Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/6krJiZ3q-LPg5JQGUpqg_BRSKWE.roa
File: 6krJiZ3q-LPg5JQGUpqg_BRSKWE.roa (raw, json)
Hash identifier: 5Pin0ouzlHtmkpTANX1Aho/8OxGbXIpOhCdZiOIOQTo=
Subject key identifier: EA:4A:C9:89:9D:EA:F8:B3:E0:E4:94:06:52:9A:A0:FC:14:52:29:61
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83F59A8A51AF08EAC230530960746
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/6krJiZ3q-LPg5JQGUpqg_BRSKWE.roa
Signing time: Mon 02 Jan 2023 14:35:01 +0000
ROA not before: Mon 02 Jan 2023 14:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211527
IP address blocks: 213.175.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:3f:59:a8:a5:1a:f0:8e:ac:23:05:30:96:07:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea4ac9899deaf8b3e0e49406529aa0fc14522961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:d0:01:70:a4:fe:ca:76:77:b5:49:c9:2c:
f1:bc:ef:72:98:c5:f6:e5:6b:63:23:60:76:11:4a:
5d:e0:29:5d:2f:0a:7c:93:b7:75:bf:68:5e:c9:6f:
22:27:44:b3:e2:fe:b5:09:4f:65:a5:d3:38:9f:4a:
d9:ea:20:db:99:f7:b7:ff:5e:29:79:44:6b:88:86:
50:dc:b5:78:13:7c:91:25:89:1f:73:ff:7c:42:47:
bf:46:fb:bf:62:06:05:f2:ab:0b:35:57:ed:c9:35:
42:3c:88:3c:0c:50:d8:0c:0b:7b:c6:e7:3e:e8:75:
91:a1:37:fc:1d:0b:e3:7a:1c:13:94:11:aa:c1:40:
b9:90:c6:0a:14:33:9c:b1:06:7d:ae:01:ae:c9:9e:
da:55:0f:f3:3f:4a:1e:6c:17:97:a8:0b:0c:6d:bc:
39:c3:11:25:6c:73:ec:63:44:e5:cb:59:ea:d9:4b:
fe:9e:ee:ce:bc:cf:66:25:f9:f3:9b:1b:bc:9f:b4:
10:d2:39:c3:db:cf:37:37:ff:54:de:05:52:ab:cb:
ec:94:65:a1:cc:8f:2d:24:9b:44:d8:8d:13:27:3e:
71:50:0d:29:61:f1:b0:c0:47:22:80:a2:0e:ac:c9:
6a:5c:01:76:fd:0f:43:f7:cb:a5:fc:af:81:05:5d:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4A:C9:89:9D:EA:F8:B3:E0:E4:94:06:52:9A:A0:FC:14:52:29:61
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/6krJiZ3q-LPg5JQGUpqg_BRSKWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.68.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f0:8a:66:82:b4:1a:56:a8:15:f4:d9:8f:2b:fd:2a:5d:9c:
30:f1:09:b9:8b:b1:52:5f:19:8c:c3:7c:91:86:25:7b:04:6c:
77:a0:8b:08:66:12:f0:15:09:1e:a9:84:e4:67:bb:42:ef:b1:
02:d4:fc:76:32:9d:4f:6c:e6:43:b5:32:f7:fb:73:f8:ab:aa:
4e:82:29:f5:cb:f6:a4:f5:50:5b:65:c3:9e:0c:e5:29:e7:58:
cf:cb:25:a2:98:55:41:07:33:21:b6:3e:a2:05:8e:a8:14:35:
56:d4:d6:b6:80:66:21:a4:36:d3:b9:05:e2:85:8f:b9:b9:4d:
7d:95:d5:ed:0d:ee:3e:ca:50:6b:de:ff:c1:e4:0f:f0:f3:d0:
f3:6b:ad:bd:a1:7d:d5:33:96:84:cf:ce:f9:cc:92:aa:dd:64:
a0:7f:41:f6:5e:7a:10:70:9b:6f:fe:b5:ca:4d:a1:9f:02:c2:
dd:07:70:c5:e8:04:07:61:2f:be:0c:ab:e6:f6:20:82:58:fc:
b7:ac:a7:7b:dc:1d:6d:78:47:e7:89:d9:57:37:6f:6d:ef:db:
cc:3f:90:10:18:c0:07:1d:b1:57:64:49:84:98:76:f0:7f:94:
1c:7e:66:53:a8:de:93:94:ce:8c:c2:5e:0e:8c:fa:36:8a:14:
c4:c7:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org