Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/sU3D9Zygc1fql7rNVZSlb5R4PAE.roa
File: sU3D9Zygc1fql7rNVZSlb5R4PAE.roa (raw, json)
Hash identifier: iAPB/t7MXpV0W/213dyd4QY2PTEVKU1cLUmV/yiupKw=
Subject key identifier: B1:4D:C3:F5:9C:A0:73:57:EA:97:BA:CD:55:94:A5:6F:94:78:3C:01
Certificate issuer: /CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
Certificate serial: 018FB95EB56D3C470CCC8562C6E8F6B9D531
Authority key identifier: F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/sU3D9Zygc1fql7rNVZSlb5R4PAE.roa
Signing time: Mon 27 May 2024 09:25:42 +0000
ROA not before: Mon 27 May 2024 09:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34177
IP address blocks: 81.161.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:5e:b5:6d:3c:47:0c:cc:85:62:c6:e8:f6:b9:d5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
Validity
Not Before: May 27 09:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b14dc3f59ca07357ea97bacd5594a56f94783c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:e0:67:a5:2b:52:28:80:c3:cb:a8:1d:4e:
5b:ee:9e:1a:87:50:26:30:02:10:10:d8:4d:ca:51:
35:9a:2c:b0:7a:e9:2b:4b:e8:c4:7d:93:c8:66:1c:
27:24:aa:96:f1:d2:6b:a8:3a:32:f7:46:31:c1:d5:
cb:98:98:02:16:f7:65:0f:a7:cd:f2:f6:86:a6:05:
17:71:db:18:f1:f0:26:13:eb:b5:24:2c:3d:3a:38:
6a:15:c7:26:d1:d8:30:c1:27:aa:7c:65:f4:94:62:
70:e2:6c:10:4c:17:f6:a4:e6:1b:75:fb:cf:bc:fe:
8d:1c:1c:fc:ce:3c:b8:04:1d:1c:69:03:13:ef:16:
98:e3:da:dc:71:35:75:05:c7:a7:ab:d1:16:25:dc:
b8:aa:51:2f:e9:28:ad:ec:b8:44:88:51:02:93:44:
7a:44:3f:f5:a6:ac:63:3e:ea:a8:4d:b8:56:b3:2a:
1c:0a:d4:7e:e9:8b:67:92:0d:56:38:8d:11:39:87:
37:46:de:05:7f:8b:fb:ac:15:a8:a1:4c:a5:b0:6f:
a3:b5:6a:da:30:8b:7e:a7:d1:60:ab:a6:ac:48:7c:
cb:c6:b4:49:89:2a:59:38:d6:36:b6:c9:34:37:66:
99:12:6d:9a:89:29:e0:16:d8:13:34:df:a5:b4:a7:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4D:C3:F5:9C:A0:73:57:EA:97:BA:CD:55:94:A5:6F:94:78:3C:01
X509v3 Authority Key Identifier:
keyid:F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/sU3D9Zygc1fql7rNVZSlb5R4PAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cf:79:19:76:b0:35:1b:5b:78:a5:27:8b:0a:26:ac:3a:6f:
90:a9:e7:c3:de:a7:9a:00:a7:a9:fe:79:82:51:f7:47:30:63:
26:b6:d7:1a:dc:1a:e2:e4:a8:04:c1:85:d4:5a:9d:d3:a9:f3:
65:ef:93:bf:01:84:cc:be:0f:19:88:fd:f5:1b:93:bb:e8:d5:
dc:af:d8:ff:f4:42:4f:10:0a:74:38:0a:58:72:31:b9:48:a9:
70:92:e6:64:5a:a3:cd:c5:eb:67:40:09:64:90:67:16:de:bf:
e4:02:df:8e:f8:9e:3f:32:85:23:47:38:a1:ab:1b:78:d6:a0:
c9:a3:96:fa:e2:40:96:e0:65:5a:64:22:36:9c:b2:db:0c:d1:
ad:3d:3b:62:53:16:e6:f6:82:82:ed:1f:9a:47:9c:14:ba:8d:
51:d6:1a:e2:21:08:62:5d:c1:6a:d8:0d:90:f1:85:c9:85:4c:
33:48:aa:5e:87:3e:3a:be:1f:c8:d1:5b:94:dc:b1:21:3f:c0:
c4:d7:2e:62:8b:12:db:59:44:34:8b:52:48:09:08:f5:63:c4:
5d:c0:a8:13:a9:79:f8:66:e8:fe:f9:b3:ab:30:67:da:a6:3f:
68:b3:fb:9c:62:93:bd:ba:57:19:ac:2a:98:11:d0:76:75:ee:
be:ca:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 13:09:03 2024 by rpki-client on console-ams.rpki-client.org