Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a4b7d-0372-41bf-bf38-796b059a3b93/1/_6LLYV1fCm-7DjA00GlAXH0kT7s.roa
File: _6LLYV1fCm-7DjA00GlAXH0kT7s.roa (raw, json)
Hash identifier: oqInmd88ty8iWGve1YeZZm+Kw3KMpeTRKnVMVAQs/64=
Subject key identifier: FF:A2:CB:61:5D:5F:0A:6F:BB:0E:30:34:D0:69:40:5C:7D:24:4F:BB
Certificate issuer: /CN=b536bd81b38c70bf1fb259bc9752eacebe55b738
Certificate serial: 01857255AB5B5B96EBE34E26A29D194FBC4C
Authority key identifier: B5:36:BD:81:B3:8C:70:BF:1F:B2:59:BC:97:52:EA:CE:BE:55:B7:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTa9gbOMcL8fslm8l1Lqzr5Vtzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a4b7d-0372-41bf-bf38-796b059a3b93/1/_6LLYV1fCm-7DjA00GlAXH0kT7s.roa
Signing time: Mon 02 Jan 2023 11:54:54 +0000
ROA not before: Mon 02 Jan 2023 11:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209986
IP address blocks: 194.39.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:ab:5b:5b:96:eb:e3:4e:26:a2:9d:19:4f:bc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536bd81b38c70bf1fb259bc9752eacebe55b738
Validity
Not Before: Jan 2 11:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffa2cb615d5f0a6fbb0e3034d069405c7d244fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:ab:61:0f:e3:ea:d9:fa:5e:6c:ba:12:d6:
4c:24:dc:f4:df:ba:ba:32:89:83:b3:40:c1:f5:72:
c4:39:cc:7f:f8:04:2f:63:62:ab:f9:f3:41:38:19:
c6:0b:04:a2:bd:60:ad:81:bb:a0:11:6a:5e:21:e1:
40:62:dc:49:78:72:1e:99:94:06:b6:b7:ad:69:f0:
8a:05:5b:fb:c3:b5:97:ff:c3:2f:73:28:cc:14:0e:
c7:8d:0a:18:66:e1:5f:a2:ba:9b:10:41:7a:1f:3a:
d9:83:7d:dc:30:88:5b:d8:7b:8e:eb:0c:7e:dc:91:
54:bc:14:ea:66:50:9a:e6:9a:7f:0a:82:08:60:5e:
aa:29:fe:b9:35:41:68:fc:77:74:15:10:87:b2:1f:
48:6b:74:6b:c0:ce:93:28:8d:b3:0f:ef:61:ed:3d:
30:8a:7e:79:0f:e8:1c:97:31:a0:d8:1e:f8:3b:85:
43:e0:f4:1f:75:a2:e0:79:3c:99:82:20:76:66:f1:
aa:e9:86:be:47:1f:e3:45:0a:e4:8e:08:d4:9c:b6:
d2:38:65:62:de:a0:c4:d5:1e:cb:6f:90:b2:03:47:
11:84:11:42:d8:72:28:22:0c:91:72:ad:9e:2c:4a:
b0:aa:5c:04:0e:9f:5d:65:64:6c:63:4e:09:2b:db:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:CB:61:5D:5F:0A:6F:BB:0E:30:34:D0:69:40:5C:7D:24:4F:BB
X509v3 Authority Key Identifier:
keyid:B5:36:BD:81:B3:8C:70:BF:1F:B2:59:BC:97:52:EA:CE:BE:55:B7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTa9gbOMcL8fslm8l1Lqzr5Vtzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a4b7d-0372-41bf-bf38-796b059a3b93/1/_6LLYV1fCm-7DjA00GlAXH0kT7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a4b7d-0372-41bf-bf38-796b059a3b93/1/tTa9gbOMcL8fslm8l1Lqzr5Vtzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:f2:04:45:04:24:37:ee:c3:fa:41:01:cd:bc:b2:eb:36:71:
8a:77:89:43:15:45:26:84:81:45:ee:06:ed:5d:20:1a:a9:b3:
2a:73:5b:6b:29:6f:fb:6e:b7:98:9c:cf:b3:df:4f:2e:5e:8b:
77:a8:f2:04:2e:38:d7:24:91:1a:8e:68:0e:81:8b:19:7d:34:
c2:45:37:a5:ad:66:46:10:05:c8:18:02:10:7d:d1:48:70:09:
9d:db:9e:fe:0a:36:29:1e:cc:1a:6a:e6:40:1a:49:b4:1c:15:
1b:74:10:67:ac:47:21:e5:c7:48:bf:1b:d7:33:a0:0d:7f:d6:
af:4d:80:0b:ac:67:c3:7c:41:91:be:54:cd:b0:ac:c0:ec:f8:
d3:fb:45:09:38:15:55:98:d4:d4:06:5a:d9:43:ec:29:38:b6:
37:70:cf:51:fe:8b:a5:ad:0f:02:54:8d:01:fc:db:60:f7:ee:
60:44:02:2b:65:33:0d:fa:f0:e7:0d:32:37:93:b4:09:61:7a:
e4:d1:bb:1a:36:a4:5a:48:49:0b:be:77:6e:3a:4d:5d:5f:88:
8a:cf:c9:1a:d3:77:10:ef:50:8e:f0:64:77:13:58:e3:ba:57:
9b:f5:2c:e2:5f:b4:77:7c:ed:74:44:39:b5:c4:d4:c5:8f:22:
6d:6c:f7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:31 2024 by rpki-client on console-ams.rpki-client.org