Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c1e14a-f1fd-4b99-a445-57c6142b6033/1/r0zz6DxOeVZJiaOCJWLfKBCVIuE.roa
File: r0zz6DxOeVZJiaOCJWLfKBCVIuE.roa (raw, json)
Hash identifier: t5hIpQ/Qa8eWq8Kh1thO1nnb0XEoFIrSwj9heTZVpFY=
Subject key identifier: AF:4C:F3:E8:3C:4E:79:56:49:89:A3:82:25:62:DF:28:10:95:22:E1
Certificate issuer: /CN=c64cb8b3b4523fb0ff204e399a90a53c732dbcf6
Certificate serial: 01884E92BCE3FCA458EA42AA88CDCFEE2A61
Authority key identifier: C6:4C:B8:B3:B4:52:3F:B0:FF:20:4E:39:9A:90:A5:3C:73:2D:BC:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xky4s7RSP7D_IE45mpClPHMtvPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c1e14a-f1fd-4b99-a445-57c6142b6033/1/r0zz6DxOeVZJiaOCJWLfKBCVIuE.roa
Signing time: Wed 24 May 2023 16:23:39 +0000
ROA not before: Wed 24 May 2023 16:23:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198193
IP address blocks: 194.104.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:92:bc:e3:fc:a4:58:ea:42:aa:88:cd:cf:ee:2a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64cb8b3b4523fb0ff204e399a90a53c732dbcf6
Validity
Not Before: May 24 16:23:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af4cf3e83c4e79564989a3822562df28109522e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:f4:fc:1d:c3:e2:fe:f2:24:ac:69:96:51:
f0:28:4d:83:9c:ba:6d:77:79:c5:f1:7b:aa:ee:7a:
8e:a4:97:82:dc:67:82:d7:e3:48:be:73:5f:a5:9f:
8b:2e:db:2c:51:32:9b:2c:c0:fe:7f:be:fd:95:aa:
e5:35:53:1a:7b:a2:21:6b:3b:63:d2:39:eb:9b:5f:
91:b3:26:f0:53:5b:cc:90:67:3a:bf:6c:c8:43:9d:
22:13:b1:a2:c7:2c:a8:a9:6d:d5:a5:18:38:eb:36:
00:6e:cc:1e:d7:4d:8d:50:a0:88:8c:94:29:aa:65:
96:71:e8:c0:17:78:15:44:48:4f:d2:a2:71:92:a4:
68:0a:83:1d:81:ca:20:25:45:23:59:59:11:18:ec:
32:04:79:36:0a:42:f8:1b:41:ec:0c:95:0c:47:70:
21:d9:1b:d5:fe:c0:50:0c:74:3a:6e:48:46:75:10:
91:56:b0:af:09:21:09:cf:e9:a5:4d:1e:f3:10:ad:
61:2f:bb:ab:13:0c:96:4a:e5:9a:92:17:21:23:b3:
c2:9a:f5:2c:e0:57:7c:f5:84:e4:e3:5d:58:87:e0:
db:0d:82:43:65:c0:ae:b8:11:44:db:b6:e5:29:85:
b9:c3:ed:45:db:2f:0a:cd:bc:44:7a:88:ca:e6:9b:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4C:F3:E8:3C:4E:79:56:49:89:A3:82:25:62:DF:28:10:95:22:E1
X509v3 Authority Key Identifier:
keyid:C6:4C:B8:B3:B4:52:3F:B0:FF:20:4E:39:9A:90:A5:3C:73:2D:BC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xky4s7RSP7D_IE45mpClPHMtvPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c1e14a-f1fd-4b99-a445-57c6142b6033/1/r0zz6DxOeVZJiaOCJWLfKBCVIuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c1e14a-f1fd-4b99-a445-57c6142b6033/1/xky4s7RSP7D_IE45mpClPHMtvPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.231.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0f:bf:c3:da:e0:a9:c9:a8:53:10:de:82:ec:d5:1e:89:78:
81:23:e7:58:21:27:69:cf:92:bb:50:06:23:06:4e:d6:1d:42:
65:fb:d7:5a:9e:08:c8:0c:c2:31:ce:72:c7:69:0d:31:14:67:
05:23:01:c8:c3:68:49:a1:a2:48:83:9c:3c:7c:3b:8e:d0:cf:
24:e1:d3:a8:2d:59:4d:67:e0:22:7d:d8:f0:23:8b:1a:39:a3:
db:ea:1c:c1:6b:b2:8a:cd:9f:b4:8e:35:1a:b2:b5:3b:f6:27:
a3:d6:52:66:cc:91:a1:55:ed:6a:79:26:83:10:ec:51:ec:5d:
1d:ea:75:1e:36:aa:8d:c4:b3:03:96:3a:81:d7:01:45:fe:7c:
19:0c:58:b4:e1:ae:15:bd:94:42:f9:45:0f:07:c4:0c:fa:fe:
58:20:0c:59:25:77:ae:99:3a:42:bd:53:67:48:d5:c6:0c:35:
1e:88:a2:7f:f5:9b:d9:fb:51:4f:ea:6e:d8:64:aa:cd:ee:1b:
80:88:87:27:1c:6a:04:91:f1:13:04:36:1a:28:b6:d7:4c:b1:
b2:33:f2:39:a0:74:51:1a:4f:ac:90:32:ea:84:3e:f5:49:51:
d8:76:24:c8:1b:ec:84:f6:6e:f5:14:36:00:40:5c:56:6d:42:
4c:84:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:18 2024 by rpki-client on console-ams.rpki-client.org