Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e3c868-3199-4f21-9109-5aaacb724f9c/1/rud9R3rT_ynuHKX8XhhhVR_q7IU.roa
File: rud9R3rT_ynuHKX8XhhhVR_q7IU.roa (raw, json)
Hash identifier: elNCfuLMYGl2llSnPDaBTYQcF0V0QtskAfe8kAtBef8=
Subject key identifier: AE:E7:7D:47:7A:D3:FF:29:EE:1C:A5:FC:5E:18:61:55:1F:EA:EC:85
Certificate issuer: /CN=9962d165a4c253f9b34ab010ffe34ff1f4545787
Certificate serial: 019EDE21
Authority key identifier: 99:62:D1:65:A4:C2:53:F9:B3:4A:B0:10:FF:E3:4F:F1:F4:54:57:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWLRZaTCU_mzSrAQ_-NP8fRUV4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e3c868-3199-4f21-9109-5aaacb724f9c/1/rud9R3rT_ynuHKX8XhhhVR_q7IU.roa
Signing time: Sat 01 Jan 2022 07:01:01 +0000
ROA not before: Sat 01 Jan 2022 07:01:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49385
IP address blocks: 94.231.220.0/24 maxlen: 24
94.231.221.0/24 maxlen: 24
94.231.222.0/24 maxlen: 24
94.231.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27188769 (0x19ede21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9962d165a4c253f9b34ab010ffe34ff1f4545787
Validity
Not Before: Jan 1 07:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aee77d477ad3ff29ee1ca5fc5e1861551feaec85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:d1:c2:2a:e8:d4:64:c4:c2:ba:dc:03:d7:
b2:15:3b:5f:ef:75:85:f2:fe:45:26:fc:af:20:9d:
07:21:0a:b3:96:e4:f6:30:82:7e:a8:55:7f:d4:0e:
3a:cc:97:35:62:76:9a:a7:a2:7b:a4:50:81:f2:22:
4e:2f:a7:c7:5a:bd:d2:16:3a:bf:b9:51:25:c3:1d:
94:18:54:15:79:e8:1a:d2:e6:21:1c:48:9b:7e:9f:
c0:c2:f4:ec:ae:41:60:8a:a0:93:16:d0:0a:83:a6:
22:3a:66:3e:60:35:fd:e2:46:d9:ce:11:7f:c5:96:
3f:1a:e5:26:62:bb:b3:77:20:37:38:fc:72:94:b2:
87:12:82:f6:74:c5:a0:09:b1:fb:89:b8:3b:a1:99:
6c:6c:85:8f:a2:aa:bc:10:c5:aa:2b:2d:e0:30:1e:
16:ec:eb:29:ec:0b:ac:22:ae:f3:72:c3:b0:3c:58:
cf:24:eb:7f:1b:f1:3c:38:6c:94:20:16:6f:f8:99:
2a:7e:aa:ae:89:34:90:5e:3f:12:6f:19:e6:72:3d:
52:f1:74:93:fb:1e:2c:12:68:da:dc:a9:3d:a2:46:
96:39:d8:be:1b:1b:5f:24:df:d2:5c:68:a2:63:8e:
6b:9d:37:c9:22:74:b9:80:b2:06:2b:db:1f:c5:a8:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E7:7D:47:7A:D3:FF:29:EE:1C:A5:FC:5E:18:61:55:1F:EA:EC:85
X509v3 Authority Key Identifier:
keyid:99:62:D1:65:A4:C2:53:F9:B3:4A:B0:10:FF:E3:4F:F1:F4:54:57:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWLRZaTCU_mzSrAQ_-NP8fRUV4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e3c868-3199-4f21-9109-5aaacb724f9c/1/rud9R3rT_ynuHKX8XhhhVR_q7IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e3c868-3199-4f21-9109-5aaacb724f9c/1/mWLRZaTCU_mzSrAQ_-NP8fRUV4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
35:c1:18:60:96:b1:12:f0:45:b8:a0:b8:93:a5:fa:6c:52:93:
20:19:27:34:ab:e9:1e:bc:ae:a5:63:13:d4:c2:fd:58:21:4b:
8c:a1:c5:bd:b0:32:9a:dc:a1:7e:a6:21:5c:ba:c8:9a:26:75:
19:7a:bb:f8:59:9e:07:2b:85:06:ac:7f:a8:a3:f9:aa:cd:c7:
c0:b4:25:da:e5:f4:7c:77:26:53:4d:12:19:50:7b:a0:d2:26:
1b:3c:b8:c2:84:91:cf:6b:53:02:e6:a2:69:6f:8a:e4:2a:86:
f7:a9:17:69:89:dd:f2:da:ea:10:6c:4f:c6:1e:76:2a:c9:ce:
95:ae:0e:29:19:70:a5:ca:0b:e9:e6:3e:7e:b1:29:1a:72:74:
65:81:fb:49:27:cf:38:1d:d8:26:52:fb:4d:84:de:4e:cb:3a:
e8:ea:03:0c:4d:8a:ac:f6:5d:8d:64:6e:79:38:13:eb:be:df:
cd:13:0f:a3:92:85:f4:f8:14:45:a3:3f:95:0f:47:0d:b7:58:
ec:77:02:d5:d7:43:fb:4b:be:dd:b4:b8:21:e2:c5:ed:79:d5:
4c:6f:89:f3:0a:16:78:a5:d2:4f:a6:7f:bd:83:81:d3:c3:a8:
08:52:3e:44:d2:de:d3:63:66:35:87:8e:16:a7:55:38:41:38:
fb:ab:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:34 2024 by rpki-client on console-ams.rpki-client.org