Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/A_eErQrizJFLTdPxypuY2ff4Zg8.roa
File: A_eErQrizJFLTdPxypuY2ff4Zg8.roa (raw, json)
Hash identifier: HTbE27xlXoGPnfNKhBVVO7FvBT46emmWOsHMZuZJXCk=
Subject key identifier: 03:F7:84:AD:0A:E2:CC:91:4B:4D:D3:F1:CA:9B:98:D9:F7:F8:66:0F
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563FA4BAC0064341BAF3FCEF75F92B3
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/A_eErQrizJFLTdPxypuY2ff4Zg8.roa
Signing time: Thu 15 Aug 2024 09:35:01 +0000
ROA not before: Thu 15 Aug 2024 09:35:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21443
IP address blocks: 193.41.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:fa:4b:ac:00:64:34:1b:af:3f:ce:f7:5f:92:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f784ad0ae2cc914b4dd3f1ca9b98d9f7f8660f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:d2:8e:e3:cb:9b:c1:e7:0c:7e:3d:8b:a7:
d5:cf:af:08:19:7e:00:68:3b:a5:de:b6:60:51:4b:
62:fc:c3:76:94:b0:5a:7b:65:54:7b:d5:9e:26:94:
75:a1:57:af:44:52:12:c9:31:42:a6:70:65:c7:78:
ab:73:62:e1:2b:83:8b:d1:91:70:dc:74:ca:6f:4c:
e2:fe:19:95:62:41:c5:2f:bb:16:97:d6:dc:4e:75:
7f:1e:ee:ea:97:d3:84:41:ee:6e:b1:11:c9:61:17:
36:ba:ac:f5:8a:e5:3b:e6:51:74:31:ec:20:43:23:
7a:b8:e6:ed:46:da:55:77:54:c9:8a:cd:3d:6d:ef:
f7:11:64:c5:42:17:3d:cf:a7:24:17:01:d7:af:26:
df:b7:20:b2:f2:ff:1e:29:a6:d2:ea:ef:9c:43:cd:
b4:9c:f7:06:b3:32:d5:a0:8f:d5:45:80:d7:f4:3d:
73:1e:82:0c:6e:1f:4a:70:6e:ac:9a:21:a1:cb:63:
f8:6f:42:39:8e:67:1e:70:57:a6:51:eb:a2:13:8d:
b8:fe:b2:76:da:3d:c6:0e:56:55:2f:7a:90:cc:31:
0e:56:d8:07:4e:67:c8:a3:ad:d2:6a:38:9f:20:c2:
24:4c:1d:48:d8:8a:29:08:ce:cd:a8:96:b8:5c:8b:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:84:AD:0A:E2:CC:91:4B:4D:D3:F1:CA:9B:98:D9:F7:F8:66:0F
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/A_eErQrizJFLTdPxypuY2ff4Zg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:67:e3:c2:01:29:71:29:32:64:c0:42:2e:83:c9:13:8f:12:
8f:e0:52:c5:8a:cc:cc:ee:3c:7a:20:11:8f:58:e1:6e:35:ea:
1d:1e:d7:c4:ed:5b:cd:58:01:8a:ea:83:22:69:71:f9:bf:6c:
22:b8:1e:44:8d:6e:bc:5d:2a:32:22:4b:1c:00:f0:5d:62:c1:
ca:78:d9:7c:27:3d:75:04:18:e5:e2:08:eb:26:3f:23:69:3d:
46:fb:f5:30:b6:40:14:ab:ce:dc:1f:f9:68:8d:84:0a:75:2d:
b3:a7:a6:1f:24:b3:be:c8:5c:c7:17:7c:b1:5f:b6:04:89:ec:
3a:5c:53:45:33:1a:74:9b:56:90:8c:51:8d:44:46:98:cc:08:
23:5b:eb:66:ea:4a:f2:ef:d5:91:dc:d8:33:42:d7:d7:47:ba:
b8:67:dd:72:63:ad:61:45:b3:6c:98:7e:39:0b:51:a9:f4:27:
4f:6f:3c:59:78:fc:6a:be:ba:a1:14:26:45:fc:9e:e7:ac:4e:
80:c0:bc:3a:2c:d0:1b:5c:00:9e:4b:45:37:38:17:dc:a3:2f:
08:41:77:fd:d4:ed:91:f6:0e:e2:92:92:c9:9a:d9:a5:77:e5:
1b:14:ae:3e:80:2d:f3:c9:d8:dc:a3:de:ad:7e:57:a0:42:51:
e5:7c:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org