Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/edaQgh6HKObFZoFSCUd_zFIuleM.roa
File: edaQgh6HKObFZoFSCUd_zFIuleM.roa (raw, json)
Hash identifier: VF9yg9gu0BFZOTwmeviDqlM3IM64mf2ue3M30+rgHSI=
Subject key identifier: 79:D6:90:82:1E:87:28:E6:C5:66:81:52:09:47:7F:CC:52:2E:95:E3
Certificate issuer: /CN=7e691f9c0db983bf66751f099047781b573a36eb
Certificate serial: 01856BDCB0F8B55E7AAFD05C64678581F91F
Authority key identifier: 7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmkfnA25g79mdR8JkEd4G1c6Nus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/edaQgh6HKObFZoFSCUd_zFIuleM.roa
Signing time: Sun 01 Jan 2023 05:45:03 +0000
ROA not before: Sun 01 Jan 2023 05:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.3.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b0:f8:b5:5e:7a:af:d0:5c:64:67:85:81:f9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e691f9c0db983bf66751f099047781b573a36eb
Validity
Not Before: Jan 1 05:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79d690821e8728e6c566815209477fcc522e95e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:be:f4:36:d2:cd:b5:31:56:32:f2:9a:74:
d9:21:33:ea:54:07:55:74:d0:de:f0:df:ab:33:04:
9d:e8:2a:72:ec:f4:cd:82:97:f6:2d:23:bb:92:31:
10:3b:05:87:0c:f9:ae:9a:b8:6b:45:b7:c0:82:56:
03:02:3d:be:4d:4c:b5:69:c9:99:1e:d3:01:78:e0:
6a:f9:35:13:b0:96:7a:ea:ee:82:0a:bc:c0:86:08:
dd:4c:13:a8:92:6b:b1:38:e7:8e:7a:1d:a1:2c:10:
dc:3a:97:e3:33:71:9b:30:27:4b:fe:14:55:a5:66:
ca:bc:30:84:c4:f1:41:78:e3:88:e0:1d:6a:27:82:
f8:4c:37:50:a9:12:86:78:66:e4:f2:31:26:55:ef:
60:55:14:da:91:e6:bd:0b:76:53:ad:58:95:e5:09:
58:b1:cf:22:a4:1e:1d:45:a0:e6:9f:c7:4c:f2:4a:
b9:fb:eb:00:9f:8c:01:d4:c8:49:96:70:77:66:b1:
2d:75:1a:98:a3:89:63:13:db:92:6f:c7:97:21:b2:
c8:94:f5:41:fa:29:ce:eb:5f:83:26:5e:5f:8f:4b:
cc:48:ca:b2:6a:2f:d2:62:6a:fe:fd:25:fa:f7:28:
ad:e5:2b:28:ab:51:53:bb:c4:26:bd:90:bf:f3:0e:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D6:90:82:1E:87:28:E6:C5:66:81:52:09:47:7F:CC:52:2E:95:E3
X509v3 Authority Key Identifier:
keyid:7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmkfnA25g79mdR8JkEd4G1c6Nus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/edaQgh6HKObFZoFSCUd_zFIuleM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/fmkfnA25g79mdR8JkEd4G1c6Nus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.28.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2c:d3:f6:3f:ed:01:b8:32:aa:6b:39:37:0c:b4:b5:d6:14:
52:4b:52:7c:78:ad:fa:1f:37:a2:10:ed:2f:21:5a:a8:a5:ae:
0d:42:e3:c6:62:43:5c:89:21:a7:67:9c:a1:24:2f:c3:ce:3b:
b1:e6:36:96:19:7f:14:40:ef:81:87:47:02:5a:50:b8:18:5e:
51:6b:a2:76:d1:13:0b:19:47:dc:cd:2b:1f:be:a8:ce:9d:91:
59:be:4c:f1:9d:4f:53:15:85:4c:49:5c:d1:32:6d:83:96:2f:
0a:6a:45:f8:43:ab:b1:2d:64:96:51:3e:3f:88:2f:68:6e:df:
e3:27:71:2b:6c:8d:94:3e:36:30:39:e9:00:b6:fb:f6:14:43:
bc:59:a5:d6:01:c4:cb:d9:e0:ed:3c:81:c1:eb:ce:11:35:9a:
b1:12:5f:76:4c:8c:63:37:81:a4:b1:08:40:37:13:db:86:8d:
91:44:21:7d:92:36:bd:4d:6a:d5:32:5c:00:2e:a6:f6:7e:cf:
2f:00:f4:14:35:fc:d4:f4:70:ba:46:32:a7:a5:5e:82:5f:09:
87:d7:d5:22:a4:a3:25:a4:32:ac:99:d2:3c:b3:6e:28:1e:ee:
9d:4c:35:df:20:f6:b7:31:fc:b9:a0:86:b2:b8:81:f0:78:81:
1c:65:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org