e:99:04:a3:01:
32:35:f5:f1:e3:6c:36:67:54:7e:89:69:a3:ef:67:
cf:7e:64:2b:c2:5b:44:3e:ca:62:4b:8d:f7:79:6a:
ce:85:d2:b0:49:01:86:01:e7:7c:6d:fc:3e:f1:8f:
a9:6e:fe:a1:2a:4a:da:6a:5f:b3:61:e1:2a:76:0d:
17:4f:12:5c:f3:7e:6f:c1:7e:f2:b6:10:56:d9:6c:
a6:9b:49:c5:7b:f8:9d:28:ae:bd:7a:58:94:62:93:
f4:ac:96:10:28:51:34:0c:9b:0a:10:ea:56:8a:f2:
28:52:d0:3e:6f:ff:82:ce:3e:25:39:1b:58:5a:2f:
07:79:70:8e:73:8b:c2:c4:9a:af:ee:49:5b:70:c2:
5a:c2:fc:f3:cd:4e:3c:da:a2:3e:8c:84:d1:05:f3:
87:d6:51:8b:58:cb:ed:26:1b:76:b0:b7:33:de:b1:
37:70:7a:65:1f:14:6f:48:00:f3:06:64:f8:3a:1a:
18:c7:fe:c1:d4:bf:f3:47:e1:d4:6d:7e:2f:fc:cf:
29:0e:30:ef:b0:c4:6f:c6:a6:0d:2a:30:7a:e4:48:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:71:7B:E8:E2:EA:34:5C:9E:3A:62:B1:21:8C:41:AB:FD:5C:AD:2F
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/0XF76OLqNFyeOmKxIYxBq_1crS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fa:b6:d5:44:96:55:ce:48:b1:ff:5b:5c:34:09:30:84:73:
01:c2:93:b3:ba:1c:2c:eb:af:1f:dc:b6:43:34:77:75:00:93:
42:0e:8e:2c:25:02:63:f8:a7:0d:fb:35:60:62:38:19:f5:57:
39:3b:c8:83:65:e7:8e:8a:3c:e1:e7:6c:18:07:59:5c:c2:e2:
e4:39:60:4e:af:b1:00:7c:09:4b:59:64:5c:3a:1a:21:8f:93:
fc:54:b3:bb:e2:8f:43:26:bc:ab:d9:57:4d:5b:fc:28:98:89:
66:a9:53:53:f7:43:ed:ce:30:8a:18:27:d2:63:59:6a:f2:f5:
2f:2a:56:d7:68:06:07:34:9d:02:a1:25:7d:3a:68:16:3a:f9:
48:ef:23:78:90:d0:3e:92:0b:69:84:9b:a9:19:86:47:c6:79:
b8:36:60:a6:1a:2e:5e:28:95:13:d0:b8:de:d5:de:aa:3a:e4:
dc:7b:58:a8:57:f2:4f:90:35:a6:93:9d:2f:a5:4d:97:05:c6:
e6:ea:24:7e:1c:7d:25:0b:c8:3c:84:bf:62:3e:f7:1f:6a:b2:
2b:b9:b3:5e:d8:50:09:f1:6f:a0:61:a2:d3:c3:1c:44:cc:a2:
2e:9d:05:56:4f:91:11:af:f9:a6:b7:a4:87:6b:6c:f8:71:c6:
5a:10:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org