Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cd1a24-67b1-4b4e-931e-4994fa74dfdd/1/Odiau0YuFlVlYX5WJ8Tcr9l4M7A.roa
File: Odiau0YuFlVlYX5WJ8Tcr9l4M7A.roa (raw, json)
Hash identifier: Bzm/edH7NYZNhmhH6Hir7fUAwADdMkKnvmPYXwJY0h4=
Subject key identifier: 39:D8:9A:BB:46:2E:16:55:65:61:7E:56:27:C4:DC:AF:D9:78:33:B0
Certificate issuer: /CN=63d5b775375496e63d79edb42b7d7cf40bb6c1f8
Certificate serial: 01856C8A5CB6A959982B15C2D6BF9FC1C56F
Authority key identifier: 63:D5:B7:75:37:54:96:E6:3D:79:ED:B4:2B:7D:7C:F4:0B:B6:C1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W3dTdUluY9ee20K3189Au2wfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cd1a24-67b1-4b4e-931e-4994fa74dfdd/1/Odiau0YuFlVlYX5WJ8Tcr9l4M7A.roa
Signing time: Sun 01 Jan 2023 08:54:44 +0000
ROA not before: Sun 01 Jan 2023 08:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 194.29.101.0/24 maxlen: 24
194.29.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:5c:b6:a9:59:98:2b:15:c2:d6:bf:9f:c1:c5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b775375496e63d79edb42b7d7cf40bb6c1f8
Validity
Not Before: Jan 1 08:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39d89abb462e165565617e5627c4dcafd97833b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:3c:5e:02:a5:59:03:31:f0:8f:4c:19:40:
e6:6e:4c:79:c6:d1:f2:d4:eb:30:65:60:47:e8:0f:
60:1f:47:a0:04:5d:28:57:40:9a:95:a4:62:71:00:
4e:f2:61:bb:99:70:21:9d:15:d7:4e:22:77:74:c8:
98:9b:3f:d7:71:3e:2e:56:95:a3:90:86:af:dc:1b:
19:15:08:cf:01:d0:ac:a5:cd:fd:64:86:c8:36:81:
8b:15:aa:0b:a4:73:ed:0d:a2:66:fa:0d:19:0f:c6:
e7:52:78:22:d1:4a:9d:9d:7d:9c:09:47:eb:e7:d9:
17:fc:25:ce:ec:0a:b4:de:b2:0a:82:56:2c:40:3b:
99:25:b2:b0:44:64:02:1f:57:fc:b4:57:a3:8d:3d:
1f:06:b3:45:e9:28:af:a6:1f:6e:01:27:0e:53:06:
b1:50:26:25:bf:ae:44:fe:da:37:1b:1b:56:08:ae:
62:26:47:71:58:a0:b8:73:e9:29:47:c3:64:e8:44:
c9:2f:25:d4:9a:b4:40:c6:96:ee:90:0a:f3:2a:22:
b4:9a:ac:ff:7a:f2:eb:94:bb:7a:5c:ef:ba:46:29:
7f:b6:4a:b5:f7:7f:2d:e1:dd:4d:31:2e:2c:53:4e:
96:45:c3:41:3f:f1:9d:f8:65:14:68:4f:71:5f:d2:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:9A:BB:46:2E:16:55:65:61:7E:56:27:C4:DC:AF:D9:78:33:B0
X509v3 Authority Key Identifier:
keyid:63:D5:B7:75:37:54:96:E6:3D:79:ED:B4:2B:7D:7C:F4:0B:B6:C1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W3dTdUluY9ee20K3189Au2wfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cd1a24-67b1-4b4e-931e-4994fa74dfdd/1/Odiau0YuFlVlYX5WJ8Tcr9l4M7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cd1a24-67b1-4b4e-931e-4994fa74dfdd/1/Y9W3dTdUluY9ee20K3189Au2wfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.100.0/23
Signature Algorithm: sha256WithRSAEncryption
10:69:0d:70:8d:1e:5d:c1:9c:05:fe:85:be:c2:7b:c7:2b:18:
dc:e8:55:20:cf:b8:81:d6:72:a9:b9:27:0e:44:36:e5:31:f4:
24:9b:77:9e:bd:7c:53:c0:e4:89:ec:dd:22:7a:06:24:bd:db:
02:1d:2f:5a:d6:b1:f1:09:24:19:88:1f:dc:c5:c7:0e:18:07:
61:78:31:45:0b:45:a0:85:94:83:20:40:f0:36:48:ac:67:77:
7b:08:ee:e7:fb:88:75:58:6c:8b:5a:f7:d5:88:06:76:a8:56:
5f:29:fd:69:e7:6a:23:23:f5:a0:04:ab:36:ce:44:0b:8a:bd:
2f:1b:b8:41:eb:03:f7:69:5e:b0:b5:1b:eb:fc:18:a7:a7:75:
d5:d8:5f:dc:f8:41:b6:bd:33:15:83:5a:b5:28:24:9f:5f:4f:
9d:14:03:f5:a6:c7:a5:fc:d9:39:26:1c:26:b4:aa:08:4a:37:
c1:05:92:12:ae:55:c2:ed:34:03:43:16:91:12:7b:60:51:22:
e9:c8:f1:30:f2:c4:a6:c5:e2:0d:80:1f:64:6c:10:ba:6f:e8:
60:47:56:6d:bb:72:f2:17:fc:19:1d:a8:5d:e1:77:dd:05:a9:
af:8c:f7:35:a9:35:85:02:28:53:40:db:6f:81:c3:6a:c7:e4:
d8:39:01:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:51 2024 by rpki-client on console-ams.rpki-client.org