Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/r0kkSqroWmSvHU72E85TlDnXtJ4.roa
File: r0kkSqroWmSvHU72E85TlDnXtJ4.roa (raw, json)
Hash identifier: ZDkNjJvfyAuliFdZozNmKGcywpexGfyrkNi3w6/agww=
Subject key identifier: AF:49:24:4A:AA:E8:5A:64:AF:1D:4E:F6:13:CE:53:94:39:D7:B4:9E
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01823E5D025E7A07049F4FE80296B4A18681
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/r0kkSqroWmSvHU72E85TlDnXtJ4.roa
Signing time: Wed 27 Jul 2022 06:34:18 +0000
ROA not before: Wed 27 Jul 2022 06:34:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206444
IP address blocks: 194.5.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3e:5d:02:5e:7a:07:04:9f:4f:e8:02:96:b4:a1:86:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 27 06:34:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af49244aaae85a64af1d4ef613ce539439d7b49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:b8:60:4c:14:44:cc:10:bf:5e:f2:74:9b:
ba:82:dc:4d:eb:74:4a:6c:32:fa:bb:d0:c6:36:cd:
ef:6c:05:68:27:d8:9c:dc:12:8f:b2:23:b1:85:9b:
fa:83:05:a0:c1:93:91:0a:b0:a1:44:0a:3e:d6:6b:
ac:d3:13:0e:72:89:d0:26:7c:ad:98:5e:da:a1:65:
f2:ed:ed:2a:e7:80:a4:67:d9:b6:24:02:9e:f1:dc:
37:39:36:2d:ff:6d:9a:69:44:fd:7d:08:4a:83:68:
c5:2e:4a:88:b9:22:d5:3a:44:0f:67:94:fb:28:51:
79:24:16:52:67:74:85:31:1d:03:05:10:de:17:1b:
5f:95:44:e7:d3:fe:76:1b:d7:13:c4:55:f5:2f:71:
cd:b0:70:cc:11:0d:07:ec:54:a3:fe:52:36:ea:ab:
ff:7f:f8:a5:2f:68:73:00:ec:3a:36:4f:08:4a:dc:
e1:ad:a7:f4:6b:b2:4a:ad:d4:de:55:8e:dd:a1:4b:
36:1d:9d:9d:e4:f3:71:7a:ad:b3:14:9d:be:f4:f3:
ec:46:30:a2:29:c0:b7:8e:00:dc:74:85:57:3b:eb:
af:88:d4:d0:77:e4:0e:09:92:0a:ba:65:c7:a2:7f:
b2:91:38:94:00:b0:e8:25:de:93:26:ca:14:29:a4:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:49:24:4A:AA:E8:5A:64:AF:1D:4E:F6:13:CE:53:94:39:D7:B4:9E
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/r0kkSqroWmSvHU72E85TlDnXtJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:68:4c:b7:ab:38:f6:07:57:db:7f:b2:39:4f:b7:01:c2:32:
29:77:c4:71:ea:ed:a4:45:4f:60:c2:14:1d:e9:f9:70:19:b9:
94:bd:05:d4:c9:16:b8:06:e4:b6:8c:ac:28:d1:f2:04:ac:fd:
53:27:9b:7c:cb:92:ff:13:af:72:c8:e6:b1:04:d3:75:c3:25:
17:18:8b:84:4f:dc:e6:f8:0d:3f:c2:9d:b6:0c:6e:c9:e5:af:
3c:43:7e:f9:16:0c:82:7d:a5:7c:4c:42:6b:d9:30:36:9c:67:
9e:1d:15:15:a1:44:bb:40:7b:01:0d:74:1a:9d:16:01:70:07:
83:12:88:d6:d8:72:03:d0:98:a5:39:42:85:d2:e0:d7:8e:fa:
5e:fe:7f:04:5f:36:ad:0e:0a:c4:27:92:ba:d0:f7:f5:3b:b6:
b1:6e:16:1e:16:92:30:6e:c0:0f:b3:4d:66:e4:bc:bf:18:c4:
18:85:19:7a:87:c5:35:c0:2d:db:9d:59:48:cc:a5:4a:dd:52:
a7:e2:57:d7:ad:78:51:4a:16:db:4d:58:10:47:52:61:82:8b:
d6:e4:c6:c2:3b:1b:24:8a:fe:f3:bb:56:54:12:29:14:88:fb:
af:a1:b7:69:76:40:fd:39:24:66:9c:87:31:01:40:db:52:00:
2d:88:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org