Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/N9qL5womIVm6_-K3ijPkVzdIZAs.roa
File: N9qL5womIVm6_-K3ijPkVzdIZAs.roa (raw, json)
Hash identifier: +0reguZPpksFrnNoGfJZD8d/SOC1MeAi3MA1cqUhz6I=
Subject key identifier: 37:DA:8B:E7:0A:26:21:59:BA:FF:E2:B7:8A:33:E4:57:37:48:64:0B
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183E918FABFCBA13A7ACE7479E723EA75C7
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/N9qL5womIVm6_-K3ijPkVzdIZAs.roa
Signing time: Tue 18 Oct 2022 03:17:51 +0000
ROA not before: Tue 18 Oct 2022 03:17:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:18:fa:bf:cb:a1:3a:7a:ce:74:79:e7:23:ea:75:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 18 03:17:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37da8be70a262159baffe2b78a33e4573748640b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:c2:bd:cc:09:57:bc:12:f9:b4:43:e0:e4:
6c:32:65:63:dc:9f:24:f1:f5:2e:40:eb:a0:1c:58:
74:70:53:f2:c0:53:e0:f1:0f:44:52:c2:61:f1:c9:
40:02:1c:62:91:2a:e9:fc:d3:1e:c3:2a:9a:b0:eb:
7f:63:21:5a:a3:49:f8:2e:1d:f5:b3:6f:ba:59:df:
1c:c3:15:80:97:f0:de:3e:41:09:51:e0:39:b7:4b:
6b:7c:2d:ae:04:ba:c2:13:c2:59:0a:a7:75:6a:6e:
af:ff:9f:07:f3:ff:34:b8:f4:4a:79:5b:aa:3e:1d:
d2:68:a6:60:c3:31:6d:bd:3a:72:05:ed:e0:96:d7:
2d:d4:f2:39:63:45:06:c7:98:e0:c8:53:bc:10:cc:
b5:44:35:7e:60:34:60:34:48:35:b5:ca:e1:e5:df:
35:97:f7:15:d5:e1:c3:80:88:ae:8f:39:5e:15:7f:
52:ca:85:68:52:e6:e5:52:24:36:66:3b:fc:53:5e:
2a:bd:9e:17:a1:79:d8:2f:d7:80:3d:0c:b0:f7:17:
7a:b7:dd:e9:b8:2b:23:dd:fe:d4:90:d0:82:b1:27:
d2:33:e1:09:4f:bb:47:83:fb:bc:15:37:e6:6e:a9:
b0:cf:35:8a:a1:8b:c8:0d:9c:b9:70:d5:38:66:d7:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:8B:E7:0A:26:21:59:BA:FF:E2:B7:8A:33:E4:57:37:48:64:0B
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/N9qL5womIVm6_-K3ijPkVzdIZAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:08:4d:d7:57:8a:93:4e:8d:d1:af:ea:fb:0c:9d:e8:27:b3:
fe:82:63:cc:f2:a2:ab:f3:22:b4:5b:00:7b:a0:ec:d6:72:25:
26:4f:eb:7a:35:48:28:25:b3:c4:8c:da:f9:a2:6b:46:a3:ca:
a5:4f:68:fb:f5:4b:8a:c1:f1:b2:48:bd:99:00:0e:45:cf:62:
87:c9:c5:f1:1a:92:10:79:d1:ec:07:d7:d3:e3:cf:d0:6e:0d:
86:09:df:92:33:65:79:f6:1e:e9:e5:84:cb:ff:a4:fb:b8:5a:
19:c1:59:a8:d2:e4:d3:b4:24:1b:36:ef:57:c3:0a:06:22:d3:
94:94:f4:63:4c:5b:f5:fc:2f:4c:fc:dc:c7:ba:c4:6d:e7:52:
3a:71:0c:11:5d:8b:02:db:9b:2d:b5:51:af:09:8c:24:c6:b5:
ad:1b:46:b5:24:39:ae:df:ee:fd:94:6a:62:ed:d6:9a:54:5c:
ff:95:79:e6:a2:46:3e:a4:a4:e8:88:3a:d1:fe:c9:91:3f:f1:
65:a2:3f:8f:93:11:6f:0a:cb:41:e5:f0:83:06:d8:d9:62:48:
b0:ca:0b:0b:3f:8e:c9:a9:af:90:23:18:c0:49:d9:55:7a:dc:
a8:74:e9:a3:5e:7a:8b:c5:a4:29:87:ff:18:2b:dd:f9:ac:a8:
2e:88:e4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org