Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/GnZrlSj6rBt_uvhQZwxI66OVfr8.roa
File: GnZrlSj6rBt_uvhQZwxI66OVfr8.roa (raw, json)
Hash identifier: 5NnWoW1bbJJcrFO0y4KgiJmddji/ldgbhRl/RNVj3i4=
Subject key identifier: 1A:76:6B:95:28:FA:AC:1B:7F:BA:F8:50:67:0C:48:EB:A3:95:7E:BF
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83FE29F858B0CEF18F3D31C5762B0
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/GnZrlSj6rBt_uvhQZwxI66OVfr8.roa
Signing time: Mon 02 Jan 2023 14:35:01 +0000
ROA not before: Mon 02 Jan 2023 14:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211838
IP address blocks: 213.175.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:3f:e2:9f:85:8b:0c:ef:18:f3:d3:1c:57:62:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a766b9528faac1b7fbaf850670c48eba3957ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:3d:86:a0:a5:72:21:88:3f:af:ca:82:dc:
a7:ad:9a:b1:40:0c:d6:0e:88:8a:0c:62:7c:50:b3:
85:dd:fb:22:0f:b0:e3:57:38:6d:bf:d8:5a:32:64:
ca:98:12:6f:61:ad:48:b5:f8:65:33:db:40:17:94:
d2:ad:2b:c6:d3:55:ae:77:1b:4d:f7:b1:c3:d3:e8:
b6:5e:57:ed:0c:de:48:4f:07:b3:e3:a7:5c:2a:1a:
10:13:77:b5:4d:85:a4:c7:4d:78:31:24:32:3c:2a:
46:1b:e4:5d:a5:3f:78:2e:0d:f1:1a:20:a9:f5:2c:
38:7f:c3:9c:59:bd:72:f6:74:19:ca:97:ea:07:a4:
34:f1:15:74:6b:da:82:16:51:68:d1:b4:68:3c:13:
8a:8f:18:9a:26:16:3a:62:a6:99:99:cf:86:bc:d8:
a9:66:7b:42:7b:53:77:2e:b9:2d:08:d9:f2:c8:b1:
76:20:94:00:6f:32:43:15:60:69:22:f7:7c:72:60:
98:af:11:e4:0b:5e:87:dd:01:92:5e:34:ea:36:4b:
31:e6:af:7e:2f:9e:04:bc:51:93:9d:fe:32:77:89:
aa:73:2f:db:6f:e2:b4:89:ba:6d:9d:fc:09:e7:22:
f2:46:1a:74:2a:ff:c3:3c:af:0d:44:47:f1:19:07:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:76:6B:95:28:FA:AC:1B:7F:BA:F8:50:67:0C:48:EB:A3:95:7E:BF
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/GnZrlSj6rBt_uvhQZwxI66OVfr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.119.0/24
Signature Algorithm: sha256WithRSAEncryption
36:03:04:91:9a:6d:84:db:02:91:31:65:54:ab:0f:c0:5c:44:
d6:cc:59:0f:48:66:12:fa:68:9d:fc:92:4b:1c:26:a0:21:ae:
74:1e:8e:4d:51:83:bc:0e:24:0e:89:1d:43:d3:ac:a8:fd:f9:
e6:11:6c:ce:20:92:98:f9:a7:c7:56:4f:bf:15:fc:51:a2:d1:
92:85:91:1f:4f:1e:e6:e3:f6:70:96:63:51:60:e9:5b:7e:9a:
bf:21:08:de:9d:11:35:bb:a8:94:51:63:4b:0c:5d:50:19:4b:
9a:d8:3a:fb:b3:a1:88:aa:28:f7:9a:38:a1:92:3c:f2:09:5b:
9b:db:00:c7:b3:79:f4:cd:23:9e:7e:7a:1a:8d:2d:ef:0e:1e:
96:ac:f3:6c:31:18:63:1e:63:c8:2a:a2:f8:3d:b3:f5:79:c9:
c0:16:ad:34:86:8c:5b:19:c7:6f:c6:5e:3d:6b:8b:1b:11:42:
27:31:27:76:12:3f:8c:7c:9a:89:02:0b:ee:ad:57:92:97:a9:
20:da:4c:6d:79:0a:77:3f:1a:34:57:7b:e7:90:d7:e1:45:52:
e5:87:fb:fd:de:3f:ce:32:88:85:31:80:b4:31:74:64:3b:99:
89:81:90:ca:0a:15:f2:ce:46:61:93:36:14:ec:b3:55:15:c7:
4c:27:20:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org