Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/3Pr1-Y3H8Rq2XkgMakBiI87XB78.roa
File: 3Pr1-Y3H8Rq2XkgMakBiI87XB78.roa (raw, json)
Hash identifier: 10kaPELONEj3zbE5psbz6kPyy7QbUnQqZXTsnbBo7W4=
Subject key identifier: DC:FA:F5:F9:8D:C7:F1:1A:B6:5E:48:0C:6A:40:62:23:CE:D7:07:BF
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E838FE4B0CF7A73ACBD255077C430E
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/3Pr1-Y3H8Rq2XkgMakBiI87XB78.roa
Signing time: Mon 02 Jan 2023 14:34:59 +0000
ROA not before: Mon 02 Jan 2023 14:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60629
IP address blocks: 94.100.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:38:fe:4b:0c:f7:a7:3a:cb:d2:55:07:7c:43:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcfaf5f98dc7f11ab65e480c6a406223ced707bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:c3:dd:94:3c:86:4f:61:1f:11:63:7c:e4:
39:fd:e5:56:4f:9c:f6:1b:03:7e:1a:8f:1a:c0:4a:
49:08:76:14:00:16:93:37:9f:43:68:bd:d3:2b:b3:
48:20:33:e9:9e:5c:ad:4d:80:dd:96:81:ec:17:5b:
37:64:38:f4:32:e6:80:b9:f7:11:45:87:c6:c1:70:
e1:7d:ac:e8:63:8c:5c:86:7a:01:c8:58:e4:1f:f2:
db:4e:bc:4e:b0:4e:db:ea:7b:92:9c:8f:75:dd:f5:
24:6e:3f:cd:2b:02:b9:3f:26:68:3a:2f:36:4a:65:
22:5b:47:52:fb:33:54:47:f5:26:01:61:ba:ca:d0:
b7:a1:87:14:09:0c:6c:c3:4b:6d:69:08:97:28:2d:
43:49:f5:b0:06:23:c1:31:65:dc:09:11:f3:46:e2:
98:7b:56:54:dc:35:aa:35:93:0d:97:4e:96:46:ad:
ef:96:a4:fc:65:e9:3b:85:36:45:24:fb:b9:ae:17:
53:71:98:5c:a5:ba:4f:d0:88:d5:fc:ca:ce:a3:fa:
7b:c6:a3:a7:40:7e:47:9c:35:55:cb:30:27:bc:bb:
6f:7b:8d:92:2a:dd:66:14:e9:5e:78:87:42:c3:2a:
05:c1:38:ff:ee:81:b9:d1:70:db:c7:a2:21:68:ff:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:F5:F9:8D:C7:F1:1A:B6:5E:48:0C:6A:40:62:23:CE:D7:07:BF
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/3Pr1-Y3H8Rq2XkgMakBiI87XB78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.9.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ec:e3:65:7a:47:a8:a0:ab:22:73:b8:7d:40:fd:77:c6:1c:
b3:f3:34:dc:02:4f:54:a8:55:27:d8:61:98:61:89:0c:a8:14:
5d:53:40:ed:cf:15:3e:ba:63:9d:0a:8d:54:b5:e5:09:ac:5a:
e2:d4:05:3f:f9:d0:7b:17:8a:a5:ba:15:7d:60:4a:86:37:8b:
55:4b:50:4e:5b:bd:7c:87:86:cb:28:17:55:2b:b6:22:93:c2:
28:87:17:23:30:83:1d:0f:33:d2:3e:0b:91:2b:e3:1d:73:67:
df:9e:f4:46:f8:e9:d8:cc:37:0f:56:8f:59:2a:91:f0:24:26:
b2:82:74:44:e5:58:7c:e7:26:7b:df:2a:2f:19:01:c0:1b:de:
c0:f8:fc:04:5f:8c:a9:bb:95:00:e4:b6:a9:e3:1b:82:e7:85:
8b:ec:f2:3f:cf:5b:50:5c:8f:b5:54:bd:e5:d7:7f:df:7b:62:
d6:43:1b:ee:a4:04:85:22:af:68:49:58:d8:b2:95:e4:67:c4:
fb:24:36:ed:8f:e3:67:63:ee:a8:04:36:e5:ed:4f:c6:4e:6d:
fe:f0:c2:96:56:15:de:68:cd:d4:78:81:a0:ad:e5:44:ca:64:
08:4f:6b:43:c4:3f:7f:2b:5f:95:fc:77:c5:46:d4:36:d0:bd:
b7:34:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org