Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/RTq24wgXwDv9VmbEBeO24xe8HkU.roa
File: RTq24wgXwDv9VmbEBeO24xe8HkU.roa (raw, json)
Hash identifier: SPNrkcWKxZnvY0EzM9dWqoXR2V5ZQAfXfqjrV+vvLwg=
Subject key identifier: 45:3A:B6:E3:08:17:C0:3B:FD:56:66:C4:05:E3:B6:E3:17:BC:1E:45
Certificate issuer: /CN=a2ba304d9c599ef2667cca07033690aa2af871e4
Certificate serial: 01856CAF0EB71DC31DA6D43B6A45B7219CB8
Authority key identifier: A2:BA:30:4D:9C:59:9E:F2:66:7C:CA:07:03:36:90:AA:2A:F8:71:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orowTZxZnvJmfMoHAzaQqir4ceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/RTq24wgXwDv9VmbEBeO24xe8HkU.roa
Signing time: Sun 01 Jan 2023 09:34:49 +0000
ROA not before: Sun 01 Jan 2023 09:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.62.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:0e:b7:1d:c3:1d:a6:d4:3b:6a:45:b7:21:9c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ba304d9c599ef2667cca07033690aa2af871e4
Validity
Not Before: Jan 1 09:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=453ab6e30817c03bfd5666c405e3b6e317bc1e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:4a:67:48:ab:96:ec:9a:9e:c5:62:09:7d:
54:c3:35:55:26:a9:8d:25:db:7d:ea:65:a6:4e:cc:
82:10:ee:b1:5c:43:54:9d:59:c1:e1:62:79:e8:9b:
38:2e:7f:71:fa:54:ee:63:29:4c:54:b4:c7:5c:ca:
7b:de:17:da:6a:24:a9:60:c4:3b:e3:52:c0:d9:e1:
8e:31:d6:81:36:f0:91:c9:db:33:b7:4b:60:66:e0:
26:10:e3:bc:67:8a:74:08:4c:b3:3d:35:75:11:af:
59:b0:80:94:0e:58:37:53:94:2a:cd:9d:f3:fa:98:
dc:50:37:48:d8:5b:a4:ca:ca:cd:7f:9b:1a:f1:d1:
7a:29:32:d9:a2:d3:ce:a1:d0:56:64:d6:c9:14:83:
13:1c:1e:f2:b9:26:55:37:00:d9:c0:fa:25:b5:d8:
60:4a:d6:ad:bb:d3:57:c3:0d:d6:9f:b2:a3:0e:07:
de:1b:0f:f1:be:27:0c:f0:fb:81:df:fe:d6:1f:0f:
a2:8b:11:0a:11:18:bc:43:f0:18:2a:21:aa:28:6f:
0d:e3:02:00:25:79:34:f5:b3:16:a8:5b:d6:03:38:
03:50:aa:fa:85:a4:f3:83:49:09:aa:24:5e:67:8c:
53:53:be:c4:96:fd:3c:04:55:dc:3f:f8:39:91:7b:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:B6:E3:08:17:C0:3B:FD:56:66:C4:05:E3:B6:E3:17:BC:1E:45
X509v3 Authority Key Identifier:
keyid:A2:BA:30:4D:9C:59:9E:F2:66:7C:CA:07:03:36:90:AA:2A:F8:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orowTZxZnvJmfMoHAzaQqir4ceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/RTq24wgXwDv9VmbEBeO24xe8HkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/orowTZxZnvJmfMoHAzaQqir4ceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.18.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bc:cb:30:c3:ff:b3:16:f8:f7:53:55:9d:ac:e3:a0:ce:be:
bf:0b:38:cc:80:7f:3c:30:bf:1b:af:74:38:71:cc:7e:d9:64:
90:a0:d8:b5:47:5d:e8:51:48:89:2e:4d:5e:2b:af:fc:94:85:
5c:8d:42:a7:86:8f:4a:5f:27:99:6c:39:50:32:d6:fe:e0:f5:
e0:80:dd:05:57:f8:ae:8d:40:fd:15:0d:15:8e:87:3d:a5:6a:
86:56:35:9e:b4:11:e3:71:e4:fc:ab:54:63:38:e0:c6:d6:23:
b5:7c:55:c0:59:a2:d5:aa:eb:f5:21:73:60:57:b2:3a:d8:f9:
00:8b:b6:8c:48:99:62:aa:60:ae:fa:b5:7d:01:96:2e:7a:d8:
fd:2f:be:97:07:96:e9:5a:0e:8c:98:e3:a8:30:00:4e:cd:f5:
00:15:93:81:77:d8:81:8b:1f:05:25:f7:2a:70:cf:11:a8:7f:
8d:4b:28:28:73:57:e0:4e:d2:8b:96:19:60:54:ef:cf:0e:fa:
d3:83:3e:d0:0e:56:a5:ac:8f:89:d9:8c:4b:d7:5e:82:42:15:
86:10:a8:07:a2:ba:1d:cc:e4:b1:0d:24:6c:af:c6:3c:ff:3e:
f4:15:d9:da:48:ad:61:3d:7a:f5:96:3d:64:0d:45:ad:f5:a2:
4c:19:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:04 2024 by rpki-client on console-fra.rpki-client.org