Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/MyGPkACskWy7-5CvBoEuOKTBknU.roa
File: MyGPkACskWy7-5CvBoEuOKTBknU.roa (raw, json)
Hash identifier: py4bK8mc0WK/SG3BQK9xOE8sXhHJUWNhnU33XYtYB9I=
Subject key identifier: 33:21:8F:90:00:AC:91:6C:BB:FB:90:AF:06:81:2E:38:A4:C1:92:75
Certificate issuer: /CN=34d4debf87f67cbb442373817e7d62f758a59acd
Certificate serial: 018CC9B88F0AAA66B5BC7B7566DFAD47590C
Authority key identifier: 34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/MyGPkACskWy7-5CvBoEuOKTBknU.roa
Signing time: Tue 02 Jan 2024 10:29:24 +0000
ROA not before: Tue 02 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 94.143.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:8f:0a:aa:66:b5:bc:7b:75:66:df:ad:47:59:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d4debf87f67cbb442373817e7d62f758a59acd
Validity
Not Before: Jan 2 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33218f9000ac916cbbfb90af06812e38a4c19275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:ad:66:65:4b:85:3a:b6:cd:7a:a8:e7:03:
9b:b8:d9:89:a0:d0:71:71:58:6f:b3:f9:d1:9a:2b:
74:d5:28:ec:e5:dd:3f:41:b6:d0:bc:51:ff:70:20:
f2:f4:8e:1b:27:4a:5f:b7:9a:e3:09:21:09:3b:77:
72:06:d8:9c:3a:e3:1f:6a:e5:03:69:a1:df:b5:13:
ab:56:65:eb:73:ba:87:34:9d:68:d9:e3:22:36:c5:
90:cf:96:0c:12:7e:37:47:72:ea:f1:ae:96:56:74:
3d:94:78:11:fd:d2:ad:2f:03:62:38:c0:e8:0f:f1:
a7:2e:6b:33:02:a0:45:3f:27:18:69:50:58:19:ec:
d7:37:fb:84:96:4a:f3:dc:83:a4:6c:e2:57:74:cf:
0e:17:a8:7b:c8:00:41:8a:ee:90:cb:04:01:9a:8f:
f7:24:6c:d2:5e:c8:f6:68:cc:c9:b1:da:7f:28:41:
46:b6:f8:53:6a:40:4e:6e:86:0d:f5:bd:95:d7:73:
dd:ad:5a:37:df:04:d7:69:0e:5b:d3:c2:6a:76:c6:
d3:54:50:ae:46:a6:5b:e5:df:86:3e:f3:6d:04:f2:
7f:49:54:c5:1f:06:cf:e8:7c:48:c8:89:6d:af:6e:
7d:82:f5:8b:9a:44:0f:58:44:62:85:1f:c3:99:6b:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:8F:90:00:AC:91:6C:BB:FB:90:AF:06:81:2E:38:A4:C1:92:75
X509v3 Authority Key Identifier:
keyid:34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/MyGPkACskWy7-5CvBoEuOKTBknU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c5:c4:6f:45:89:b3:36:45:c8:53:06:14:5e:22:35:6e:10:
bf:6c:e6:e1:3f:02:76:25:82:ff:cd:83:71:66:e9:42:9b:b7:
bd:47:fd:0e:02:8b:c6:94:68:d6:82:7d:14:fe:3d:be:48:b4:
e7:d1:51:c9:54:94:5f:fb:ee:34:45:de:ed:f4:a3:1f:8c:ee:
23:e1:69:8d:76:40:5f:cc:88:73:52:9a:61:51:fb:72:e0:0d:
fb:9e:ff:b0:a6:c8:87:a1:1e:6e:57:fa:f5:16:5a:c9:42:6d:
22:58:fb:87:a9:89:d7:e4:02:8d:73:0f:a7:22:fd:c1:d9:09:
a5:f2:f5:d7:db:a9:2e:09:35:7f:a4:ef:a5:07:81:bc:65:c1:
ed:0f:e3:1d:b4:74:08:a3:c2:37:e5:45:be:83:2d:7d:7c:34:
ba:54:5d:3a:ca:f9:f9:c1:f9:0a:bf:26:95:db:42:e5:da:2f:
58:05:5c:72:47:dd:a8:7f:f8:bd:eb:bc:42:80:f5:c7:9b:4f:
a2:cd:66:00:10:cf:13:c0:67:d3:df:c8:6e:ac:f9:54:8c:46:
d7:75:02:2d:8e:ac:3a:1e:00:e1:88:98:f7:a9:0e:5b:ee:0e:
38:fd:a5:b9:23:43:bb:e7:eb:dc:ff:21:56:40:68:df:4b:f6:
34:59:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:30 2024 by rpki-client on console-fra.rpki-client.org