Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/s72ZMHOb11Vd6GxFJ_bNJvn-_V8.roa
File: s72ZMHOb11Vd6GxFJ_bNJvn-_V8.roa (raw, json)
Hash identifier: K0OSYFxwL8WZtye4THgKYDhUkSRwPkyontOqs/dgi7Q=
Subject key identifier: B3:BD:99:30:73:9B:D7:55:5D:E8:6C:45:27:F6:CD:26:F9:FE:FD:5F
Certificate issuer: /CN=360214db093d5e27995ab463312fe4076eb0cf50
Certificate serial: 018CC9BC0D3CFF998B1BD481EDDF640F0F06
Authority key identifier: 36:02:14:DB:09:3D:5E:27:99:5A:B4:63:31:2F:E4:07:6E:B0:CF:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgIU2wk9XieZWrRjMS_kB26wz1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/s72ZMHOb11Vd6GxFJ_bNJvn-_V8.roa
Signing time: Tue 02 Jan 2024 10:33:13 +0000
ROA not before: Tue 02 Jan 2024 10:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20506
IP address blocks: 194.176.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0d:3c:ff:99:8b:1b:d4:81:ed:df:64:0f:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360214db093d5e27995ab463312fe4076eb0cf50
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3bd9930739bd7555de86c4527f6cd26f9fefd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bb:17:03:55:48:e3:73:4d:bc:31:fb:c4:9f:
b4:58:69:ae:09:a9:f8:9c:fc:fa:83:74:23:ba:53:
c0:91:71:37:97:3f:0a:e1:7b:8c:31:cc:bc:e1:90:
dd:7c:37:e3:1f:f9:07:ad:54:9e:e5:77:a6:14:73:
df:63:e2:22:d1:68:3c:41:a0:bb:8a:9f:bd:61:15:
14:40:69:b9:6f:71:39:95:d9:7c:30:6a:e1:6a:40:
34:06:f1:61:d3:f2:99:f0:42:7d:8b:ec:84:fb:af:
eb:4c:d6:d7:de:e5:86:df:9f:08:d6:71:29:30:f2:
61:db:4e:6a:3f:af:59:87:88:5d:91:15:06:85:47:
50:bc:a2:38:60:71:cb:97:57:47:22:96:79:58:78:
f5:e3:20:31:d0:a4:11:e2:73:c4:c4:a6:a4:8a:fd:
f9:90:25:7b:ff:0e:9d:c6:86:50:11:7a:87:64:4f:
9f:97:a6:92:47:8f:e5:2f:19:20:8e:98:bd:24:86:
9d:6f:17:91:d4:12:f8:f8:cb:0e:b3:38:28:eb:02:
02:5e:b2:6c:eb:27:e2:bb:d3:0a:b1:0c:f9:8b:ca:
be:36:d2:63:94:e5:c5:3e:9a:eb:31:a2:12:3b:1f:
23:9a:12:0c:fb:34:d5:3a:74:14:f2:ed:7e:a9:04:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BD:99:30:73:9B:D7:55:5D:E8:6C:45:27:F6:CD:26:F9:FE:FD:5F
X509v3 Authority Key Identifier:
keyid:36:02:14:DB:09:3D:5E:27:99:5A:B4:63:31:2F:E4:07:6E:B0:CF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgIU2wk9XieZWrRjMS_kB26wz1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/s72ZMHOb11Vd6GxFJ_bNJvn-_V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/NgIU2wk9XieZWrRjMS_kB26wz1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:34:1c:21:11:57:d9:09:48:28:1d:54:55:0c:ca:29:8b:1c:
b7:d2:25:4f:0e:e5:9f:e7:31:16:01:51:47:90:c4:86:4e:d2:
b3:75:e9:d1:5b:7b:33:d0:51:7e:2b:84:2f:de:2c:b1:bd:bd:
6d:8f:83:ef:4b:8a:35:1f:af:89:5a:e9:ce:b7:bd:5e:f4:27:
ae:39:9e:2b:97:3f:5f:61:0d:9d:ae:90:57:76:b3:53:08:52:
e8:1e:ec:af:ca:cc:f0:2d:86:a6:ee:23:93:f3:f0:54:59:11:
37:14:63:7d:03:e4:c5:6f:b0:80:94:4b:74:92:75:3c:8f:5c:
e3:35:a1:51:2f:ec:58:fa:da:91:4f:b2:2f:7b:89:b8:cc:8e:
f3:5c:62:f7:46:86:8a:5a:f2:e4:eb:44:53:7f:45:8f:ab:1d:
01:51:8c:b0:d0:52:5b:d8:dd:7d:7f:ba:84:e5:fe:60:f1:f4:
ca:98:69:75:66:9c:28:10:9d:92:f9:7f:cb:6a:b2:17:fe:85:
18:34:63:2d:fa:ef:13:88:0a:31:cc:20:31:f5:cb:54:3c:46:
f7:73:cb:c9:ac:8d:77:23:59:9c:5e:5c:f7:72:e6:2f:9d:37:
96:43:bc:af:80:d5:fb:e9:6f:34:86:4f:4a:eb:15:9b:55:ab:
e9:92:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:07 2024 by rpki-client on console-ams.rpki-client.org