Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/ED3FbUu3gxPvEbPONzvci8ubicY.roa
File: ED3FbUu3gxPvEbPONzvci8ubicY.roa (raw, json)
Hash identifier: 3UgGnPHCOeduVo/u/PeGysiJwmBPNTqjdPtvn8/mTjE=
Subject key identifier: 10:3D:C5:6D:4B:B7:83:13:EF:11:B3:CE:37:3B:DC:8B:CB:9B:89:C6
Certificate issuer: /CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Certificate serial: 018572837D3837C4556B64441358DC959B6B
Authority key identifier: 2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/ED3FbUu3gxPvEbPONzvci8ubicY.roa
Signing time: Mon 02 Jan 2023 12:44:57 +0000
ROA not before: Mon 02 Jan 2023 12:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400529
IP address blocks: 193.243.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:7d:38:37:c4:55:6b:64:44:13:58:dc:95:9b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Validity
Not Before: Jan 2 12:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=103dc56d4bb78313ef11b3ce373bdc8bcb9b89c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:e2:a4:1b:ea:d3:bd:8f:67:ef:26:35:03:
90:d3:c9:54:79:7f:86:34:b9:17:05:a0:7f:42:32:
2c:19:09:df:2a:cb:78:fb:58:e4:64:bc:df:2b:9a:
32:03:fe:84:7c:b8:47:ee:58:39:0a:4b:26:6c:27:
cb:ed:f5:dc:f1:67:a6:2a:09:b0:26:05:66:03:9d:
38:a6:34:03:63:01:d2:f4:36:46:8b:5c:94:48:00:
25:03:26:86:14:36:b8:05:08:95:d7:75:ab:d9:92:
fd:18:b4:95:7c:c3:18:93:7b:fa:5d:e3:63:64:0d:
c6:34:17:be:07:e8:03:a5:69:b8:c7:ba:c9:46:5c:
83:0f:94:7b:92:8d:a0:d4:a4:27:bc:a8:f6:e0:ac:
3a:cf:07:a2:dd:76:0d:d2:27:78:f4:4f:ed:ec:c2:
e8:75:67:a8:dd:87:cc:d0:8c:d6:85:32:dd:73:42:
0a:f8:0e:15:5b:b3:ed:ad:b1:09:1f:21:64:93:c1:
3c:44:0f:0b:cc:75:56:91:17:b1:d1:14:7c:14:9e:
fc:1f:3f:69:a9:2e:ca:77:f4:41:00:b4:78:50:67:
4a:c5:d4:cc:bc:2e:f9:0b:d4:02:3b:e6:28:90:d1:
4f:20:cc:e1:e4:ab:87:4b:fe:82:31:ab:85:24:fe:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3D:C5:6D:4B:B7:83:13:EF:11:B3:CE:37:3B:DC:8B:CB:9B:89:C6
X509v3 Authority Key Identifier:
keyid:2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/ED3FbUu3gxPvEbPONzvci8ubicY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.190.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e1:fa:a4:28:b2:2d:c5:41:86:5f:b9:36:1f:35:8a:61:8f:
8e:1e:97:40:79:d1:f3:d6:b1:80:d0:c5:cf:53:8f:6c:0c:61:
52:90:ab:3c:57:4e:12:7b:5a:e0:f1:5e:4d:90:75:19:c8:6b:
01:1f:3b:e0:9a:6b:ad:1c:3f:ca:05:4c:ac:ef:b2:1f:a6:2c:
18:ed:b1:38:6a:cc:3e:b3:eb:f5:7e:17:49:e4:b0:b5:7e:b4:
92:54:0b:96:26:01:84:83:57:3b:5c:ca:1a:21:23:41:4f:df:
4a:89:fd:76:fb:ff:5f:59:77:90:d1:56:1c:a5:fd:b5:db:12:
82:ec:2e:c8:7b:7b:b9:58:0f:49:47:65:03:65:6a:25:e6:d7:
39:91:16:25:40:fc:18:93:8e:c7:9a:54:40:79:5d:5f:2c:6d:
59:f7:6a:c6:80:1a:c1:1f:72:cd:8b:46:6e:96:dc:8f:b3:77:
07:7a:3c:ca:ad:36:1b:43:8e:27:0f:79:da:5e:2e:85:c0:b2:
89:d9:cf:eb:cc:b2:cc:a3:5b:99:48:de:2b:85:f6:e1:f1:77:
c1:d7:25:17:bb:f8:ae:02:ef:7d:e4:33:98:c0:05:ab:97:01:
fc:25:0b:7b:da:72:98:48:02:1d:2b:7a:13:04:d9:7a:75:07:
2a:33:d8:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyg304N8RVa2REE1jclZtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGI2ZmY3YjY1ODk0MzMyY2JiNDFkM2FlYjczNTMwMWY0
OGIyOTgwHhcNMjMwMTAyMTI0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDNkYzU2ZDRiYjc4MzEzZWYxMWIzY2UzNzNiZGM4YmNiOWI4OWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtXipBvq072PZ+8mNQOQ08lUeX+G
NLkXBaB/QjIsGQnfKst4+1jkZLzfK5oyA/6EfLhH7lg5CksmbCfL7fXc8WemKgmw
JgVmA504pjQDYwHS9DZGi1yUSAAlAyaGFDa4BQiV13Wr2ZL9GLSVfMMYk3v6XeNj
ZA3GNBe+B+gDpWm4x7rJRlyDD5R7ko2g1KQnvKj24Kw6zwei3XYN0id49E/t7MLo
dWeo3YfM0IzWhTLdc0IK+A4VW7PtrbEJHyFkk8E8RA8LzHVWkRex0RR8FJ78Hz9p
qS7Kd/RBALR4UGdKxdTMvC75C9QCO+YokNFPIMzh5KuHS/6CMauFJP5vywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBA9xW1Lt4MT7xGzzjc73IvLm4nGMB8GA1UdIwQY
MBaAFC4Lb/e2WJQzLLtB0663NTAfSLKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGd0djk3WllsRE1zdTBIVHJyYzFNQjlJc3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZWU3ZTAtOWY4YS00NzhjLTk5ZTYt
Njk4ZjQ4MzcxOWNlLzEvRUQzRmJVdTNneFB2RWJQT056dmNpOHViaWNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZWU3ZTAtOWY4YS00NzhjLTk5ZTYtNjk4ZjQ4MzcxOWNl
LzEvTGd0djk3WllsRE1zdTBIVHJyYzFNQjlJc3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfO+MA0G
CSqGSIb3DQEBCwUAA4IBAQCJ4fqkKLItxUGGX7k2HzWKYY+OHpdAedHz1rGA0MXP
U49sDGFSkKs8V04Se1rg8V5NkHUZyGsBHzvgmmutHD/KBUys77IfpiwY7bE4asw+
s+v1fhdJ5LC1frSSVAuWJgGEg1c7XMoaISNBT99Kif12+/9fWXeQ0VYcpf212xKC
7C7Ie3u5WA9JR2UDZWol5tc5kRYlQPwYk47HmlRAeV1fLG1Z92rGgBrBH3LNi0Zu
ltyPs3cHejzKrTYbQ44nD3naXi6FwLKJ2c/rzLLMo1uZSN4rhfbh8XfB1yUXu/iu
Au995DOYwAWrlwH8JQt72nKYSAIdK3oTBNl6dQcqM9ih
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:53 2024 by rpki-client on console-ams.rpki-client.org