Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/PRlzMLYKPLWIgkl6K8vxIEXAtvM.roa
File: PRlzMLYKPLWIgkl6K8vxIEXAtvM.roa (raw, json)
Hash identifier: Q5RDbOgvcpcdhYIDCF/PRsO0bbtEffJMHqSVU1fKYao=
Subject key identifier: 3D:19:73:30:B6:0A:3C:B5:88:82:49:7A:2B:CB:F1:20:45:C0:B6:F3
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 0185C9994989230B76C34F413B6CF50D3402
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/PRlzMLYKPLWIgkl6K8vxIEXAtvM.roa
Signing time: Thu 19 Jan 2023 10:35:44 +0000
ROA not before: Thu 19 Jan 2023 10:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 194.61.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:99:49:89:23:0b:76:c3:4f:41:3b:6c:f5:0d:34:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jan 19 10:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d197330b60a3cb58882497a2bcbf12045c0b6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:62:8c:6e:2c:09:92:82:5a:a3:10:e7:43:
b4:b2:a0:9c:0e:cd:06:55:df:73:c4:22:0a:49:dc:
ae:36:fb:34:64:bc:df:ba:e1:c8:5c:96:56:cc:97:
3d:58:af:c2:45:bb:26:d7:26:2e:b0:52:f6:a9:10:
f5:cf:5d:14:04:c0:c3:f7:f3:ec:d5:a5:71:bd:67:
90:72:ca:87:cb:5f:7e:1d:18:d8:f8:9c:04:42:3c:
2e:e8:d8:3a:04:f5:9e:9c:9a:5f:7e:5a:6f:8f:b3:
8f:a1:62:6c:ef:ed:60:d8:cd:6b:d2:c4:15:a7:e5:
2b:f4:b9:19:23:33:fa:a1:ce:28:8b:37:8b:71:8c:
1a:cd:84:87:ee:f0:1f:45:d3:eb:8b:47:66:0d:0a:
84:ee:79:e5:a2:58:7b:56:34:ed:31:df:9f:24:62:
a6:2b:ce:49:48:8d:bf:c5:66:ea:7e:34:a6:5c:2c:
d0:a0:26:57:a9:5a:7d:5c:f9:49:f7:3f:2c:1a:8d:
bf:67:f0:cd:12:6a:39:b8:6f:96:fc:fd:87:f2:bc:
fc:87:94:73:2a:e3:78:6f:a1:a9:9e:cb:ce:57:78:
96:77:b8:b6:aa:8d:f5:46:f8:3b:3d:fa:6c:35:0c:
9e:c3:e0:07:c6:18:db:ae:33:09:21:42:86:77:85:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:73:30:B6:0A:3C:B5:88:82:49:7A:2B:CB:F1:20:45:C0:B6:F3
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/PRlzMLYKPLWIgkl6K8vxIEXAtvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.9.0/24
Signature Algorithm: sha256WithRSAEncryption
69:57:24:cf:e9:e2:47:c1:b7:8c:c4:b9:e2:e7:94:64:f2:5e:
62:da:ad:a2:8c:3f:12:17:d6:52:74:cc:a9:1f:e5:68:58:90:
e1:31:e7:99:d2:02:58:71:98:bb:08:c9:74:1a:79:6d:5c:da:
c7:b6:a0:60:db:80:3f:00:e9:ad:c4:20:83:1c:bf:d0:68:0b:
e6:17:82:4b:6b:f1:b0:22:6e:23:66:84:ae:99:be:67:df:66:
5d:7f:a7:27:20:0a:82:68:46:6f:df:e8:e5:42:42:fa:13:1d:
eb:99:84:bd:ff:ee:d3:f4:eb:47:60:a8:bc:0b:e7:01:e3:0d:
0e:56:70:fb:40:2f:03:c8:56:fc:15:dc:52:0d:53:c7:3d:c8:
5c:d4:a0:ab:4f:cc:85:28:e2:a0:5e:71:f0:68:c0:00:b2:43:
f5:ee:7d:17:36:e6:91:80:87:3c:0e:9d:8d:fd:2d:fe:bd:19:
09:80:1f:7d:88:72:9d:71:0c:62:14:c9:4f:f6:40:84:91:8f:
11:5e:45:fd:8d:ef:fd:b4:6c:97:a5:5e:d0:39:03:a5:56:a6:
39:48:50:12:c5:0b:5a:34:45:f7:67:8e:5d:9e:f6:35:f9:f5:
25:1f:61:ff:4e:64:8d:bc:fa:da:94:a4:8e:bc:0b:46:43:08:
6a:62:c2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org