Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AkvdCkX99SNMuSvWWb4-yFiiyMU.roa
File: AkvdCkX99SNMuSvWWb4-yFiiyMU.roa (raw, json)
Hash identifier: rOFfo88XJAGXKul/6EqGavXvaaMu4aEmqHkOlkOY/EE=
Subject key identifier: 02:4B:DD:0A:45:FD:F5:23:4C:B9:2B:D6:59:BE:3E:C8:58:A2:C8:C5
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184BAB8FB35884B3539178B6A86DC6D26BE
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AkvdCkX99SNMuSvWWb4-yFiiyMU.roa
Signing time: Sun 27 Nov 2022 20:13:15 +0000
ROA not before: Sun 27 Nov 2022 20:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.164.1.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ba:b8:fb:35:88:4b:35:39:17:8b:6a:86:dc:6d:26:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 27 20:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=024bdd0a45fdf5234cb92bd659be3ec858a2c8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:c2:2d:05:90:10:61:3c:8b:99:14:1d:06:
a7:8c:fb:19:26:13:bc:27:e3:6e:83:46:95:04:9e:
45:1a:f8:60:c4:c4:00:2c:55:82:0f:f2:ee:5b:f3:
09:5d:ad:9e:11:29:c1:e2:48:e3:5a:69:75:69:f2:
33:f0:32:ae:29:41:4d:47:f6:c6:62:ba:09:6d:b7:
40:70:73:b3:d4:e6:21:44:63:46:2c:fb:d6:cc:e6:
25:b8:4b:d6:0f:aa:c9:71:b2:ef:09:7b:e7:c8:4a:
99:8e:76:9c:32:75:9d:88:4b:c6:05:d6:18:d5:95:
c4:ee:9d:df:44:cf:60:d8:2a:b1:86:dc:45:10:6e:
44:4f:44:c2:8a:41:5a:50:88:89:22:7d:42:1f:b6:
d1:48:47:e5:41:73:ca:b6:e5:e4:74:50:83:47:c9:
5d:a7:3b:d6:e7:50:56:9f:01:16:2d:e5:94:6a:c7:
9b:6c:7a:bc:16:45:8d:3e:e7:b4:1d:1e:a3:38:16:
cf:f8:bd:ac:ee:7d:81:41:9b:c9:45:ce:b9:76:ac:
66:28:f2:f9:ea:ae:0e:1c:70:e2:54:59:9c:4b:0e:
59:aa:91:10:d2:99:e6:d0:5a:22:98:9e:65:ca:5a:
e0:20:24:ba:2e:5e:99:ba:4c:2e:7a:4b:b2:ff:de:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:DD:0A:45:FD:F5:23:4C:B9:2B:D6:59:BE:3E:C8:58:A2:C8:C5
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AkvdCkX99SNMuSvWWb4-yFiiyMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.4.0/24
193.164.1.0/24
194.5.148.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:5f:d8:18:e7:b7:56:28:8e:10:43:ff:93:9e:48:6c:ce:fc:
d5:4f:72:e8:43:db:d0:f7:41:5b:71:4f:c7:94:7c:25:d0:78:
cc:77:3e:f7:27:f0:c5:56:b9:63:68:76:ba:4c:12:df:f5:ea:
ad:8a:87:ad:b6:ea:ea:a0:2f:7c:17:35:3e:b2:e9:0d:59:5c:
fc:51:be:93:2c:c1:47:5d:29:53:3d:ab:b3:38:1e:9a:a7:c0:
7a:a1:4d:59:ff:97:24:d8:73:59:8e:6b:ce:c1:9d:0e:c9:5f:
27:ab:50:b8:cc:37:44:58:f5:0a:76:60:1a:f5:6c:03:ee:94:
2e:81:ac:c3:c3:69:98:3d:b5:fe:4e:75:96:68:ac:85:ba:be:
87:a8:47:fc:19:2c:1e:89:6e:7e:f4:bf:68:bd:e6:b0:00:4b:
dc:41:c9:de:47:7a:35:d6:b6:79:7e:f1:48:83:fc:7f:ed:78:
72:28:56:c5:12:41:2a:bd:11:15:c2:00:71:e2:e4:4f:1b:c2:
9d:78:39:9b:64:a1:02:32:6c:0b:fd:ea:81:9d:0c:08:18:66:
35:e0:b7:78:c1:3d:08:29:bb:29:b6:ef:c7:f5:be:c8:97:95:
7f:57:75:68:b3:27:c3:dc:75:74:d6:b5:69:4c:8d:b1:1d:4e:
9b:2d:1f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org