Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/aSc4QFwPFpvC9cKxDvi_DnsWn2c.roa
File: aSc4QFwPFpvC9cKxDvi_DnsWn2c.roa (raw, json)
Hash identifier: cmoek7XLfG35DCxhVDcQHOodXCJqqlquA6FUUXyAhAo=
Subject key identifier: 69:27:38:40:5C:0F:16:9B:C2:F5:C2:B1:0E:F8:BF:0E:7B:16:9F:67
Certificate issuer: /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial: 3450F4
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/aSc4QFwPFpvC9cKxDvi_DnsWn2c.roa
Signing time: Fri 18 Feb 2022 06:36:45 +0000
ROA not before: Fri 18 Feb 2022 06:36:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 185.94.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3428596 (0x3450f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Validity
Not Before: Feb 18 06:36:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=692738405c0f169bc2f5c2b10ef8bf0e7b169f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:0c:a3:0c:13:96:05:3c:8f:b6:f0:ff:eb:
2c:1d:7d:7f:c9:6e:5e:4d:52:32:80:9b:95:28:21:
b3:02:f7:d0:f5:64:75:8b:d0:3f:11:ff:f3:bf:73:
46:5c:35:a4:f2:bb:4d:3b:47:60:03:87:e0:93:77:
1a:ad:4d:24:98:42:b9:5c:62:b4:d1:fc:25:37:10:
0f:61:08:4d:91:75:30:33:3d:f6:fe:7c:f4:32:c2:
06:80:89:99:56:3d:b1:f0:f0:d6:86:f2:dd:98:a2:
6d:df:c1:07:cc:8d:e6:1a:6f:a5:0c:bb:b6:03:f9:
e7:da:3d:99:a2:86:89:b8:b5:56:2f:57:a4:74:45:
8e:1d:34:74:f2:e4:3c:3d:45:09:35:f7:35:34:d0:
b8:c4:7a:d4:d8:3f:67:b9:66:41:5b:1c:26:38:cb:
9e:ac:93:6b:0f:85:69:a7:0f:1d:29:a7:eb:ef:2f:
06:a3:be:6d:4b:be:50:b1:f0:3b:ba:aa:5d:20:30:
42:bd:88:2b:05:d7:47:43:6a:30:0f:c9:1e:ca:b6:
f3:4c:d7:30:a3:c0:30:61:a1:ab:33:19:79:6d:b1:
ce:66:a1:55:65:28:cf:ca:d8:b8:d4:4c:f4:21:c0:
d8:b9:f7:61:2f:70:38:6b:64:f9:80:fe:7b:65:90:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:27:38:40:5C:0F:16:9B:C2:F5:C2:B1:0E:F8:BF:0E:7B:16:9F:67
X509v3 Authority Key Identifier:
keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/aSc4QFwPFpvC9cKxDvi_DnsWn2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f7:fb:1c:85:60:6b:38:9b:70:ea:38:11:25:89:77:6d:e5:
ba:56:00:b5:01:18:90:9e:2e:9e:ca:f7:f1:c4:7b:25:b6:ec:
48:f3:9a:12:cd:d1:8a:1e:88:73:bc:b8:f0:83:88:ee:ab:ed:
7f:ae:2d:cb:94:4f:c1:f6:7f:87:f0:e5:9c:b5:2a:d4:f9:4f:
4d:5e:ef:2c:cb:50:8b:ce:1d:d4:99:b6:2d:d2:8a:fa:6b:89:
37:0d:13:fa:b6:fb:51:3e:27:a1:a5:41:87:80:22:85:2d:9f:
95:b3:52:51:3c:1a:6f:11:7b:19:65:26:85:a9:c7:4c:c9:37:
75:6b:3e:be:cd:cb:30:dc:4f:7f:fd:17:95:20:9e:2f:c4:40:
44:93:79:d7:48:44:cb:bb:62:11:54:e3:73:70:88:a8:6d:3b:
f8:72:ab:14:df:ae:73:7c:a3:43:b7:49:36:bb:78:7f:66:a8:
02:b8:d0:68:97:cb:89:d0:f3:30:52:2a:38:a9:a2:3d:ca:43:
fa:06:2e:1d:b7:eb:4d:0a:f6:8b:a1:3b:1b:b3:ab:f5:c0:43:
bc:df:b2:d2:6e:c3:91:7c:ec:36:c9:84:11:c0:1a:d1:56:25:
92:36:a9:b4:fe:22:1f:99:64:fb:e6:c4:e5:00:b7:19:26:88:
50:47:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:56 2024 by rpki-client on console-fra.rpki-client.org