Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/198f6c-d0d8-42be-ace9-3cbe039301a3/1/D9-1fWl9vIFqvTlh0n4BA1lc4Sw.roa
File: D9-1fWl9vIFqvTlh0n4BA1lc4Sw.roa (raw, json)
Hash identifier: eZicKAr/2Zi8Hn2D8T4ir2NIBLCYqyWPwlREnAuo/SU=
Subject key identifier: 0F:DF:B5:7D:69:7D:BC:81:6A:BD:39:61:D2:7E:01:03:59:5C:E1:2C
Certificate issuer: /CN=dec4ba05c44abfbe6601b2de6549e79151ec9e26
Certificate serial: 018964C061A3D476E43B40B4DC5714F430EF
Authority key identifier: DE:C4:BA:05:C4:4A:BF:BE:66:01:B2:DE:65:49:E7:91:51:EC:9E:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sS6BcRKv75mAbLeZUnnkVHsniY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/198f6c-d0d8-42be-ace9-3cbe039301a3/1/D9-1fWl9vIFqvTlh0n4BA1lc4Sw.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 194.32.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:61:a3:d4:76:e4:3b:40:b4:dc:57:14:f4:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec4ba05c44abfbe6601b2de6549e79151ec9e26
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fdfb57d697dbc816abd3961d27e0103595ce12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:e4:35:37:0d:1f:0b:86:d5:76:a3:95:cf:
ff:86:ac:8a:7d:20:d4:da:e0:54:7b:f1:f8:c2:d9:
8e:da:3e:8b:f7:dd:6b:90:3a:09:e8:b7:a5:41:04:
a0:f9:af:c5:49:37:4f:0c:ac:6f:89:f3:b3:50:c5:
77:84:e7:61:5b:32:65:42:e6:5b:94:a6:88:8e:10:
09:03:77:36:16:da:c0:02:ad:7a:24:17:89:55:28:
19:9a:60:7b:13:c8:8a:68:f5:5c:75:09:66:9a:81:
77:f8:02:31:de:a3:0c:95:ef:c4:df:09:47:ff:dd:
40:71:bd:d8:8b:1b:e9:b8:6b:05:e7:08:e0:dd:59:
ff:97:0a:d5:e3:45:33:be:b4:13:7d:e0:85:99:61:
dc:96:c3:01:30:d0:7a:d5:5a:8a:ca:e1:34:ef:34:
b8:66:99:bc:8a:56:93:b1:a9:40:54:f9:a0:9f:b0:
3c:78:83:94:9f:b3:88:3c:37:56:e3:20:7d:9f:24:
1e:9c:e9:24:f3:ec:3a:c0:43:a7:bf:05:a5:b5:a7:
67:3d:35:57:55:30:92:87:5e:d2:16:2a:73:bb:90:
5a:9c:7c:7d:8d:c5:87:df:c6:58:08:00:d4:21:b3:
5e:2d:48:ce:08:0e:da:1e:86:c1:ec:45:f5:e2:71:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DF:B5:7D:69:7D:BC:81:6A:BD:39:61:D2:7E:01:03:59:5C:E1:2C
X509v3 Authority Key Identifier:
keyid:DE:C4:BA:05:C4:4A:BF:BE:66:01:B2:DE:65:49:E7:91:51:EC:9E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sS6BcRKv75mAbLeZUnnkVHsniY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/198f6c-d0d8-42be-ace9-3cbe039301a3/1/D9-1fWl9vIFqvTlh0n4BA1lc4Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/198f6c-d0d8-42be-ace9-3cbe039301a3/1/3sS6BcRKv75mAbLeZUnnkVHsniY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:64:56:f3:55:5b:47:85:ca:c2:51:53:1b:bf:67:6d:b5:51:
b7:1b:78:97:9b:1c:db:0e:0a:23:99:b6:bd:5f:f6:d2:12:af:
48:d0:29:0f:ad:0a:df:ab:e5:d5:ef:53:a6:6e:0a:25:fa:2e:
75:5c:9b:15:86:1a:2a:b9:20:87:c3:58:d4:6e:b1:ac:83:79:
22:03:84:0f:00:35:fe:13:2b:37:d1:09:a0:3a:36:d7:75:3e:
f0:1a:d2:ce:20:b1:77:14:2d:38:b8:5a:b5:19:a1:ee:a9:7b:
93:c1:d2:af:34:45:f0:a7:6f:01:4b:13:a7:bf:10:40:9d:1a:
23:71:9c:47:9f:33:5f:e9:4a:64:f3:1b:7a:5b:b7:62:a8:29:
68:22:1a:db:dd:38:82:ca:84:de:f8:00:2b:ab:8c:3c:be:7f:
db:22:d6:c2:71:df:c1:13:6b:c4:49:7d:b7:d9:f7:96:50:fa:
85:19:40:4a:5f:65:c3:ef:10:ac:69:78:9a:ac:4a:5e:b1:1b:
b5:02:5f:37:52:2b:f5:de:41:89:49:5b:a8:41:ce:ba:63:bf:
2d:b6:61:e2:f2:82:f5:cb:27:57:60:6e:0c:df:a3:50:8a:97:
25:5f:49:45:fb:c8:1d:ec:44:38:fe:74:b6:fc:6b:04:9c:4e:
d5:a8:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 12:05:40 2023 by rpki-client on console-fra.rpki-client.org