Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/lxk3psYrEv_P9V3v3xKclzdlyAk.roa
File: lxk3psYrEv_P9V3v3xKclzdlyAk.roa (raw, json)
Hash identifier: ZMKWdwukg5ZACcQgx5FyPdRAG8yRIXLNrTfnUoBokXg=
Subject key identifier: 97:19:37:A6:C6:2B:12:FF:CF:F5:5D:EF:DF:12:9C:97:37:65:C8:09
Certificate issuer: /CN=6dcf621a127dda08d89a1242674934a9ed23c1ee
Certificate serial: 0182AB44A0D124A4A1E46048157B9BC2005E
Authority key identifier: 6D:CF:62:1A:12:7D:DA:08:D8:9A:12:42:67:49:34:A9:ED:23:C1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/lxk3psYrEv_P9V3v3xKclzdlyAk.roa
Signing time: Wed 17 Aug 2022 10:06:17 +0000
ROA not before: Wed 17 Aug 2022 10:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29314
IP address blocks: 94.251.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:44:a0:d1:24:a4:a1:e4:60:48:15:7b:9b:c2:00:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dcf621a127dda08d89a1242674934a9ed23c1ee
Validity
Not Before: Aug 17 10:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=971937a6c62b12ffcff55defdf129c973765c809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:d4:ce:db:7e:2b:5b:9e:93:59:cb:3e:0e:
2b:92:10:55:d0:11:8b:b4:4a:dd:05:90:74:d4:24:
b1:7d:a7:08:fd:28:28:b2:1a:bb:d1:a1:0b:98:7f:
b2:c0:7d:4d:c9:15:54:44:c5:81:4e:51:a9:ec:39:
93:ea:e7:b3:b6:47:7c:16:5f:8f:4c:78:8e:89:64:
da:67:1f:b1:01:cc:b6:9b:95:59:75:cc:fd:7b:3c:
6d:3e:52:36:d9:55:e1:ec:43:97:eb:22:76:a7:e6:
c2:ea:d6:19:1c:38:5f:30:7e:c0:52:74:78:9a:5c:
bb:5d:11:0d:af:a4:7b:8a:42:17:5c:6c:f2:b6:ed:
66:0a:82:e2:a0:7a:15:9a:d5:25:30:87:06:a6:76:
00:19:6c:d6:47:e1:e8:3a:ab:df:94:f6:bf:ab:50:
40:76:de:b8:14:b2:cd:3d:3c:fe:d9:7f:d7:08:db:
2f:12:7a:05:65:ae:f7:db:f8:75:b5:9a:fd:30:2d:
3f:64:25:78:49:25:6e:13:1d:9e:3f:29:c3:ba:b8:
a3:d1:69:0a:45:05:ec:9d:16:fd:c6:12:1e:83:cd:
cc:9d:8a:83:8e:22:12:4d:83:a0:ee:92:eb:92:bb:
31:16:7f:ef:8c:82:e3:f2:83:1c:20:f0:0b:1d:c5:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:37:A6:C6:2B:12:FF:CF:F5:5D:EF:DF:12:9C:97:37:65:C8:09
X509v3 Authority Key Identifier:
keyid:6D:CF:62:1A:12:7D:DA:08:D8:9A:12:42:67:49:34:A9:ED:23:C1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/lxk3psYrEv_P9V3v3xKclzdlyAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.251.168.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f3:00:94:b9:9b:6c:55:89:f0:7f:50:05:62:23:78:05:de:
de:9f:df:91:9d:ae:d3:fe:64:cf:3b:ca:fa:3d:91:34:bd:b4:
3c:bb:e0:76:9e:b1:48:d7:d5:5b:62:40:a3:0d:09:df:9f:1c:
ce:49:de:92:af:be:54:4d:19:98:00:3b:13:1b:9d:66:6b:32:
a8:fd:3c:48:b2:a0:f6:cc:9c:13:e3:79:ae:11:5e:cb:e7:18:
18:6c:5d:83:ac:c7:5b:67:1d:a1:3f:02:9d:0f:6d:29:8a:8c:
35:4a:62:64:24:e3:57:ec:1c:5f:3d:50:d7:8e:29:3f:bf:ae:
6c:91:0e:b5:a7:55:3b:56:d3:40:46:a1:03:a2:f3:12:a5:68:
60:d1:8b:61:43:da:64:cd:47:94:fa:14:9c:b4:b8:79:61:ba:
61:58:69:d9:53:f0:ae:68:d6:d9:65:d2:d1:33:7f:24:f1:f0:
b6:ab:8e:33:5f:06:3f:c8:cc:32:29:9b:e7:cf:10:91:17:52:
ac:43:77:45:70:b0:ab:c2:d5:a3:14:e3:1b:66:18:4e:0d:2c:
1b:33:7e:6d:c2:13:f0:b6:cd:46:90:e7:a3:34:04:3f:4d:1d:
d6:45:90:2c:82:dc:c2:ea:1c:32:3d:e1:5b:85:b0:79:aa:70:
82:43:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org