Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/j04KVjlWML1iH4WqSkMhWoGBHy0.roa
File: j04KVjlWML1iH4WqSkMhWoGBHy0.roa (raw, json)
Hash identifier: m+FXGK1IqQRR+8BZayJ1zJhmcC850wUfhWeewwzswY0=
Subject key identifier: 8F:4E:0A:56:39:56:30:BD:62:1F:85:AA:4A:43:21:5A:81:81:1F:2D
Certificate issuer: /CN=f3888234535b52ec875544b66faaa323ee88c2dd
Certificate serial: 01856B77AA7400F231EB3FFB95C43E273B9F
Authority key identifier: F3:88:82:34:53:5B:52:EC:87:55:44:B6:6F:AA:A3:23:EE:88:C2:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84iCNFNbUuyHVUS2b6qjI-6Iwt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/j04KVjlWML1iH4WqSkMhWoGBHy0.roa
Signing time: Sun 01 Jan 2023 03:54:42 +0000
ROA not before: Sun 01 Jan 2023 03:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41337
IP address blocks: 194.9.2.0/23 maxlen: 23
2a07:2fc0::/48 maxlen: 48
2a07:2fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:77:aa:74:00:f2:31:eb:3f:fb:95:c4:3e:27:3b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3888234535b52ec875544b66faaa323ee88c2dd
Validity
Not Before: Jan 1 03:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4e0a56395630bd621f85aa4a43215a81811f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:cc:8b:48:dc:c4:20:74:ab:69:91:6c:65:
d1:6c:06:0c:06:1a:8c:77:0c:83:90:ca:03:f9:a4:
6b:d4:6d:a9:e6:81:07:3f:bd:ff:ea:cd:c3:b2:96:
25:aa:1c:0d:a8:cb:c3:6d:48:01:84:9a:14:37:b2:
2b:fc:9d:e6:fc:c0:84:b6:93:d7:19:54:cd:f1:14:
6f:b9:93:a0:3b:39:75:3a:5c:58:a1:06:4a:eb:68:
c8:29:47:cc:62:2b:ad:a9:4f:91:cb:eb:7f:ca:4d:
34:1b:62:42:28:8e:4b:d7:11:ef:84:8c:35:87:8a:
4c:2a:af:64:71:26:33:89:8d:ef:42:9a:d6:79:a9:
87:a9:f8:68:ed:7b:5c:53:fb:a6:02:ea:14:b1:76:
27:5d:66:86:7a:b9:e7:18:ba:69:c2:74:f8:e2:1a:
b7:58:3d:6b:83:c7:6e:bf:b7:d0:cf:61:4a:79:26:
27:89:d1:b9:b0:84:e2:1f:43:84:81:75:d2:c1:24:
d0:31:80:d1:29:66:b8:27:49:f5:81:7d:5c:cd:71:
c9:ca:88:9c:35:e9:ac:a0:31:25:b2:0a:34:ef:d4:
70:d5:4c:bf:3d:99:b4:af:6a:8b:eb:11:96:04:52:
e8:b6:80:88:bf:b4:9d:23:eb:b3:dc:f7:7b:7c:8b:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:0A:56:39:56:30:BD:62:1F:85:AA:4A:43:21:5A:81:81:1F:2D
X509v3 Authority Key Identifier:
keyid:F3:88:82:34:53:5B:52:EC:87:55:44:B6:6F:AA:A3:23:EE:88:C2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84iCNFNbUuyHVUS2b6qjI-6Iwt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/j04KVjlWML1iH4WqSkMhWoGBHy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/84iCNFNbUuyHVUS2b6qjI-6Iwt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.2.0/23
IPv6:
2a07:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
c7:53:42:d1:42:e2:72:ad:6d:8a:be:a8:af:b0:55:47:94:f0:
b9:84:aa:55:a6:73:90:e1:e1:46:5f:ca:49:3b:8f:9e:e8:22:
a0:56:b4:3c:98:0c:b3:bd:a7:8f:18:77:76:76:54:03:53:25:
9b:b3:94:30:08:74:f0:5f:fc:a3:5f:09:c4:9e:64:3d:72:06:
f2:45:5d:e8:f6:40:d0:3f:18:c8:31:21:2b:b6:6d:50:42:52:
a6:46:b2:e2:a3:92:e7:d9:d0:3f:66:8d:d7:c5:7b:52:d4:c6:
a3:86:e9:04:7f:17:3d:13:2c:69:da:91:1f:31:87:09:33:a0:
0f:7c:29:13:ae:6c:38:27:8e:8e:8e:84:fb:97:b9:0a:4b:a6:
56:40:55:86:49:23:fb:b5:b2:4c:17:c2:d3:f3:a6:5f:9b:97:
10:6b:d8:dc:37:d9:75:8f:d9:2a:23:bc:41:63:17:87:b8:92:
5d:0f:58:20:c7:19:db:36:94:9d:24:95:50:67:c5:45:1a:b3:
f8:aa:e3:3b:39:90:66:cc:e1:ea:58:e0:6e:14:09:49:8a:ba:
c6:65:ca:d9:aa:ec:7b:02:d9:af:4e:5c:f8:8f:70:91:e2:c3:
91:fd:5b:3a:27:a1:05:57:e2:c2:b8:d4:9c:a5:dc:70:38:7d:
6c:09:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org