Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/w3CwjAYAK-gHRpcdaq-WIa9vK-c.roa
File: w3CwjAYAK-gHRpcdaq-WIa9vK-c.roa (raw, json)
Hash identifier: Jdp6gIMVZ+fnsaPaKSM0zy6GOk5SNiUcarW0MEgTnQ4=
Subject key identifier: C3:70:B0:8C:06:00:2B:E8:07:46:97:1D:6A:AF:96:21:AF:6F:2B:E7
Certificate issuer: /CN=7aeb210c4fd74db944e7dc79e3457f45b9a055f0
Certificate serial: 0184CFCAC54E181BBF41CC7991EAF8FEC779
Authority key identifier: 7A:EB:21:0C:4F:D7:4D:B9:44:E7:DC:79:E3:45:7F:45:B9:A0:55:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eushDE_XTblE59x540V_RbmgVfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/w3CwjAYAK-gHRpcdaq-WIa9vK-c.roa
Signing time: Thu 01 Dec 2022 22:24:43 +0000
ROA not before: Thu 01 Dec 2022 22:24:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51960
IP address blocks: 193.104.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:ca:c5:4e:18:1b:bf:41:cc:79:91:ea:f8:fe:c7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aeb210c4fd74db944e7dc79e3457f45b9a055f0
Validity
Not Before: Dec 1 22:24:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c370b08c06002be80746971d6aaf9621af6f2be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:a0:b8:9d:93:bf:34:dc:d3:69:b8:ab:ec:
39:00:92:22:81:ad:cf:79:c4:cf:db:77:9b:7d:58:
d0:1c:25:a0:22:5d:fe:96:c8:8c:a1:f9:25:65:19:
41:03:25:06:40:78:8f:c0:b9:f8:2a:4c:29:0c:94:
50:30:4c:6e:7b:b7:9c:32:24:58:20:5b:c3:99:67:
e9:5e:5d:b1:77:08:5b:48:56:47:99:6d:57:0e:b0:
2a:7b:ec:f0:08:90:df:7e:66:2c:bf:9b:4f:67:9b:
40:f3:ed:2f:0d:7b:c5:c3:9f:6b:c1:72:13:8b:99:
cc:83:a0:87:c0:c8:c1:c5:36:b8:78:2d:00:8e:c0:
00:db:2a:d0:e5:78:f5:86:d1:a2:a3:93:05:6f:00:
23:07:22:71:4b:4f:c9:05:1b:73:f4:2f:b6:9c:28:
72:d2:53:fb:6d:7f:9a:1a:88:ab:22:10:37:76:04:
ba:22:c3:5c:49:20:00:94:32:83:8b:8c:ad:6c:75:
42:d4:e4:8d:6b:cf:a8:c7:16:d7:27:89:a5:88:3f:
78:71:58:47:cb:99:2c:f1:3b:d0:ad:07:6b:e4:3e:
89:b8:0d:6c:09:36:27:89:6b:68:ad:21:34:2c:ba:
48:72:51:ab:82:b2:c7:84:a2:42:24:14:85:56:7a:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:B0:8C:06:00:2B:E8:07:46:97:1D:6A:AF:96:21:AF:6F:2B:E7
X509v3 Authority Key Identifier:
keyid:7A:EB:21:0C:4F:D7:4D:B9:44:E7:DC:79:E3:45:7F:45:B9:A0:55:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eushDE_XTblE59x540V_RbmgVfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/w3CwjAYAK-gHRpcdaq-WIa9vK-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/eushDE_XTblE59x540V_RbmgVfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.5.0/24
Signature Algorithm: sha256WithRSAEncryption
24:55:2c:98:22:e7:96:80:b0:9e:d3:c7:d1:24:93:f5:ac:f4:
b5:4a:de:0d:6f:7a:1a:43:68:8d:cc:fd:76:56:ef:dc:13:75:
e7:f2:44:31:ef:cd:50:79:17:4a:aa:24:f7:14:2e:80:6d:d6:
67:c0:13:b4:6c:9d:50:7a:cb:f1:90:fc:f5:ee:9a:75:69:11:
5c:59:48:67:92:a2:27:0a:fe:6f:0d:8f:b1:a0:32:93:9c:aa:
29:5f:7b:85:97:84:7d:d9:33:8d:f5:95:d5:1f:f5:89:d8:ed:
74:86:32:fc:69:c8:be:4e:af:10:bb:fe:0a:5a:a3:39:8a:a7:
29:2c:35:c2:10:23:08:a6:98:0c:dd:31:46:86:ab:da:25:7b:
cd:87:fe:1b:22:93:c4:4e:37:7c:0d:09:22:38:5b:48:7e:fa:
7c:0c:a7:2a:57:23:80:c2:6f:c5:5f:2d:22:2d:f1:5c:f2:9b:
63:57:58:2a:bc:01:65:b4:3c:db:5c:74:8f:51:0b:7a:2f:da:
f5:5c:ab:97:41:71:d9:01:0f:bb:3c:b5:5b:5c:78:d4:63:6f:
30:17:f5:24:b7:ce:8c:c0:7b:e4:67:ec:3b:ea:e2:00:2f:e5:
d5:3a:6c:f9:c7:b0:68:5e:0a:6e:e5:f6:b7:95:fd:6b:48:f3:
59:ca:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:35 2024 by rpki-client on console-fra.rpki-client.org