Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/7dDF3kATxqqE16hZi4yoeR6IIKI.roa
File: 7dDF3kATxqqE16hZi4yoeR6IIKI.roa (raw, json)
Hash identifier: G+ZNEsvl2HEjtZ+fsNgfvgyBDIjt15ZWwPhv4fb1y7g=
Subject key identifier: ED:D0:C5:DE:40:13:C6:AA:84:D7:A8:59:8B:8C:A8:79:1E:88:20:A2
Certificate issuer: /CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Certificate serial: 0185CFE03BAC95811C20B22DBDB4A6B85E7D
Authority key identifier: 43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/7dDF3kATxqqE16hZi4yoeR6IIKI.roa
Signing time: Fri 20 Jan 2023 15:50:57 +0000
ROA not before: Fri 20 Jan 2023 15:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 195.234.93.0/24 maxlen: 24
195.234.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:e0:3b:ac:95:81:1c:20:b2:2d:bd:b4:a6:b8:5e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Validity
Not Before: Jan 20 15:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edd0c5de4013c6aa84d7a8598b8ca8791e8820a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:db:b5:eb:75:d2:78:e8:00:12:04:84:47:
f9:fb:a0:fc:18:85:65:60:25:99:db:44:9c:c2:b4:
9a:89:41:86:12:a6:d4:5e:17:30:97:61:02:ac:d5:
0a:ed:fa:70:d4:bf:6e:1d:8b:40:73:0f:72:e0:39:
f4:cf:cb:75:75:45:4d:59:40:79:6a:30:5a:61:28:
a0:5e:b6:cc:5c:76:78:2d:ee:42:7c:23:d2:17:9e:
e6:ea:79:7f:e7:24:d3:a9:38:2d:3f:4d:0a:42:45:
c3:9d:87:66:be:6c:4e:62:6b:ed:1e:c3:8f:d2:d4:
be:e4:90:db:3f:44:5c:dc:9f:de:a8:71:70:b7:cc:
8a:d5:07:bd:68:8f:fa:0b:18:f0:bc:cc:6f:e8:4c:
cc:c0:69:88:1e:73:e9:88:ce:67:23:84:0b:f3:69:
3b:06:e2:db:50:98:9a:35:77:39:5e:78:74:dd:bf:
69:21:34:0e:3e:3a:27:22:19:bc:97:3d:b1:fb:74:
c8:83:66:35:ac:42:35:98:45:fb:9f:64:2b:65:52:
a6:75:1e:c8:c5:e5:b0:9d:2c:03:c5:4f:28:5d:3d:
c4:f2:09:9c:05:8f:8a:48:d8:6b:c0:90:f3:e4:0a:
c0:15:41:f2:6d:61:db:0c:c7:f7:c5:94:6f:ec:91:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D0:C5:DE:40:13:C6:AA:84:D7:A8:59:8B:8C:A8:79:1E:88:20:A2
X509v3 Authority Key Identifier:
keyid:43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/7dDF3kATxqqE16hZi4yoeR6IIKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.92.0/23
Signature Algorithm: sha256WithRSAEncryption
51:02:2a:16:28:1c:59:1f:7f:c6:bd:c7:51:1b:81:4c:52:77:
b7:ed:d7:da:fc:59:0b:7a:ad:3b:7f:07:84:d1:ee:28:25:55:
74:56:e5:82:89:c4:09:05:3d:5d:d0:6b:d3:10:5f:a3:a5:62:
c8:3f:82:9e:ed:b4:3a:fd:e0:88:bc:7e:fd:d3:d3:9b:22:28:
1c:a9:9e:6e:3a:94:da:67:33:8a:3f:91:93:4e:6a:70:67:81:
38:d1:84:97:30:e0:a3:d6:75:08:5a:40:5f:6a:fb:2e:19:fb:
d1:78:e3:97:13:dd:5f:fc:bd:78:89:e8:c6:e8:46:bd:5f:d2:
ca:a3:1d:fb:db:de:73:2b:dd:4d:e0:6f:e5:5f:25:f4:17:56:
7a:ae:74:43:35:e9:1f:6a:2f:7f:a4:8c:ff:d6:4f:96:2c:10:
c7:3d:69:6a:31:c9:da:6a:da:04:70:0b:d2:f3:dc:b2:99:19:
1d:d5:13:ce:e0:b8:71:1b:56:d1:b0:ef:ba:4d:b4:95:df:eb:
a5:fa:cb:16:15:a0:52:99:68:03:02:b2:b4:00:80:68:15:47:
14:43:5d:27:ea:2f:d2:ef:0e:2c:8e:c3:ca:5b:f8:b6:51:3b:
e6:8d:56:4f:1f:18:f1:f5:f5:4c:2f:10:89:da:12:db:bf:f8:
70:b6:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org