Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/EjwSQHcD9lqdvGyoGriaioXAsfs.roa
File: EjwSQHcD9lqdvGyoGriaioXAsfs.roa (raw, json)
Hash identifier: ySAomL/T1XXO/TL0PKgrXbN1KE6PPL+2g4v68eQlMQw=
Subject key identifier: 12:3C:12:40:77:03:F6:5A:9D:BC:6C:A8:1A:B8:9A:8A:85:C0:B1:FB
Certificate issuer: /CN=7f7a8875274853b0707c36501152f890588cdb21
Certificate serial: 0185E41EF8D2AE7A7D04CFF054411E1A166E
Authority key identifier: 7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/EjwSQHcD9lqdvGyoGriaioXAsfs.roa
Signing time: Tue 24 Jan 2023 14:11:53 +0000
ROA not before: Tue 24 Jan 2023 14:11:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30860
IP address blocks: 93.190.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:1e:f8:d2:ae:7a:7d:04:cf:f0:54:41:1e:1a:16:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7a8875274853b0707c36501152f890588cdb21
Validity
Not Before: Jan 24 14:11:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=123c12407703f65a9dbc6ca81ab89a8a85c0b1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:db:b4:84:a8:c5:96:48:7a:a5:dc:cd:c9:
22:aa:4f:57:bc:12:b9:02:e9:0e:21:09:12:94:80:
f4:4b:71:42:1a:75:a2:8a:85:5e:0e:56:83:79:ec:
6a:87:0b:a4:56:24:60:bd:db:db:17:b0:5a:c0:99:
17:e3:59:1f:85:12:f5:a0:36:9f:1a:83:61:77:b4:
43:70:66:90:54:26:15:e9:b9:84:71:cd:cc:b4:f1:
1b:97:98:37:78:5b:f8:fb:15:7b:b5:1e:b0:2f:b7:
9d:90:be:95:13:f5:af:94:22:cb:70:94:5b:43:ee:
ad:73:0a:4b:a3:0a:b4:43:51:0b:7d:f1:30:f5:53:
8d:ec:74:56:cc:c5:a2:5d:10:ec:0d:08:cd:06:6b:
8a:cc:a9:d7:ce:31:0d:85:d7:72:3b:2d:57:a6:6e:
fc:80:22:3d:00:fa:90:03:4a:d6:bf:1a:66:79:dd:
a7:34:9e:3d:04:63:fa:2b:ab:aa:03:5e:7a:65:ba:
d3:b9:da:0d:3b:6c:fe:58:09:a7:fe:03:28:06:6a:
9a:46:f6:9c:21:eb:a9:62:bf:c7:30:4f:b6:e2:41:
82:3a:99:8f:c3:cf:f5:c7:88:85:7b:19:5d:86:19:
9f:93:8d:9d:70:00:61:74:64:91:52:2b:16:07:fd:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:12:40:77:03:F6:5A:9D:BC:6C:A8:1A:B8:9A:8A:85:C0:B1:FB
X509v3 Authority Key Identifier:
keyid:7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/EjwSQHcD9lqdvGyoGriaioXAsfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/f3qIdSdIU7BwfDZQEVL4kFiM2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.125.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:10:f4:7b:d3:2f:38:9a:59:73:7e:47:63:a9:c0:d5:0e:54:
4d:e8:46:5b:6a:61:20:6d:d5:34:48:14:da:c8:5c:65:b8:f9:
5f:82:c2:aa:2f:54:d4:94:77:0f:51:21:a1:46:a4:5e:a4:0d:
43:f5:25:a2:7b:26:ef:e9:15:89:2d:f6:5d:5e:5c:a7:af:ff:
60:f6:03:85:50:85:f7:93:59:9c:ff:36:f1:26:a6:f4:f4:bf:
9e:10:2c:19:3c:e5:c5:bd:35:33:56:a7:3a:0b:3f:ec:32:e1:
27:a4:63:c1:08:94:a5:fd:e3:73:b9:4e:1a:39:74:22:9f:6d:
f7:fa:51:17:7e:85:a1:73:a6:42:98:94:62:18:e7:1e:68:3f:
e3:08:38:51:a5:37:1d:91:15:c5:ed:65:1d:9c:45:4e:d5:07:
fe:88:65:9a:08:27:37:a8:47:8a:a2:5c:72:4b:c4:1b:8b:be:
a2:88:46:2a:5e:ce:07:ff:5c:e7:d3:62:e4:68:a3:03:fa:06:
53:e3:87:ad:0b:0e:19:f1:fa:c2:cc:1d:fd:4d:c4:6b:27:af:
bd:3b:04:cf:9d:79:7d:4a:b6:0a:7e:60:d5:d7:67:4f:69:05:
a1:de:9e:e1:34:38:30:b2:2a:68:ef:ea:42:7f:9b:53:25:fc:
bf:7b:02:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net