Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/DxR_E7-c_QoiTA1czUfes7bGHuI.roa
File: DxR_E7-c_QoiTA1czUfes7bGHuI.roa (raw, json)
Hash identifier: QnBsXp6gyPAoi066pkMXKixIIDLwXxp5gifyB5hD8R8=
Subject key identifier: 0F:14:7F:13:BF:9C:FD:0A:22:4C:0D:5C:CD:47:DE:B3:B6:C6:1E:E2
Certificate issuer: /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial: 0185E8D0D3233218B6575F3062F32DCC76DD
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/DxR_E7-c_QoiTA1czUfes7bGHuI.roa
Signing time: Wed 25 Jan 2023 12:04:37 +0000
ROA not before: Wed 25 Jan 2023 12:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 193.169.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:d0:d3:23:32:18:b6:57:5f:30:62:f3:2d:cc:76:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Validity
Not Before: Jan 25 12:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f147f13bf9cfd0a224c0d5ccd47deb3b6c61ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:ea:b4:54:e4:f5:58:3a:a4:32:16:0c:f6:
13:fc:6f:6d:2f:70:94:b1:ed:ed:b6:ed:9e:58:53:
ff:3a:9f:90:9c:6f:de:3a:95:2f:18:52:89:be:72:
99:08:92:32:e3:3c:0e:aa:8f:75:f6:9b:26:64:1b:
bf:af:12:59:dd:64:0b:84:da:31:82:85:87:34:49:
5c:83:65:63:41:fb:48:b0:b3:45:8b:1e:96:91:97:
15:63:a8:1b:2c:97:ff:b3:97:7b:90:26:e9:e3:a0:
96:4e:79:7a:1d:7b:f8:fe:bc:90:8c:e3:d1:83:a8:
6b:74:be:d9:d2:81:13:9b:5c:f5:17:e9:84:0c:51:
18:96:a4:06:01:a7:fa:fb:2f:4d:16:b2:67:d6:d6:
62:06:09:02:a1:1b:c1:1d:e6:04:79:54:f5:b6:a3:
f0:36:e9:a1:45:10:2f:78:1e:57:74:2e:da:d0:6e:
fb:c3:13:98:d1:25:8e:72:b0:c9:43:fb:c5:4b:e8:
e2:88:ec:f7:23:e7:3d:59:a1:e0:bd:b0:47:10:27:
bc:7a:8b:6f:64:a0:a7:24:36:d8:08:88:15:dc:1a:
6a:c1:64:49:a0:21:b4:3a:a5:63:01:c7:39:7c:8e:
8c:0a:d3:a4:8a:28:82:b0:ae:3e:66:05:8b:4a:1b:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:14:7F:13:BF:9C:FD:0A:22:4C:0D:5C:CD:47:DE:B3:B6:C6:1E:E2
X509v3 Authority Key Identifier:
keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/DxR_E7-c_QoiTA1czUfes7bGHuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.239.0/24
Signature Algorithm: sha256WithRSAEncryption
78:13:43:28:7c:2f:75:db:c2:66:7f:4d:65:be:76:3b:8e:48:
c1:33:78:82:e6:d8:a8:16:9b:89:81:9c:66:5a:84:b8:93:a6:
ae:84:d0:fa:0c:a4:85:65:01:f0:07:ef:5e:83:08:d4:42:0a:
71:65:4f:39:3b:17:43:b1:b3:6c:7a:ab:f9:09:af:a1:dd:69:
11:45:0c:1c:66:41:ed:c1:f1:12:85:1e:fb:58:16:2d:34:64:
30:fa:57:9a:a3:ae:31:de:51:56:28:d8:5e:b3:b1:8f:46:62:
a1:e6:29:6a:d7:0d:13:75:3a:69:d8:91:4e:56:f7:4b:ba:f7:
f6:a8:ef:56:35:4a:e6:19:6e:09:52:84:dc:a1:d5:fd:b4:b6:
2e:c1:3f:99:1d:27:c5:ab:9f:c0:31:29:a7:69:5e:fc:f2:7f:
28:77:18:37:f2:fe:e6:a8:47:80:5e:ed:65:44:30:7a:1d:52:
d0:c2:c5:3c:12:f1:7a:51:9c:e7:61:f6:c0:59:fc:ef:07:a1:
7d:a8:4a:2a:3a:63:3a:2f:d5:f1:ad:b2:bc:17:cf:4f:14:cd:
8a:07:a5:ca:db:1b:7b:a2:bf:45:60:58:fa:f3:e0:69:6c:de:
54:f5:59:dc:f1:1b:df:bb:f2:e9:32:12:2a:7a:24:a1:0a:2c:
53:44:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org