Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/r6Cfng-agmcClCKe4AwhthOZIMg.roa
File: r6Cfng-agmcClCKe4AwhthOZIMg.roa (raw, json)
Hash identifier: 5j+2ud56j+x49RKAW9vmcoAAyxLy9i7uKBl9YhFfGIo=
Subject key identifier: AF:A0:9F:9E:0F:9A:82:67:02:94:22:9E:E0:0C:21:B6:13:99:20:C8
Certificate issuer: /CN=a0e709fe6c5018b64aabf1540e73d9eed49db0e2
Certificate serial: 01857170A20226322D456C5E9E3E17E9C39C
Authority key identifier: A0:E7:09:FE:6C:50:18:B6:4A:AB:F1:54:0E:73:D9:EE:D4:9D:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/r6Cfng-agmcClCKe4AwhthOZIMg.roa
Signing time: Mon 02 Jan 2023 07:44:44 +0000
ROA not before: Mon 02 Jan 2023 07:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.201.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:70:a2:02:26:32:2d:45:6c:5e:9e:3e:17:e9:c3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e709fe6c5018b64aabf1540e73d9eed49db0e2
Validity
Not Before: Jan 2 07:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afa09f9e0f9a82670294229ee00c21b6139920c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:fb:c8:b2:13:26:d1:3a:9d:c9:d1:66:43:
55:9b:39:ff:73:44:dd:ba:44:b6:25:8d:90:dd:46:
88:bb:33:e6:b6:22:8e:1d:62:8a:2c:19:3e:65:a5:
e7:62:06:83:38:ee:e7:0d:d1:f4:2a:23:cd:8d:77:
01:ac:de:26:88:48:9e:39:56:b4:4a:e8:dd:b2:0f:
29:69:aa:8b:70:74:8a:88:d0:34:9a:b3:ab:31:05:
85:fa:0c:92:a5:ad:a7:8d:cf:50:21:e5:02:d2:1b:
64:97:c6:61:54:1d:bc:29:95:56:db:cd:bb:74:c6:
a6:cb:e1:37:45:d4:83:7e:3f:4b:8b:2b:de:ad:a0:
e2:7e:90:75:94:35:b5:a3:0e:3c:36:67:13:4a:3a:
08:da:d8:13:a2:e8:e2:7e:3b:0c:14:a0:f4:c9:e5:
d5:cd:9a:37:1d:cd:5d:3a:6f:cc:43:68:1e:a1:ee:
f1:33:7a:cc:8f:03:e1:6f:eb:7d:d5:20:10:c2:51:
0d:c9:12:43:0f:c9:01:63:6c:a0:dd:71:57:85:01:
b1:80:c1:25:5d:f1:eb:33:b5:d0:51:1f:a0:5b:d7:
bd:7b:39:c9:dd:71:df:42:8a:88:5d:7c:60:ae:bd:
08:aa:84:28:8e:3a:72:63:58:48:db:cb:1e:b6:8b:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:9F:9E:0F:9A:82:67:02:94:22:9E:E0:0C:21:B6:13:99:20:C8
X509v3 Authority Key Identifier:
keyid:A0:E7:09:FE:6C:50:18:B6:4A:AB:F1:54:0E:73:D9:EE:D4:9D:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/r6Cfng-agmcClCKe4AwhthOZIMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.14.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:bd:c0:00:18:e8:d3:4d:0a:4c:2c:2b:24:8b:e4:f3:12:12:
d3:f6:38:3a:2a:54:96:b7:15:61:7f:5a:4f:69:8c:ef:09:b1:
d3:ef:23:33:b7:e4:eb:a8:e7:d2:47:22:b7:d3:7d:8d:28:90:
f0:3c:56:ee:31:72:6a:d6:3b:22:ca:d3:3d:81:35:46:11:3b:
9d:d7:f3:4b:00:f2:29:37:53:bb:eb:e7:73:87:c1:59:0d:6b:
46:a3:b6:52:2f:21:a1:82:69:8d:98:7a:f4:fa:cd:78:ae:67:
39:14:73:31:b2:bd:c2:37:33:c5:ad:b1:d2:e3:48:99:72:49:
12:6d:f1:d9:46:6e:d1:91:0f:6e:8c:7e:3a:87:f8:0e:32:45:
ed:c3:3b:d0:ce:d0:73:be:3b:00:5a:9a:30:3b:cf:a5:b9:31:
18:73:77:f5:4b:6f:a5:92:ad:4f:39:85:5d:33:04:c4:c3:fb:
dc:5d:d0:8e:e1:13:06:d7:04:c2:6d:da:87:a6:10:70:2f:ba:
38:ed:3a:a6:6b:a0:24:8e:43:04:a5:a1:b4:ea:98:3a:3b:31:
86:30:bd:ed:de:bf:8f:c1:ef:9c:d6:4a:b9:e0:ce:f9:d9:3d:
5f:e0:35:ec:6e:67:e4:7d:68:90:5f:a5:2b:e8:ba:ec:4c:6b:
b0:13:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:41 2024 by rpki-client on console-fra.rpki-client.org