Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/j6pOwfkk0hml3ZE9DE9kAj7EP18.roa
File: j6pOwfkk0hml3ZE9DE9kAj7EP18.roa (raw, json)
Hash identifier: ZtJjBKzYtonF/9OkYaK8OWYDgu5lWoG8kNyTWT0mFcI=
Subject key identifier: 8F:AA:4E:C1:F9:24:D2:19:A5:DD:91:3D:0C:4F:64:02:3E:C4:3F:5F
Certificate issuer: /CN=aae73121517086d93ac70e72e3c3f5a0b5e73b89
Certificate serial: 08F83855
Authority key identifier: AA:E7:31:21:51:70:86:D9:3A:C7:0E:72:E3:C3:F5:A0:B5:E7:3B:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qucxIVFwhtk6xw5y48P1oLXnO4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/j6pOwfkk0hml3ZE9DE9kAj7EP18.roa
Signing time: Sat 01 Jan 2022 09:00:34 +0000
ROA not before: Sat 01 Jan 2022 09:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61205
IP address blocks: 193.138.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150485077 (0x8f83855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae73121517086d93ac70e72e3c3f5a0b5e73b89
Validity
Not Before: Jan 1 09:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8faa4ec1f924d219a5dd913d0c4f64023ec43f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:f8:a6:af:97:54:70:b9:50:b5:8e:69:10:
9d:01:13:d7:fc:b6:e3:53:bf:af:ba:b9:df:8a:68:
0f:a9:1f:d7:06:a4:19:62:d5:c4:59:91:c2:91:8b:
aa:b3:d4:b2:7f:78:8e:1e:13:f2:79:27:26:e9:ae:
a1:7e:90:4b:5c:9a:57:df:e7:91:e8:70:fd:11:aa:
d3:45:61:24:54:cf:1c:0f:ac:38:a5:00:8f:8e:50:
28:ef:39:a1:f1:fd:37:dd:b3:0f:79:68:c2:03:09:
b2:d9:59:6a:e6:8a:20:f7:d9:b7:2b:c7:8b:b3:71:
ac:eb:59:78:56:e7:1b:c5:aa:5c:d6:26:f2:74:26:
13:73:cb:09:31:9f:f9:af:9b:ca:66:53:14:13:a8:
93:63:d0:ed:d5:cc:57:75:93:4f:fa:5b:db:5b:de:
a1:b6:c4:a5:3d:56:18:f9:63:ab:6f:7e:75:4e:b2:
67:2b:a7:f3:9d:d8:89:69:96:13:e2:b0:12:d5:48:
d9:30:a8:02:64:6b:36:f4:c1:79:77:e6:bb:6c:9a:
d9:d3:10:2e:71:46:16:2a:be:8d:d6:8e:43:f7:ab:
fa:a8:e8:6b:ce:2a:07:90:66:54:15:cb:19:15:da:
53:c2:52:f5:c8:79:53:52:d1:6a:88:1b:57:af:ee:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:4E:C1:F9:24:D2:19:A5:DD:91:3D:0C:4F:64:02:3E:C4:3F:5F
X509v3 Authority Key Identifier:
keyid:AA:E7:31:21:51:70:86:D9:3A:C7:0E:72:E3:C3:F5:A0:B5:E7:3B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qucxIVFwhtk6xw5y48P1oLXnO4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/j6pOwfkk0hml3ZE9DE9kAj7EP18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/qucxIVFwhtk6xw5y48P1oLXnO4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.168.0/22
Signature Algorithm: sha256WithRSAEncryption
73:2e:f2:ae:8e:8a:84:bd:0f:87:7b:b0:27:f5:2c:64:ea:0d:
4b:6e:06:61:3a:2f:54:84:42:02:47:b4:99:a0:5f:3b:55:b0:
db:6f:50:e3:bb:36:ba:25:8f:39:4b:ab:86:a7:e4:06:67:00:
49:e2:ee:2d:1b:b3:57:07:6b:81:03:b1:67:be:5b:3e:c8:03:
49:b3:1d:1c:ac:2e:82:58:80:7a:bc:1c:30:da:2e:52:c7:23:
a7:cc:bd:36:c9:4b:e2:92:bd:9d:c7:dd:3a:3d:e5:2d:9a:3c:
87:56:7c:72:c1:5f:4b:92:53:fc:23:89:a1:e9:22:ab:c0:93:
eb:fc:97:8c:7b:37:cd:b2:d6:33:79:ea:0b:b8:b0:61:2d:44:
d2:a7:91:28:99:52:f5:e8:02:ce:b9:ba:ac:29:11:65:17:99:
61:5f:8d:87:69:f1:d7:e7:84:6a:43:ea:21:cf:61:f6:3e:49:
b1:f1:61:23:36:31:18:90:c4:ab:ea:52:94:80:4a:f6:fa:c0:
e0:db:6f:97:23:ce:1e:5d:e3:a1:4f:10:34:43:9b:38:2c:0e:
0c:4d:51:93:55:64:03:10:a0:01:c2:82:2d:c2:48:08:47:b5:
20:3b:fb:51:78:75:c5:12:de:df:04:a2:71:92:ba:6d:59:d6:
ff:ac:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:47 2024 by rpki-client on console-ams.rpki-client.org