Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/vRQs5dthenb215ZDQ9l0ZCnNMqw.roa
File: vRQs5dthenb215ZDQ9l0ZCnNMqw.roa (raw, json)
Hash identifier: YiSrUQtRv3pfnvVl7MDf3W2IeFwVUxINDbngScFav2s=
Subject key identifier: BD:14:2C:E5:DB:61:7A:76:F6:D7:96:43:43:D9:74:64:29:CD:32:AC
Certificate issuer: /CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Certificate serial: 01856E143426CA7DC29616CCED01F1DB1C08
Authority key identifier: A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/vRQs5dthenb215ZDQ9l0ZCnNMqw.roa
Signing time: Sun 01 Jan 2023 16:04:55 +0000
ROA not before: Sun 01 Jan 2023 16:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1942
IP address blocks: 192.33.171.0/24 maxlen: 24
129.88.0.0/16 maxlen: 16
147.171.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:34:26:ca:7d:c2:96:16:cc:ed:01:f1:db:1c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Validity
Not Before: Jan 1 16:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd142ce5db617a76f6d7964343d9746429cd32ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:37:98:fa:9f:d0:4b:c2:c9:c7:5c:0a:34:
99:5a:62:c2:f8:2d:a4:0d:37:75:3b:d1:a9:63:9a:
0a:bb:72:da:0f:02:71:56:e0:d8:d5:68:ec:88:14:
39:4c:bf:88:27:f7:4e:99:88:10:1a:e2:4c:b2:dc:
51:d4:d3:aa:b4:6b:bc:2b:f9:34:d9:6f:85:22:4e:
76:2d:c5:95:7a:0e:f4:16:27:ad:9b:e1:d5:50:45:
09:dd:91:3d:37:de:09:8d:97:eb:2b:ef:d0:4f:87:
59:fa:8e:3a:cc:31:f8:54:a0:6e:d2:aa:85:b9:58:
55:65:a3:7b:a1:f6:ad:c7:c1:79:81:fb:aa:0f:fd:
ce:72:28:6b:bc:d5:49:0a:36:33:2f:2d:9b:ce:5b:
f9:51:a7:58:75:3d:6e:5a:14:c0:f9:86:fd:b7:b9:
9e:4a:3e:8e:18:82:08:da:d8:ed:89:6b:e5:84:b9:
a8:37:1d:ae:3a:3f:4b:d5:49:4a:85:30:ab:1e:5b:
4d:05:59:39:e9:0f:d2:96:42:2a:bd:32:d9:1f:36:
ec:35:0c:1f:7a:14:0f:8c:97:01:13:92:50:0c:ff:
64:03:e1:c0:e5:f9:bd:ae:76:f2:d7:0a:03:01:9f:
45:59:56:f7:c2:bd:d0:5e:a9:40:7a:b3:41:e0:af:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:2C:E5:DB:61:7A:76:F6:D7:96:43:43:D9:74:64:29:CD:32:AC
X509v3 Authority Key Identifier:
keyid:A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/vRQs5dthenb215ZDQ9l0ZCnNMqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/pMG7EBqBS54u6CZPgTUqW_Ly0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.88.0.0/16
147.171.0.0/16
192.33.171.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d2:3a:f7:9e:4c:25:52:89:11:68:84:2a:15:f8:fc:e2:55:
c3:23:7d:0f:23:ee:ea:75:52:20:c5:03:fb:7d:56:fe:88:02:
0d:a6:fa:49:7c:86:d8:61:65:c0:13:fc:bc:e7:2a:cf:a9:ed:
88:4c:a4:41:a3:39:e7:1a:af:10:ae:9d:7a:d3:49:a0:bc:10:
b3:3b:6d:79:09:34:0f:a0:a5:c0:1a:eb:66:01:11:8b:61:b2:
9e:77:09:35:ad:3a:ec:2a:b6:91:9a:fb:7f:5c:b9:82:17:af:
37:75:08:30:05:2f:21:22:1b:0b:66:b6:09:f6:94:5b:91:03:
c1:e0:b0:b1:75:25:de:cb:93:2c:8e:13:80:e3:67:3a:62:9f:
02:1f:b6:12:71:a8:d7:ce:e3:70:10:e5:d0:4c:da:7f:ed:49:
20:87:46:18:32:54:11:d9:4c:64:76:3b:c5:40:08:45:e5:89:
d6:9b:7d:38:b4:ef:97:db:93:f9:8a:07:5e:84:ff:bd:0f:94:
5c:0b:81:ee:ee:00:fc:bf:55:8c:0a:b6:2d:86:d3:c0:e4:3a:
87:25:61:d1:27:9c:30:4c:27:5d:f2:7d:43:c4:39:28:cd:22:
61:40:c1:c2:ab:fd:2e:e7:1b:01:79:08:11:fb:be:5d:6a:78:
23:e1:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:41 2024 by rpki-client on console-fra.rpki-client.org