Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d8d23b-92d8-46af-911e-be736416b30f/1/kiKQqE6v-d2AI7NWADYmfTD_u_s.roa
File: kiKQqE6v-d2AI7NWADYmfTD_u_s.roa (raw, json)
Hash identifier: bCFNDlI5cmVoDXtZ+vCDR5YnZa/kbPtVGTyD9CXgnsg=
Subject key identifier: 92:22:90:A8:4E:AF:F9:DD:80:23:B3:56:00:36:26:7D:30:FF:BB:FB
Certificate issuer: /CN=b709035681f2e361785d4a8f63590ceec217e251
Certificate serial: 018CC5DD03FDF485910142F5E79B442E4E51
Authority key identifier: B7:09:03:56:81:F2:E3:61:78:5D:4A:8F:63:59:0C:EE:C2:17:E2:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twkDVoHy42F4XUqPY1kM7sIX4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d8d23b-92d8-46af-911e-be736416b30f/1/kiKQqE6v-d2AI7NWADYmfTD_u_s.roa
Signing time: Mon 01 Jan 2024 16:30:45 +0000
ROA not before: Mon 01 Jan 2024 16:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5531
IP address blocks: 194.165.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:03:fd:f4:85:91:01:42:f5:e7:9b:44:2e:4e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b709035681f2e361785d4a8f63590ceec217e251
Validity
Not Before: Jan 1 16:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=922290a84eaff9dd8023b3560036267d30ffbbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:e8:18:41:aa:9f:c1:20:58:74:e9:14:c0:
28:9b:b1:3c:68:58:e0:58:c7:44:c3:f5:00:21:6a:
58:f6:be:5e:64:14:99:85:40:2d:39:15:57:8a:5c:
13:69:02:2d:cb:50:d3:13:5e:7c:4e:be:b3:ff:75:
62:a2:18:60:52:c3:86:61:fc:f7:00:2e:25:88:be:
f8:30:f4:27:39:00:3b:d0:fe:78:b8:c2:cb:4d:41:
1a:a9:a4:50:5f:10:21:f0:5a:1a:e7:23:78:fc:c7:
0d:c2:3a:99:5f:11:1b:6e:b2:51:06:d7:9e:ba:b7:
da:b5:e5:81:52:fd:4c:90:85:57:d7:43:28:94:40:
ad:dc:fc:49:47:7c:8e:e3:31:a7:78:06:72:d4:97:
c8:c8:87:01:15:13:df:60:9a:ea:b6:0f:32:81:cf:
f1:97:40:8c:8a:93:87:fb:39:b3:44:82:66:94:9f:
5d:f8:1e:9b:bb:88:d9:3c:20:87:d7:45:df:35:ac:
20:73:a3:08:e3:3e:1c:42:09:99:33:d8:6a:a2:84:
6b:f7:17:47:c3:30:15:0a:53:69:21:30:5a:30:b5:
95:bc:46:ee:f9:59:53:fd:72:9a:25:e2:dc:c4:af:
a5:80:18:34:af:4a:a2:7d:34:d6:42:30:4c:d1:ae:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:22:90:A8:4E:AF:F9:DD:80:23:B3:56:00:36:26:7D:30:FF:BB:FB
X509v3 Authority Key Identifier:
keyid:B7:09:03:56:81:F2:E3:61:78:5D:4A:8F:63:59:0C:EE:C2:17:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twkDVoHy42F4XUqPY1kM7sIX4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d8d23b-92d8-46af-911e-be736416b30f/1/kiKQqE6v-d2AI7NWADYmfTD_u_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d8d23b-92d8-46af-911e-be736416b30f/1/twkDVoHy42F4XUqPY1kM7sIX4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.24.0/23
Signature Algorithm: sha256WithRSAEncryption
82:48:7e:f8:c4:e1:70:f2:17:16:d5:db:dc:be:8b:ec:36:9f:
dd:25:86:d1:32:40:a9:3e:bd:d1:99:bb:07:cd:2a:fb:fa:e6:
14:71:f5:aa:c6:9b:0d:34:9c:e1:6f:ed:59:93:d5:f9:59:2e:
0d:8f:df:b8:d6:34:2a:08:df:1a:4f:a4:29:f1:e8:af:86:d1:
69:cf:d8:ac:e4:62:84:55:38:0f:6b:85:1e:32:a9:4e:f7:1f:
cb:29:96:48:1d:99:2d:80:d7:0f:1c:19:f5:ac:d5:bf:74:bd:
b7:5f:32:6c:91:44:9b:c9:cf:c7:a7:bd:f2:48:7a:54:f8:0a:
73:22:fb:8c:5c:aa:f6:e2:ad:88:5c:8d:65:08:4b:a1:6e:f2:
8a:cc:81:b7:21:dd:ea:10:dd:e7:b0:c5:f5:f1:36:34:ed:98:
e4:92:cd:94:08:54:fe:74:fa:17:49:58:a2:96:8d:42:4f:0a:
75:0e:e7:fb:51:76:f8:41:21:60:2d:be:b8:4b:04:60:6d:f1:
58:5f:7b:01:5a:6c:3b:e9:9c:83:74:b2:52:45:a8:a7:a2:08:
f3:d0:82:bf:a7:5e:ec:61:80:60:88:bd:0d:e4:e7:06:51:16:
9e:9d:48:c3:77:b2:71:c7:56:15:2c:57:78:e4:f2:f7:f6:42:
89:53:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:04 2024 by rpki-client on console-fra.rpki-client.org