Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/6-5gyubCpC3PzZ9NBFJQduY4KGI.roa
File: 6-5gyubCpC3PzZ9NBFJQduY4KGI.roa (raw, json)
Hash identifier: 5P8fdo58ptIAvHg2AJfmdddHZJGumcaLc8kNm6IXas0=
Subject key identifier: EB:EE:60:CA:E6:C2:A4:2D:CF:CD:9F:4D:04:52:50:76:E6:38:28:62
Certificate issuer: /CN=e4aba4da15f1d9af181e8a50448ff8bd1625c92a
Certificate serial: 01856D8AF4AAC91867057783DB571A8389B8
Authority key identifier: E4:AB:A4:DA:15:F1:D9:AF:18:1E:8A:50:44:8F:F8:BD:16:25:C9:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kuk2hXx2a8YHopQRI_4vRYlySo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/6-5gyubCpC3PzZ9NBFJQduY4KGI.roa
Signing time: Sun 01 Jan 2023 13:35:01 +0000
ROA not before: Sun 01 Jan 2023 13:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 213.109.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f4:aa:c9:18:67:05:77:83:db:57:1a:83:89:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aba4da15f1d9af181e8a50448ff8bd1625c92a
Validity
Not Before: Jan 1 13:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebee60cae6c2a42dcfcd9f4d04525076e6382862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:60:f9:00:3c:63:4b:93:14:88:b1:ef:15:fb:
2b:fe:7e:fe:23:a5:f9:36:81:19:60:e4:db:db:aa:
e8:bf:61:97:fc:e6:db:7d:b7:73:0a:08:b7:35:5b:
c8:9e:f7:87:9a:a9:16:4d:21:e0:a2:43:2f:60:15:
01:da:54:b4:88:0b:8b:1d:e6:ac:1d:8f:f4:24:cc:
bd:2e:75:4d:35:25:65:88:bb:f6:7e:78:59:e8:16:
4f:cf:c4:02:c8:f7:8d:a4:0c:1b:1a:0d:df:65:97:
81:12:69:c5:72:fd:3b:a4:a0:f6:d5:a5:25:c3:20:
e7:c6:96:a2:9a:f0:36:39:a2:53:9a:f5:c3:d9:0e:
b1:50:4b:54:3a:fb:9d:ee:0a:ab:0f:26:88:bb:78:
9e:4b:ab:f8:97:5c:9c:6a:4e:35:a0:39:2f:84:86:
f9:78:9d:c5:a6:84:ca:37:ff:b8:99:b2:07:a7:b6:
d6:08:f8:7b:da:86:c9:e7:d3:ed:02:48:f8:1d:87:
c8:32:ec:26:dc:58:ef:c7:bf:e8:6d:de:4a:6e:38:
a0:2b:df:c0:1e:89:73:c8:06:67:b9:e5:39:ba:cc:
6c:94:ae:2e:2a:c5:99:df:00:99:45:6e:94:13:26:
5a:e2:96:7f:d3:e7:a6:1f:d1:be:59:47:20:53:8d:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:60:CA:E6:C2:A4:2D:CF:CD:9F:4D:04:52:50:76:E6:38:28:62
X509v3 Authority Key Identifier:
keyid:E4:AB:A4:DA:15:F1:D9:AF:18:1E:8A:50:44:8F:F8:BD:16:25:C9:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kuk2hXx2a8YHopQRI_4vRYlySo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/6-5gyubCpC3PzZ9NBFJQduY4KGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/5Kuk2hXx2a8YHopQRI_4vRYlySo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.152.0/24
Signature Algorithm: sha256WithRSAEncryption
97:36:dc:e5:87:0e:1c:b2:0c:03:a0:2d:f0:25:c4:1a:53:e6:
3d:c7:1d:fe:5e:69:2a:06:18:e2:d7:70:c7:50:d2:fd:cf:4e:
9c:f5:c0:d3:0c:1f:aa:76:72:e3:21:a1:b8:13:a5:8f:47:ae:
90:7a:7a:4d:95:aa:ef:69:88:2b:66:fc:05:1f:f9:60:93:e1:
a0:50:a3:57:e7:8f:cd:ef:ac:06:36:f7:59:17:c1:d0:38:81:
06:3b:45:0e:01:fb:10:f9:7b:25:43:93:f5:ca:7c:20:11:48:
af:ac:af:5a:71:05:71:bb:b6:de:f4:3a:3e:93:50:f7:55:0d:
67:b0:ef:e6:36:a1:2e:7f:cc:a5:ba:68:da:10:44:47:69:22:
a4:cc:9d:e6:2c:5a:1a:61:18:9a:d8:d0:0f:e5:c1:31:8f:fb:
28:f9:03:25:dd:3e:c6:ea:5e:eb:d8:52:9f:b8:f5:f2:95:0e:
d3:ed:be:22:78:84:b9:64:45:b2:19:73:ff:e1:b7:6c:cd:9d:
52:d8:2b:c7:42:81:17:9a:78:59:d6:74:73:2a:bd:b2:9b:fd:
e3:bb:08:68:f1:96:14:da:70:ff:87:8e:b4:82:2c:64:48:82:
39:6d:b5:9f:e3:1b:af:1d:95:83:d6:1e:00:cc:d9:80:cc:e4:
05:64:a5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 14:55:04 2023 by rpki-client on console-fra.rpki-client.org