Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/uAavNnaAOYtorU-NVNO29PyGpDE.roa
File: uAavNnaAOYtorU-NVNO29PyGpDE.roa (raw, json)
Hash identifier: ccrQ88b08wAl+XNuVQpVhPUiGMMdf+t02kURa756oYQ=
Subject key identifier: B8:06:AF:36:76:80:39:8B:68:AD:4F:8D:54:D3:B6:F4:FC:86:A4:31
Certificate issuer: /CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
Certificate serial: 018CCA991329382CC4CE615D0C190D5F8CDB
Authority key identifier: 9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/uAavNnaAOYtorU-NVNO29PyGpDE.roa
Signing time: Tue 02 Jan 2024 14:34:38 +0000
ROA not before: Tue 02 Jan 2024 14:34:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39886
IP address blocks: 109.94.32.0/19 maxlen: 24
213.111.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:13:29:38:2c:c4:ce:61:5d:0c:19:0d:5f:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
Validity
Not Before: Jan 2 14:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b806af367680398b68ad4f8d54d3b6f4fc86a431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:cc:fe:e6:58:39:7a:7a:41:8f:c0:78:23:
67:71:97:b5:d9:2f:3e:89:4d:36:c7:e5:79:b3:b5:
89:61:1f:15:11:7c:d3:32:c3:3f:64:63:b6:20:c7:
37:c1:c2:7f:13:a6:9e:d1:f7:0f:8c:2a:10:ba:73:
3e:9a:82:14:00:73:88:49:db:5d:0c:f4:b2:f8:da:
fd:47:fd:e4:bb:b0:30:4a:6e:d1:84:12:3f:3b:00:
6c:85:d0:bb:53:d4:60:df:38:92:3f:7e:19:8a:ed:
61:23:78:f9:1c:61:ee:2d:d3:cc:1e:32:fc:bc:4d:
38:fc:39:db:f0:5a:d9:15:d5:29:60:59:a7:d1:07:
7e:68:2c:06:ca:6f:f2:c5:25:3e:5b:a3:61:d1:22:
8f:53:bb:58:68:9e:a5:d2:00:45:9f:93:b8:ee:7c:
4e:45:26:32:b9:1d:17:36:e4:ab:5b:e6:5f:98:99:
96:47:e8:59:b9:36:50:55:b5:8e:6a:b3:0c:62:b6:
75:da:c6:21:9e:d0:f1:c5:2a:6c:04:b8:9a:de:c6:
8d:1e:53:7f:8a:48:0c:71:4e:99:51:16:20:ef:ba:
34:d3:2a:fd:f0:6b:b6:6a:3c:77:ad:e2:5d:8c:58:
7f:c9:43:7e:1e:cd:eb:67:cf:0f:7d:fa:ec:fb:93:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:AF:36:76:80:39:8B:68:AD:4F:8D:54:D3:B6:F4:FC:86:A4:31
X509v3 Authority Key Identifier:
keyid:9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/uAavNnaAOYtorU-NVNO29PyGpDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/nu_wi1wGxlEnxD3KTktbp6VeF2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.32.0/19
213.111.0.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:b2:05:83:b1:19:03:26:f7:ef:13:93:c5:5f:76:46:39:c3:
9f:d3:51:27:ee:7a:78:94:0a:8d:ff:29:82:e6:f8:61:ba:10:
17:70:f7:e8:e1:40:46:9e:8a:59:54:69:e9:62:89:0a:ec:ae:
80:93:f8:6a:d2:0b:03:7f:e6:3c:ec:d7:57:73:cd:40:03:f5:
02:d7:bb:21:c0:37:72:99:05:25:44:3d:18:b5:68:30:a8:33:
bc:3d:25:e3:02:db:77:8d:78:b4:19:94:38:a5:67:84:51:d4:
70:35:cb:2e:01:09:73:bc:db:c6:ce:99:91:cb:fd:a1:ae:4f:
66:14:99:72:b2:ff:c0:2d:a4:a5:cf:dc:a1:cb:42:fd:4b:22:
6e:97:9d:99:38:ed:df:e6:64:45:8d:7b:4f:bc:e0:ba:9c:8f:
f4:31:4d:23:8e:51:2e:f6:58:c7:09:fc:37:cb:fb:e6:b7:e3:
86:bb:fa:89:44:cc:a0:b2:39:8d:73:38:b7:ef:11:ad:0a:70:
1a:2d:5a:c6:ba:83:d8:89:23:e9:b6:85:95:9c:19:1f:52:c9:
8b:3f:89:70:2f:df:c7:f1:43:55:91:15:7e:1e:d9:f3:e8:7f:
de:51:e9:97:35:0a:b8:4d:73:4d:e0:7d:ee:c3:9c:71:78:32:
37:95:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org