Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/2B3T3V07zTKzlLtE9Cp8w17xBjM.roa
File: 2B3T3V07zTKzlLtE9Cp8w17xBjM.roa (raw, json)
Hash identifier: I3zr2ktX9DmLyoCdBimIJQY03rrK6jskkFHRLzOngyI=
Subject key identifier: D8:1D:D3:DD:5D:3B:CD:32:B3:94:BB:44:F4:2A:7C:C3:5E:F1:06:33
Certificate issuer: /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial: 01856D53DDC2A6CBA1C990037CDAE6FCE845
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/2B3T3V07zTKzlLtE9Cp8w17xBjM.roa
Signing time: Sun 01 Jan 2023 12:34:50 +0000
ROA not before: Sun 01 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 193.169.239.0/24 maxlen: 24
193.169.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:dd:c2:a6:cb:a1:c9:90:03:7c:da:e6:fc:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Validity
Not Before: Jan 1 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d81dd3dd5d3bcd32b394bb44f42a7cc35ef10633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:76:aa:22:53:d0:64:bd:bb:ce:8f:ae:61:
26:0f:cf:87:b0:f6:de:41:80:43:53:43:cd:ed:f3:
a5:10:c1:99:3c:92:8c:09:04:ea:a5:0a:cb:28:f6:
c6:77:f9:fd:69:e5:cf:20:de:75:9b:6b:6a:2b:c0:
64:e1:e1:f5:e3:2d:20:65:20:31:de:b9:9d:f3:92:
75:f5:95:03:32:e1:aa:32:02:98:b4:a6:85:7d:93:
fc:c0:67:45:b3:b8:c8:b2:10:4d:e5:7d:65:91:cb:
c2:79:d7:96:8b:7e:e2:3d:4d:35:bc:9e:36:ef:14:
fe:00:96:84:27:3b:6a:0c:53:fc:63:fb:a2:a3:8f:
b8:08:ec:89:00:3b:2a:3f:f4:01:5e:b4:3a:29:c3:
a5:a1:ad:ba:64:c9:16:37:c8:0f:f9:66:35:17:a1:
db:3a:2c:7e:8a:50:be:30:fc:23:ce:66:8d:09:29:
c9:fc:df:a5:50:24:af:fc:f9:04:0a:03:35:ed:ba:
46:b7:a5:f4:c0:03:4e:7f:95:1c:fa:d3:fc:eb:35:
ec:6f:6d:cd:38:3d:7f:22:58:62:82:06:67:7c:a4:
e5:66:d3:1c:53:72:a4:31:9d:39:f6:48:80:be:38:
2e:d1:bb:42:b1:f0:da:e0:90:5f:bc:19:66:91:dd:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1D:D3:DD:5D:3B:CD:32:B3:94:BB:44:F4:2A:7C:C3:5E:F1:06:33
X509v3 Authority Key Identifier:
keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/2B3T3V07zTKzlLtE9Cp8w17xBjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.239.0/24
193.169.250.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0d:e7:1f:3f:fd:92:b5:af:a4:e4:b5:88:89:20:ae:1c:01:
53:96:9b:a5:0a:1f:e9:7c:83:f0:1f:c6:1a:b9:33:99:90:63:
6d:ee:84:65:a9:01:04:ac:11:87:00:21:16:97:47:73:93:90:
e4:36:1a:a8:6f:6f:f4:56:22:7d:e5:48:5c:42:c3:f4:34:b2:
a2:c2:b8:6a:a6:52:76:46:d8:f4:22:e7:55:33:12:b0:93:80:
c5:55:e0:07:ba:ed:9a:be:a1:1b:4c:14:25:3b:13:4d:35:9f:
64:12:92:0d:2e:53:34:9a:df:12:0c:f8:62:cc:96:3d:8c:ee:
f6:79:e9:a8:a9:36:10:c1:cf:c3:1e:ef:17:b5:e3:dd:c1:c6:
fb:37:b5:91:af:7e:c0:b0:1f:59:8e:29:c5:f9:1d:9d:2a:57:
3e:66:e0:f7:63:3f:5d:0a:db:16:22:8d:51:34:39:85:50:df:
90:68:9a:75:5b:5f:23:19:8d:8b:bb:09:ba:9b:87:d2:1d:15:
61:19:f1:aa:50:42:d0:94:a6:cf:4f:f3:d7:c1:b0:12:ec:1c:
65:74:6f:f8:9e:65:d1:61:ce:91:4b:75:86:d9:9b:82:ea:a6:
1a:f7:10:07:c1:f2:a8:ea:b0:03:5b:fa:16:f2:55:ad:7a:3b:
58:58:d7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:38 2024 by rpki-client on console-fra.rpki-client.org