Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/V08kQ8RFVeFYYDOmJsPbhrjwTyQ.roa
File: V08kQ8RFVeFYYDOmJsPbhrjwTyQ.roa (raw, json)
Hash identifier: G5ivGtneudGrg0sPR65sBrWSZ0xSEYboLjktF0BVGm4=
Subject key identifier: 57:4F:24:43:C4:45:55:E1:58:60:33:A6:26:C3:DB:86:B8:F0:4F:24
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 0185704BAF420D9BB56785C53CDF7A8321C4
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/V08kQ8RFVeFYYDOmJsPbhrjwTyQ.roa
Signing time: Mon 02 Jan 2023 02:24:46 +0000
ROA not before: Mon 02 Jan 2023 02:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205960
IP address blocks: 194.126.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:af:42:0d:9b:b5:67:85:c5:3c:df:7a:83:21:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Jan 2 02:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=574f2443c44555e1586033a626c3db86b8f04f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:64:7c:41:42:50:c7:8a:67:82:d6:be:37:
41:ef:e7:14:b7:41:93:05:de:34:a8:be:8a:1e:9b:
81:ee:a6:4b:f0:71:67:bb:86:db:af:22:4b:6a:54:
0b:f5:38:b9:24:fd:99:0a:1a:f0:fc:4e:a3:98:9a:
5f:72:0c:44:2c:96:25:95:3b:2b:7b:04:c4:17:56:
67:a7:9f:7d:81:92:27:0d:ef:e3:08:bc:69:a9:c2:
a9:a5:b2:a4:6f:ec:81:7e:0f:ab:2d:66:95:23:9c:
6c:f7:cf:07:60:17:9a:c3:31:e2:55:12:d0:9d:80:
c9:c0:df:3b:e9:d8:75:e7:25:39:70:9d:89:3f:61:
53:af:33:b7:a3:d9:ac:a2:06:d4:35:d9:4f:12:53:
6e:89:1a:b2:e4:2a:e8:d8:4f:01:d4:03:c2:07:ac:
b1:b8:d5:99:c5:dd:13:f0:10:87:85:f6:d2:2d:7f:
66:aa:8f:63:cc:2e:f1:7d:c9:db:1e:68:45:8e:a4:
89:4b:5b:f1:d1:49:e6:b9:a6:bc:04:4f:b2:4d:29:
dd:d8:aa:91:31:fe:7a:48:75:a3:b8:99:a9:5d:de:
e5:04:68:5d:47:53:e3:c8:83:33:c7:95:b4:52:80:
8d:74:14:c2:92:8d:26:5f:e1:65:00:db:7f:34:8e:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4F:24:43:C4:45:55:E1:58:60:33:A6:26:C3:DB:86:B8:F0:4F:24
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/V08kQ8RFVeFYYDOmJsPbhrjwTyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3e:cd:35:79:54:e7:82:d1:27:ba:57:29:42:23:1b:b6:ed:
1b:bf:12:37:20:e8:2a:2b:85:a1:7c:0f:1d:79:6a:a0:f4:66:
6d:5b:36:9a:3e:1c:45:45:eb:41:6f:00:dc:b9:40:f3:dc:03:
17:ea:ef:4e:90:08:47:af:15:4a:91:c5:ea:85:f8:3e:c9:9b:
cc:d8:54:7a:86:7d:b1:00:7d:52:8b:bc:e1:10:02:df:5d:a7:
01:e9:16:f3:9b:8a:19:fe:7c:64:3d:27:a8:fb:e2:33:27:ec:
e9:03:f9:5a:04:6a:86:73:d8:dd:1f:1c:2d:bb:94:f2:2d:de:
6e:7b:2b:fa:0b:51:2c:91:b8:ce:19:26:0d:2b:4b:84:58:fa:
89:36:f2:02:46:9d:22:be:ab:18:34:39:0a:61:a6:30:47:22:
5e:47:e1:d1:a9:ef:5a:df:d9:8b:99:77:74:2c:89:08:99:b4:
b3:62:85:55:1b:7b:16:b0:fe:90:7d:a3:e4:45:1b:3f:2f:c3:
62:6e:2e:68:b4:84:1a:81:74:d7:b8:5f:26:f6:48:6f:96:43:
ac:ba:bc:cd:88:7a:9c:63:5c:ac:1e:9b:06:5a:ef:55:6a:63:
da:fb:18:e8:96:3a:99:90:2c:d1:d3:00:da:e3:f4:2c:98:3b:
64:19:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 11:30:36 2023 by rpki-client on console-fra.rpki-client.org