Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/931c05-0629-4ae5-8806-eb0639081657/1/3dwErCPxl5HbzfvoCZJKZfkM1sQ.roa
File: 3dwErCPxl5HbzfvoCZJKZfkM1sQ.roa (raw, json)
Hash identifier: oLhFoXaAVf1u8H8/JRYEwUdUGjHAsAhQKPd5pojEPeM=
Subject key identifier: DD:DC:04:AC:23:F1:97:91:DB:CD:FB:E8:09:92:4A:65:F9:0C:D6:C4
Certificate issuer: /CN=ac38c63e2a9b4af86c8c493e214bef0975a63082
Certificate serial: 0185714C2CA7171B83B08238DEA91F8F0C30
Authority key identifier: AC:38:C6:3E:2A:9B:4A:F8:6C:8C:49:3E:21:4B:EF:09:75:A6:30:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDjGPiqbSvhsjEk-IUvvCXWmMII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/931c05-0629-4ae5-8806-eb0639081657/1/3dwErCPxl5HbzfvoCZJKZfkM1sQ.roa
Signing time: Mon 02 Jan 2023 07:04:55 +0000
ROA not before: Mon 02 Jan 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57252
IP address blocks: 193.242.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:2c:a7:17:1b:83:b0:82:38:de:a9:1f:8f:0c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac38c63e2a9b4af86c8c493e214bef0975a63082
Validity
Not Before: Jan 2 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dddc04ac23f19791dbcdfbe809924a65f90cd6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a9:e7:cc:88:34:85:4d:19:a5:19:00:0b:65:
85:f6:88:0f:2e:c5:c5:26:fc:21:86:61:e7:60:cb:
2a:67:cb:3d:04:a0:db:78:4c:0a:7e:4f:7f:e8:d7:
26:46:47:2a:72:6f:66:00:23:1d:82:5e:61:e0:77:
68:a1:25:ff:a8:f8:51:34:52:0d:39:68:dc:df:a2:
e0:a4:5e:4a:03:29:ef:24:ab:09:6f:92:0f:9e:82:
10:4d:68:e3:eb:4e:f9:22:fa:3c:ea:e1:4f:51:43:
17:a8:dd:70:81:5b:da:fe:78:0f:57:d5:78:e3:21:
07:75:c0:33:80:51:9a:25:32:ab:2c:fd:31:64:14:
7c:e7:d7:76:5c:71:34:59:25:8c:03:ff:6e:5c:85:
a3:be:6e:f6:ea:0e:b0:4e:bd:26:93:c1:f4:29:26:
f0:a0:80:cf:54:7d:85:4b:20:9c:af:49:8a:ee:13:
dd:c2:9f:a1:70:48:3f:08:ae:ea:70:43:d9:61:a5:
4a:bc:52:79:c9:66:57:ec:b9:cc:c5:92:6e:31:49:
8d:27:f2:cc:0c:3b:2d:28:9a:44:08:ca:b8:09:90:
c4:92:04:29:01:23:66:ff:2b:ab:a2:c2:0a:ad:52:
10:82:16:6d:0f:7f:61:05:54:c5:7b:24:ce:d1:6c:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:04:AC:23:F1:97:91:DB:CD:FB:E8:09:92:4A:65:F9:0C:D6:C4
X509v3 Authority Key Identifier:
keyid:AC:38:C6:3E:2A:9B:4A:F8:6C:8C:49:3E:21:4B:EF:09:75:A6:30:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDjGPiqbSvhsjEk-IUvvCXWmMII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/931c05-0629-4ae5-8806-eb0639081657/1/3dwErCPxl5HbzfvoCZJKZfkM1sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/931c05-0629-4ae5-8806-eb0639081657/1/rDjGPiqbSvhsjEk-IUvvCXWmMII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.104.0/24
Signature Algorithm: sha256WithRSAEncryption
83:53:99:5a:30:ab:a9:c7:8d:16:d2:ff:24:e4:47:03:01:a3:
2f:aa:15:88:b8:8c:39:eb:c8:87:29:1c:18:39:d4:c4:e6:09:
cd:2f:0e:55:df:db:42:09:48:cc:23:2e:05:e7:ba:1f:29:81:
39:49:a6:8e:a6:57:b6:3e:28:19:08:ef:69:fa:65:3a:47:66:
e3:9f:e3:d9:57:cd:ba:f1:fe:fb:c4:03:54:01:b5:cb:65:98:
8c:78:85:df:76:a5:16:f3:35:1a:4b:0d:8d:c9:46:c4:d1:42:
c3:3a:cd:e9:a5:e6:5b:0a:99:5a:1c:5a:6b:01:89:3d:a2:de:
3d:31:a8:1a:ce:ce:44:0e:02:32:99:9d:88:02:25:4d:5f:ae:
8e:57:c3:4e:5c:4d:80:d1:fd:b8:3e:71:be:9e:a2:f9:d7:6d:
4d:be:b5:51:01:cc:77:8d:a4:6c:3e:9f:90:9b:78:53:b9:45:
bf:0c:59:3f:e4:49:3f:43:66:a6:f1:fe:44:09:41:78:b7:c0:
fe:59:c9:a2:70:26:15:c0:01:54:57:2c:b6:18:e4:60:69:00:
b0:a8:9b:9f:0a:38:0f:26:9b:3a:f7:b7:93:46:e9:5e:2d:17:
a6:0f:0e:42:82:2e:a3:f5:80:7d:ae:2d:d3:3f:15:7f:88:4c:
3c:85:e9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:40 2024 by rpki-client on console-fra.rpki-client.org