Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/dGkqkUR6z2MnZGtrlGqbiqec7Ls.roa
File: dGkqkUR6z2MnZGtrlGqbiqec7Ls.roa (raw, json)
Hash identifier: jUEolgqcSq0c3NOgLZ6gZe3ma+CttqVLjwRVtC/Vo8o=
Subject key identifier: 74:69:2A:91:44:7A:CF:63:27:64:6B:6B:94:6A:9B:8A:A7:9C:EC:BB
Certificate issuer: /CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Certificate serial: 017469F5
Authority key identifier: D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/dGkqkUR6z2MnZGtrlGqbiqec7Ls.roa
Signing time: Thu 03 Feb 2022 15:52:09 +0000
ROA not before: Thu 03 Feb 2022 15:52:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 393398
IP address blocks: 194.31.204.0/23 maxlen: 24
194.31.222.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24406517 (0x17469f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Validity
Not Before: Feb 3 15:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74692a91447acf6327646b6b946a9b8aa79cecbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:9f:04:fe:78:07:9b:c8:e3:d9:ba:ae:07:
45:9e:ad:5a:50:1f:f3:84:50:d6:6c:9f:f8:09:7a:
e3:71:4c:80:8e:b3:02:25:ec:ff:1a:d8:6f:09:22:
9b:6c:6a:76:44:fd:86:d8:44:7c:a2:25:13:01:36:
6e:9e:fe:a8:d1:5c:30:01:38:f5:a4:4d:a6:8a:a8:
d7:d1:fa:f8:f6:cf:d8:62:37:cc:d0:80:a8:99:05:
df:5b:66:9b:0c:77:c9:a2:e8:c9:32:b9:72:16:85:
0f:98:e8:00:8e:bd:c2:d5:30:8a:46:49:66:44:95:
bb:94:fc:63:85:0c:41:a1:77:91:99:93:d9:d1:8b:
5f:a3:17:07:e6:86:e8:6d:40:99:3a:25:62:24:e4:
01:24:a6:b2:bf:ef:c8:0c:6c:8e:c4:52:a3:fe:52:
34:ae:cb:cf:1b:4e:fa:76:c3:50:96:8a:93:52:b9:
45:96:dd:f8:fa:fc:2a:b3:cd:f9:3f:71:52:f7:b6:
30:6c:e8:4d:ca:09:b7:b5:0f:55:74:ce:f6:3e:3d:
f2:58:32:66:4c:13:53:61:2c:4b:78:1b:77:6a:9f:
48:29:61:87:d5:ae:72:58:a5:64:d2:8a:e9:fd:61:
09:3d:6b:56:62:95:69:53:24:e1:ef:ba:b2:e4:54:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:69:2A:91:44:7A:CF:63:27:64:6B:6B:94:6A:9B:8A:A7:9C:EC:BB
X509v3 Authority Key Identifier:
keyid:D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/dGkqkUR6z2MnZGtrlGqbiqec7Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.204.0/23
194.31.222.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:d9:ef:7f:bf:27:6e:42:1b:f6:bb:53:54:b3:0d:ec:b8:91:
bd:b2:2e:2e:f6:b8:33:33:6c:52:30:e4:b7:1c:68:a7:9f:72:
b6:f0:0a:5f:9d:1c:34:d4:f2:b7:c9:91:c5:96:db:a8:10:20:
4a:2c:89:46:c5:1b:04:d8:5b:7a:13:16:39:75:c2:17:a7:e4:
b5:ca:a1:84:2a:61:7e:c2:c5:42:e6:01:0b:38:7c:0f:2e:85:
c2:6b:c1:31:3e:07:00:e4:f0:f9:61:dd:d6:9f:e5:a7:01:f8:
5b:8a:b9:59:94:7d:eb:c1:22:cd:6e:c6:23:b5:5e:70:3c:57:
5b:14:8f:d2:2a:2d:c5:8d:a4:f8:50:05:5a:9a:78:4f:64:80:
ef:d7:ac:4e:9c:22:04:d8:8c:ed:22:c6:90:3a:6b:06:f7:12:
76:d4:d7:d7:b9:92:27:91:83:0a:bd:23:bd:40:6f:03:10:6e:
ba:64:e4:d4:eb:7e:64:0c:11:90:ae:5a:51:13:e6:92:84:6b:
7e:02:00:30:5d:e3:69:51:1a:c7:14:3b:0e:57:40:5d:f3:ec:
73:22:41:23:03:a7:6e:ea:84:b6:77:5b:e9:ff:33:7f:ad:32:
7f:9e:ca:1a:02:e4:5b:85:cd:74:c6:ca:2c:5e:4d:d7:cc:8a:
a8:12:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:02 2023 by rpki-client on console-fra.rpki-client.org