Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/7WGqQjAuWocO2U79eK_GgGD_UYA.roa
File: 7WGqQjAuWocO2U79eK_GgGD_UYA.roa (raw, json)
Hash identifier: tPVWv2/3YcnH1xhprS/xPv6NTwNEBeRuWiTMMYQ82zY=
Subject key identifier: ED:61:AA:42:30:2E:5A:87:0E:D9:4E:FD:78:AF:C6:80:60:FF:51:80
Certificate issuer: /CN=aee2ebc3fc30bc7db9d53760790c53a61df66735
Certificate serial: 018571CC23692CD532E52417EA35FCE3EE0A
Authority key identifier: AE:E2:EB:C3:FC:30:BC:7D:B9:D5:37:60:79:0C:53:A6:1D:F6:67:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruLrw_wwvH251TdgeQxTph32ZzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/7WGqQjAuWocO2U79eK_GgGD_UYA.roa
Signing time: Mon 02 Jan 2023 09:24:41 +0000
ROA not before: Mon 02 Jan 2023 09:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42724
IP address blocks: 194.62.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:23:69:2c:d5:32:e5:24:17:ea:35:fc:e3:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2ebc3fc30bc7db9d53760790c53a61df66735
Validity
Not Before: Jan 2 09:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed61aa42302e5a870ed94efd78afc68060ff5180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:96:66:1e:f1:b4:ce:81:19:21:fd:30:67:
0b:32:6a:ab:a7:d2:ce:15:4c:c9:68:63:a9:bc:38:
74:74:db:a0:32:70:56:ca:9e:e3:b6:d4:cc:cc:48:
2b:4e:7c:f5:a5:5d:3c:43:e8:ac:5c:cc:a5:af:bc:
66:ae:0f:49:4d:ec:41:32:ea:d0:98:54:26:a2:27:
df:86:c3:2b:b6:6b:f5:70:11:31:e3:48:67:cf:8d:
f5:66:64:1e:07:6f:de:9e:36:4c:a6:59:bc:ea:ae:
dc:8e:4d:68:a0:34:c5:bc:6e:4c:9d:78:95:58:48:
0a:d2:cc:58:be:2d:11:a3:60:56:9b:2e:25:95:2e:
2c:07:95:e5:a7:73:e0:59:fb:d1:d9:d0:41:b1:3b:
cd:2f:cb:48:1f:9f:cb:54:7c:88:cc:d3:6d:62:1c:
5b:32:3a:8c:7c:b0:34:be:9b:69:46:a6:ce:71:5d:
e0:4b:3b:f9:ea:9f:91:69:4f:ef:78:86:a5:3d:a3:
46:ca:42:7f:a3:6b:9f:5e:3a:fc:85:8b:50:81:c5:
a7:6e:26:ef:fb:80:a0:5a:c5:78:09:30:4c:8d:83:
fa:f7:3f:f5:f8:81:0f:7a:b8:3f:54:31:95:93:30:
0d:f5:98:dd:1f:d5:1f:a6:99:34:7e:d1:79:4a:cc:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:61:AA:42:30:2E:5A:87:0E:D9:4E:FD:78:AF:C6:80:60:FF:51:80
X509v3 Authority Key Identifier:
keyid:AE:E2:EB:C3:FC:30:BC:7D:B9:D5:37:60:79:0C:53:A6:1D:F6:67:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruLrw_wwvH251TdgeQxTph32ZzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/7WGqQjAuWocO2U79eK_GgGD_UYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ruLrw_wwvH251TdgeQxTph32ZzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:ef:ce:dc:1a:4e:cd:97:bb:ad:f2:99:49:f2:f8:29:1b:22:
e2:2f:76:47:04:1b:59:10:c6:a9:54:0a:e1:34:a6:f3:dd:00:
ba:48:76:e6:a3:ca:aa:cc:2d:9c:6d:fc:8c:0a:29:6f:e2:a6:
b5:99:77:08:79:7e:e9:62:1c:e0:0b:39:12:2c:cf:81:b8:35:
78:0f:ad:a0:2d:cc:00:62:28:ef:10:6a:49:c8:50:b9:47:6a:
41:60:4b:99:06:da:06:da:ef:2c:b4:33:a1:01:d3:cf:0d:64:
da:86:54:ca:5f:3d:8d:bb:f6:1c:f9:d1:e9:83:4b:f4:5a:2b:
c5:07:e5:11:69:1d:00:d8:08:a9:52:61:fa:cd:62:15:1f:51:
09:4e:16:a5:5e:96:03:bf:80:88:30:d5:fc:bc:77:23:7d:26:
16:5f:e0:a1:28:9a:8b:85:90:6a:cc:3c:ea:d1:72:c7:dc:2a:
a7:d5:21:70:ac:f6:8a:34:d2:3c:36:8b:b6:4b:7f:8f:19:90:
9f:4e:5a:45:2c:33:10:c6:1a:04:8a:55:40:f3:df:c9:e1:0d:
8c:42:36:b2:87:08:ad:f0:54:95:07:63:67:49:e9:8f:cf:83:
00:e4:99:d0:ef:93:bf:59:89:28:30:c5:91:26:0d:77:3e:d6:
74:48:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 14:06:03 2023 by rpki-client on console-ams.rpki-client.org