Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/qfVntiZxkWUsmPJjk5oGOuzWpJ4.roa
File: qfVntiZxkWUsmPJjk5oGOuzWpJ4.roa (raw, json)
Hash identifier: /ZiCTRqiYpc1BGZgkzD/HjFTipMsTHWTjakOnGOtqzU=
Subject key identifier: A9:F5:67:B6:26:71:91:65:2C:98:F2:63:93:9A:06:3A:EC:D6:A4:9E
Certificate issuer: /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial: 0182910E2DE11E0D373A1EB823B991CAE060
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/qfVntiZxkWUsmPJjk5oGOuzWpJ4.roa
Signing time: Fri 12 Aug 2022 07:56:41 +0000
ROA not before: Fri 12 Aug 2022 07:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.49.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:0e:2d:e1:1e:0d:37:3a:1e:b8:23:b9:91:ca:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Validity
Not Before: Aug 12 07:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9f567b6267191652c98f263939a063aecd6a49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:02:8d:76:bf:79:19:5f:e3:52:9c:43:70:
1c:df:8f:95:73:18:54:ed:da:aa:f8:f0:55:94:a4:
32:cc:fc:b2:b0:38:7e:3f:9f:c3:83:59:7d:02:5d:
a1:08:4d:58:9e:2f:c7:d0:fc:d3:9e:56:0d:c0:25:
d6:f0:fe:74:ed:98:8c:91:94:d8:53:79:2b:24:98:
11:ed:a4:05:95:73:5f:51:f2:c5:d1:f6:c8:2d:46:
02:34:72:25:25:4d:b2:5c:5d:17:75:be:4f:4c:03:
11:10:8c:1f:e7:78:b2:e4:7c:09:1a:97:98:1b:20:
a6:00:cb:53:b9:19:be:7e:0b:06:46:7c:07:f5:ec:
23:32:11:42:20:05:c0:8e:e5:27:22:e9:9e:c1:62:
68:4e:fa:9e:f7:8b:18:b2:fe:a9:e4:63:a4:1b:59:
66:2a:3b:56:bd:97:94:80:92:c4:fb:b3:61:1e:f2:
7c:e0:fe:fc:61:bf:b0:a8:bb:ce:02:54:27:58:02:
da:46:37:33:18:be:2d:86:89:da:6a:71:32:7d:57:
d8:44:5d:5b:ee:78:b6:23:10:ff:e6:4c:a1:07:9b:
ef:ed:87:33:33:98:26:bd:30:a5:23:0c:ee:d8:ff:
88:ea:2b:04:cc:27:ab:f0:ef:52:0b:21:d0:b5:5a:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:67:B6:26:71:91:65:2C:98:F2:63:93:9A:06:3A:EC:D6:A4:9E
X509v3 Authority Key Identifier:
keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/qfVntiZxkWUsmPJjk5oGOuzWpJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.95.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a4:69:df:10:03:c8:ff:18:b6:10:3e:2e:8a:81:cd:a1:97:
5c:f9:ff:66:7b:fc:69:ba:ff:0f:79:e3:67:be:e6:50:2a:8a:
dc:e2:e1:b1:19:02:72:46:20:0e:80:c6:de:e0:ff:35:e7:c7:
97:05:1b:0b:16:54:47:9c:cb:5f:5d:ba:7a:2b:0a:5a:a7:25:
21:17:c0:e2:00:50:6f:d7:b2:e2:f3:e2:52:18:99:6b:63:5a:
14:0b:c7:1a:da:85:42:18:f2:1e:fd:76:a5:57:5a:c2:e5:95:
74:6b:69:11:db:71:cb:a3:29:5a:44:4a:88:36:38:e8:65:ab:
2b:66:eb:cd:9a:62:56:3a:91:64:7d:2d:20:b7:1d:21:27:40:
cf:3f:68:af:27:cc:e6:e4:b9:82:5b:aa:79:eb:b4:28:4f:61:
cb:1e:50:e0:96:8c:55:3c:fd:45:cc:38:a3:85:18:25:af:34:
1e:0b:c5:1c:c6:61:a2:62:25:5f:fd:9c:1c:97:2d:02:76:3c:
53:11:31:27:5b:bb:f6:09:8a:b6:d2:45:cb:cc:75:6f:56:d3:
d4:e4:e7:99:bf:7f:c2:b7:40:4c:f7:56:88:1b:89:87:fb:72:
39:c8:b2:62:8e:5a:03:44:60:bd:49:ba:05:ce:8d:96:ef:01:
b8:6c:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:46 2024 by rpki-client on console-ams.rpki-client.org