Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/EBGUETKFXMxvqBfiBzWvNWyhxzM.roa
File: EBGUETKFXMxvqBfiBzWvNWyhxzM.roa (raw, json)
Hash identifier: yOZR2ZeOvSmNtHNOmEuLHS8w/js1gWQp+wpzImLFs+o=
Subject key identifier: 10:11:94:11:32:85:5C:CC:6F:A8:17:E2:07:35:AF:35:6C:A1:C7:33
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: 01856F4B87BCCBC5F06C3AADCB3C473AAFF0
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/EBGUETKFXMxvqBfiBzWvNWyhxzM.roa
Signing time: Sun 01 Jan 2023 21:44:58 +0000
ROA not before: Sun 01 Jan 2023 21:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.23.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:87:bc:cb:c5:f0:6c:3a:ad:cb:3c:47:3a:af:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: Jan 1 21:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1011941132855ccc6fa817e20735af356ca1c733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:58:68:6b:5a:61:aa:04:45:f6:d8:dd:f9:
80:30:3e:c6:a6:c8:4f:55:a6:52:f6:d3:19:af:bf:
94:54:c3:cb:29:fb:37:63:6f:91:6b:66:ce:ab:fb:
40:c4:e6:f2:79:91:63:12:b0:aa:84:63:3a:a7:3a:
1b:71:60:1e:9f:d7:fa:5c:53:67:cb:29:5d:90:07:
d7:25:c3:46:64:e1:90:45:6f:0e:23:38:da:bd:9c:
05:bf:cf:04:55:e1:6f:bb:9f:b0:b1:04:af:0a:71:
c6:a8:5a:7a:90:dd:9c:82:dd:1b:80:76:13:a4:95:
4c:ab:b6:38:2a:7e:4f:3d:63:e0:57:47:19:b0:7d:
18:b7:5d:9d:ba:03:55:f3:9b:c9:33:3f:5f:0d:73:
cd:7c:f0:7f:5a:14:c4:e2:ff:b5:42:dc:c2:68:e8:
4d:d6:4e:79:50:5d:46:0c:05:f8:c8:83:e6:0c:20:
c3:f9:74:9b:2d:3e:4e:2d:22:68:d6:ef:8a:22:f8:
f7:8b:5a:87:57:b9:ce:c3:07:e8:a5:0d:29:4a:95:
5f:2c:4c:26:33:90:43:13:87:0d:e8:09:5f:06:7f:
d0:7c:d8:d9:55:79:37:df:12:b6:f0:6d:e3:92:c4:
ea:c4:2b:34:8a:1e:28:3c:b1:2f:54:00:dd:77:23:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:11:94:11:32:85:5C:CC:6F:A8:17:E2:07:35:AF:35:6C:A1:C7:33
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/EBGUETKFXMxvqBfiBzWvNWyhxzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:49:ce:eb:f4:d4:40:2c:88:0e:d8:e8:96:cd:8c:69:85:6a:
37:a5:89:b9:c7:da:92:15:da:30:30:14:d7:b2:70:e8:3c:c0:
a7:59:d6:1e:74:d5:39:6c:85:f2:47:f1:8c:96:4c:bf:35:5a:
28:8d:cd:3d:a1:b8:17:38:3f:73:7d:9f:e1:52:55:f6:5b:5f:
02:28:42:15:39:98:c8:95:18:9a:ea:52:af:7d:a9:db:8d:19:
56:93:b8:7c:14:30:bf:2d:9e:fe:6f:47:ee:06:33:4d:cb:be:
16:06:f8:d3:f7:fe:fb:d6:db:4d:a3:08:c4:bb:bd:ad:30:d5:
cf:e8:2e:74:92:61:37:ac:1d:d9:5e:45:69:5e:86:ba:06:26:
1c:76:7e:20:b1:ea:2e:89:ae:b6:79:1c:90:02:70:fc:af:b5:
99:3f:d7:97:25:59:d7:36:f0:ed:d9:af:51:62:45:50:14:93:
63:38:95:5c:07:16:1d:ae:14:7c:03:83:d3:59:d6:ae:a7:0d:
c1:6b:55:08:18:4c:3e:5f:73:ff:cc:59:d7:16:dd:75:d9:c4:
07:90:cb:dc:09:37:c0:d6:f8:09:d4:b2:c1:26:27:d9:fc:18:
db:11:85:7a:3a:5d:dd:6a:75:8f:0a:44:7a:8f:5c:0d:dd:b3:
3a:62:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org