Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/R6IyvsWBRHXNrNmIigOH97k2I8g.roa
File: R6IyvsWBRHXNrNmIigOH97k2I8g.roa (raw, json)
Hash identifier: aXtyEUXpvowuFBAeBKxoM/GzWV+dafN5Giz8xj/ZNs4=
Subject key identifier: 47:A2:32:BE:C5:81:44:75:CD:AC:D9:88:8A:03:87:F7:B9:36:23:C8
Certificate issuer: /CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
Certificate serial: 0185711E6ABF5132F4F293B90E946B7ADD7A
Authority key identifier: 47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/R6IyvsWBRHXNrNmIigOH97k2I8g.roa
Signing time: Mon 02 Jan 2023 06:14:56 +0000
ROA not before: Mon 02 Jan 2023 06:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 94.103.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:6a:bf:51:32:f4:f2:93:b9:0e:94:6b:7a:dd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
Validity
Not Before: Jan 2 06:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a232bec5814475cdacd9888a0387f7b93623c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:cc:4e:1c:7c:4f:91:28:39:df:72:75:be:
6f:64:e0:58:32:f7:8d:86:13:7a:2a:9c:64:c7:f3:
a8:34:3f:9a:ff:bd:c7:5d:86:4e:78:c2:83:40:b0:
ff:d5:24:dc:d8:55:a2:7f:63:d9:7a:fc:0c:8f:c0:
29:fc:48:d5:a5:35:8c:73:3a:ed:08:90:68:f6:f1:
74:7a:b4:83:e0:03:65:89:e1:67:31:91:2d:11:98:
6c:1e:b6:f8:c7:56:dd:d1:ab:0c:d2:d3:85:da:ac:
1e:17:ee:8b:68:8f:d6:00:0e:06:84:ea:3d:c6:db:
3a:01:db:1a:df:e4:c5:ba:26:af:34:ff:57:1a:72:
b0:4b:7e:0b:ac:26:6d:bc:8f:de:95:f2:72:d7:ed:
0e:d4:8a:25:4f:42:42:c5:98:1d:48:f4:be:41:6e:
65:b5:ba:f8:d9:f3:ea:cb:fc:48:3a:cc:28:f7:2a:
8c:5e:d1:55:3c:24:29:e1:c9:91:50:40:55:d5:0d:
4e:22:b6:23:56:cd:43:42:55:ff:76:ed:cd:c0:1d:
61:be:6d:19:a0:2b:6f:1a:e4:79:b1:ff:34:aa:77:
03:9a:07:c5:b9:5a:69:03:78:47:d6:9b:2f:0d:e1:
95:f3:17:91:6e:c6:07:60:b5:7d:4b:ff:af:f4:fe:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:32:BE:C5:81:44:75:CD:AC:D9:88:8A:03:87:F7:B9:36:23:C8
X509v3 Authority Key Identifier:
keyid:47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/R6IyvsWBRHXNrNmIigOH97k2I8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/R9n54WpBUwvCq6oY8Xp0VgF3IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:00:5b:0e:64:1c:29:72:4d:d3:dd:d6:9b:d4:f5:58:05:d9:
25:1d:78:2b:2e:a2:10:07:96:db:88:59:0b:70:24:13:34:c2:
f2:2e:d2:6b:ab:de:be:13:89:41:61:c9:28:55:bc:9a:0f:89:
c8:be:55:5f:27:e0:44:7d:0e:da:64:f9:d5:64:95:7a:ff:e2:
15:f4:9a:24:49:55:95:4d:46:ad:5f:18:e3:5f:bf:96:11:c5:
27:42:0a:df:c6:05:82:70:82:db:b5:92:3a:b1:5c:e4:85:b6:
2b:92:5a:48:9e:00:b1:9f:9b:6c:9a:71:9d:70:ec:00:72:49:
7e:8f:7c:e3:0d:4a:6c:30:90:77:73:e5:81:22:32:fa:7a:c9:
7b:26:1d:77:78:c9:16:1f:6c:fc:b4:db:f9:48:cd:4e:ad:87:
dc:8a:b2:e0:ee:6f:62:42:8e:4d:1e:ba:0c:52:30:31:91:b6:
bf:65:f0:d7:19:46:92:fb:1e:fa:9d:c1:38:74:d6:78:9c:ea:
0b:cc:35:91:4a:ec:63:ed:ce:24:84:02:9e:8e:d5:a1:64:90:
a9:c8:d1:a0:dc:e1:d2:6d:5b:7b:7c:3f:b7:ed:9b:99:52:e3:
71:9f:4c:7e:7c:f9:f6:59:2f:37:e2:3b:22:d5:4f:4f:7e:34:
eb:6a:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 09:49:35 2023 by rpki-client on console-fra.rpki-client.org