Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/EZX_84o3lCYIyGtSnuyd73lXcaQ.roa
File: EZX_84o3lCYIyGtSnuyd73lXcaQ.roa (raw, json)
Hash identifier: +LOWvMyGIfuxeaM+3kHuAYTPqBWDil652fTR6l+fhE4=
Subject key identifier: 11:95:FF:F3:8A:37:94:26:08:C8:6B:52:9E:EC:9D:EF:79:57:71:A4
Certificate issuer: /CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
Certificate serial: 018570151C1B6CE1330CA9AFDA6232BC1211
Authority key identifier: 19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/EZX_84o3lCYIyGtSnuyd73lXcaQ.roa
Signing time: Mon 02 Jan 2023 01:25:09 +0000
ROA not before: Mon 02 Jan 2023 01:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.149.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:1c:1b:6c:e1:33:0c:a9:af:da:62:32:bc:12:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
Validity
Not Before: Jan 2 01:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1195fff38a37942608c86b529eec9def795771a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:04:86:5f:20:8d:10:c1:96:b6:ff:3c:d1:
f1:c3:1d:bc:fb:20:75:dd:3e:1e:bd:ac:08:a9:7a:
33:44:2e:0f:01:ae:61:5d:a9:59:ea:a7:56:4b:a9:
02:dc:14:4b:b1:76:02:0e:16:0d:e7:a3:97:9f:7a:
63:46:08:bd:eb:16:b1:80:e9:bb:90:19:75:f3:2d:
dd:6c:13:1a:f2:76:c2:75:b8:ca:51:59:f6:b1:61:
be:4a:e2:c6:12:2e:4c:53:de:b1:7e:00:3f:12:5c:
76:a2:32:b7:30:73:7d:c5:0c:e2:9a:39:d8:df:0a:
80:22:25:d6:2a:80:eb:99:e9:90:0a:30:1c:a1:5e:
0f:9b:f2:7d:f8:6b:9d:b8:be:5d:a9:95:ab:31:2d:
f4:d8:c8:3c:ec:bb:bc:c8:5d:16:c3:f5:12:3b:a4:
0b:53:f7:c9:e1:79:a4:e3:79:5b:74:4f:2f:bd:2e:
4a:99:1c:f2:c8:c1:33:32:25:82:59:83:e8:36:eb:
19:c4:79:b2:2c:01:fd:6e:38:37:20:4f:04:2e:30:
b2:0f:4b:64:65:d0:f1:99:42:8d:81:e6:4b:14:ab:
af:cb:5f:b9:66:3b:e8:88:40:56:18:33:f8:9b:2b:
1b:7a:c9:c1:cc:9f:32:c2:45:d0:b9:5a:75:fe:05:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:FF:F3:8A:37:94:26:08:C8:6B:52:9E:EC:9D:EF:79:57:71:A4
X509v3 Authority Key Identifier:
keyid:19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/EZX_84o3lCYIyGtSnuyd73lXcaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b4:fe:45:21:10:dc:7d:86:31:b5:fe:22:ca:d8:0d:cf:19:
17:c2:bc:27:e2:8e:6f:2b:88:59:40:66:e6:b9:cf:92:7d:3f:
ca:94:fd:44:30:ee:02:9d:3e:90:82:d2:07:9e:4c:a4:c3:bd:
a4:c0:b0:8e:1a:29:09:37:de:81:be:12:58:73:28:0b:8d:ef:
ea:b2:a0:5c:a0:50:c3:ef:53:8e:0d:13:4e:92:26:34:26:42:
a9:94:cb:52:ea:dd:c7:34:2f:1c:a2:ee:ae:d9:1d:79:9d:8c:
7a:47:6c:05:98:04:c3:fc:77:30:14:09:12:d4:99:68:78:21:
24:f1:6a:3c:7f:00:09:c4:40:b4:17:80:90:96:c4:5d:2b:31:
1c:01:4c:56:b9:c5:22:2d:44:83:45:2e:cb:27:c4:24:a6:3f:
72:53:8f:f2:b6:a1:e5:cf:c2:0f:7c:92:ff:31:97:49:12:c0:
ea:c1:cd:72:ae:61:bb:b4:7e:0f:37:b5:bd:3d:77:71:00:b5:
8f:50:27:b3:b0:13:4b:95:70:2a:31:67:a4:1b:19:ae:83:65:
90:6d:16:be:fa:bb:32:26:9d:4d:2b:51:a0:87:a1:ba:f9:ab:
d9:13:3b:e8:91:76:38:5b:bf:8e:b0:54:dc:b3:8d:b6:94:4e:
a9:64:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:48 2023 by rpki-client on console-ams.rpki-client.org