Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/EaC4w7SjRT-3au0_QnGLqlCKszo.roa
File: EaC4w7SjRT-3au0_QnGLqlCKszo.roa (raw, json)
Hash identifier: fPjOMus2XAE3qnK7CnlFfIRQBwXhNtp4aLqajIylcjs=
Subject key identifier: 11:A0:B8:C3:B4:A3:45:3F:B7:6A:ED:3F:42:71:8B:AA:50:8A:B3:3A
Certificate issuer: /CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
Certificate serial: 01856F2FD4C0EA98F0DDB6703B4555A281A1
Authority key identifier: F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/EaC4w7SjRT-3au0_QnGLqlCKszo.roa
Signing time: Sun 01 Jan 2023 21:14:43 +0000
ROA not before: Sun 01 Jan 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 194.69.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d4:c0:ea:98:f0:dd:b6:70:3b:45:55:a2:81:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
Validity
Not Before: Jan 1 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a0b8c3b4a3453fb76aed3f42718baa508ab33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:c1:a9:a9:fc:8b:3c:e4:6e:6b:8b:a1:7d:
d3:03:89:d7:be:45:23:79:16:ed:63:2b:ce:c6:e7:
0d:d0:0b:67:b7:3e:a7:f8:88:7d:5e:73:03:07:ed:
82:59:4c:77:36:0b:62:66:c3:1b:ba:47:05:19:6a:
8f:a8:d3:e8:e8:24:d0:22:f6:ec:cf:ca:8c:2a:34:
a7:5d:82:f0:4d:49:e7:77:c7:02:b8:94:02:35:98:
cf:14:73:ad:75:3a:83:bd:8d:8c:71:7a:d5:01:36:
37:65:a4:e4:70:71:34:10:35:c3:ac:4b:0f:07:a9:
ee:46:41:ba:1a:c7:8d:2e:ad:a1:2e:c9:cc:85:5e:
0e:ed:e3:85:70:01:6b:92:cf:ed:7a:68:bc:3c:60:
e6:f1:05:ad:11:ad:c0:a9:f4:bb:7f:7b:b1:b7:95:
de:50:6b:0e:55:9b:32:e7:d0:08:fb:f0:76:ca:2b:
af:7d:6e:cd:83:8a:da:45:c8:de:87:cf:e8:12:2d:
8f:ca:34:8f:b4:00:b9:6b:40:9f:ab:8b:15:41:eb:
89:b2:3d:b8:9e:28:bb:ce:53:4a:28:58:ee:a1:8c:
ef:22:7c:07:7c:c0:8e:de:26:1d:d3:3d:17:40:80:
09:c7:c4:7e:a6:d1:10:a3:8c:ab:6f:5e:4f:d5:c3:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A0:B8:C3:B4:A3:45:3F:B7:6A:ED:3F:42:71:8B:AA:50:8A:B3:3A
X509v3 Authority Key Identifier:
keyid:F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/EaC4w7SjRT-3au0_QnGLqlCKszo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:26:75:40:a6:7f:45:65:2c:4a:23:9e:68:59:69:39:2e:40:
e3:ad:d6:a3:40:87:3a:36:f9:7c:84:6d:e2:58:06:2f:3f:b6:
90:9e:c9:ac:b9:1f:21:d0:f0:0b:a5:3b:b0:af:9d:e8:20:d3:
5e:d9:0e:bb:bc:d5:a8:90:ed:25:33:bb:87:3c:6d:32:21:ff:
c6:f9:9f:1d:95:9e:17:ff:5f:86:27:bc:07:e7:2e:c1:48:b5:
0b:df:8b:0e:65:75:54:77:89:c9:33:62:d6:53:58:ba:e1:02:
27:79:5b:2b:bf:58:ab:ee:af:77:f7:5d:da:aa:0c:82:d4:97:
01:64:56:d0:1e:8a:aa:6e:f5:73:c5:7a:8c:a7:57:16:71:5e:
f0:de:15:f0:cf:17:d5:4b:12:13:06:0f:71:04:a8:73:63:78:
ab:fb:d9:3d:ed:aa:d6:92:71:5f:4e:38:58:8b:8b:c4:42:79:
af:da:fa:ba:73:5a:50:a5:64:e7:47:b9:8f:6a:2f:24:e9:88:
b3:63:e9:85:5a:b0:f3:67:5f:68:a3:71:34:81:58:1e:70:8c:
75:d8:ab:ac:75:d8:74:29:0f:dd:64:18:52:ec:27:8a:25:fa:
0f:85:b8:bd:1b:dd:7a:d6:67:fb:db:3f:53:de:94:7c:80:36:
f5:40:52:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 08:50:29 2023 by rpki-client on console-ams.rpki-client.org