Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/kRQDOUeusAIXdCkT2gifKtcrrxQ.roa
File: kRQDOUeusAIXdCkT2gifKtcrrxQ.roa (raw, json)
Hash identifier: 5TKrfVKo/s3BthvIs2lZSW0xXbSsqtQ3h94kmyAvevQ=
Subject key identifier: 91:14:03:39:47:AE:B0:02:17:74:29:13:DA:08:9F:2A:D7:2B:AF:14
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 018572A80E8C371CB6FEF8D350F14FF45BAC
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/kRQDOUeusAIXdCkT2gifKtcrrxQ.roa
Signing time: Mon 02 Jan 2023 13:24:54 +0000
ROA not before: Mon 02 Jan 2023 13:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a8:0e:8c:37:1c:b6:fe:f8:d3:50:f1:4f:f4:5b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Jan 2 13:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9114033947aeb00217742913da089f2ad72baf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:3c:8d:60:2c:72:2d:a3:6a:5f:d4:29:7b:
65:88:3f:ee:af:c4:bc:a8:4c:d2:b7:74:d4:ce:fe:
4f:5b:9f:eb:a5:65:75:8c:9b:0e:55:1c:78:7a:c5:
44:a2:13:50:c9:eb:40:75:cc:da:2f:1b:7a:9b:86:
c9:26:30:7a:b9:27:03:67:49:89:ff:77:d0:ef:69:
cf:d2:9e:3d:05:fe:51:a4:fb:ed:5d:6d:b8:a3:5e:
b8:e6:70:b4:9e:ed:2e:68:60:0a:14:76:e1:2d:b4:
7a:a1:ac:02:b4:7d:8f:38:5a:76:16:7b:71:3a:00:
38:92:36:d3:c8:2f:b6:1d:9f:6d:12:64:1a:9f:b2:
b3:1c:82:69:cd:b7:83:3a:0e:f4:3f:b0:ba:a6:6c:
42:cb:af:79:91:50:76:ca:03:2c:5b:03:94:ff:20:
3c:28:5c:f9:e2:3b:d2:a5:06:25:16:ff:ee:b5:92:
93:42:04:cc:05:60:01:fd:8d:ee:26:e6:ac:b3:ca:
61:dc:af:ee:51:46:7d:12:5a:25:b9:3f:1c:8a:53:
6e:bc:1e:db:29:b5:fe:65:42:2b:c3:6f:ac:2a:af:
10:32:74:ad:b7:4e:1d:45:52:7e:b2:8c:59:fd:b0:
ba:65:3b:fa:10:00:00:9d:b1:5e:8b:12:85:94:96:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:03:39:47:AE:B0:02:17:74:29:13:DA:08:9F:2A:D7:2B:AF:14
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/kRQDOUeusAIXdCkT2gifKtcrrxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bb:98:e0:56:81:a3:58:74:20:96:d1:85:26:9f:98:d5:3c:
c2:0b:e2:4a:0c:ec:c6:13:40:c1:ab:49:9d:dc:8a:75:b5:6a:
03:ab:ba:da:33:82:08:71:e3:5b:3c:5d:07:a0:0f:f8:33:3b:
3b:b2:30:63:69:e8:4f:3b:e7:1a:48:09:24:9a:e7:79:65:ad:
3f:60:74:18:59:ea:b9:68:70:11:3a:38:83:51:4d:af:7c:f7:
8d:d4:2c:74:48:ed:21:f9:b0:c1:4d:c7:45:d7:2b:b2:9a:96:
2e:09:d8:e5:51:8f:85:e7:bc:b1:a6:17:09:6a:0d:d2:61:81:
0d:2c:50:45:ac:b5:c0:06:6b:b5:bd:36:0c:00:f4:0a:b4:ca:
49:aa:db:c2:6e:ae:8e:95:1d:12:06:8d:12:8b:62:a9:16:26:
08:2c:c9:26:79:bb:23:c5:97:22:f2:e8:2d:d9:20:89:90:05:
dc:ef:fe:b8:4e:b8:2c:cb:13:36:45:27:00:ad:45:b9:f2:7d:
1c:07:d6:16:d4:eb:23:1e:ad:5b:cc:50:61:da:f9:1a:de:a5:
83:f1:5c:46:87:1c:72:9a:4e:55:dd:3e:f3:7a:ce:76:ad:de:
b8:cc:3b:73:04:6b:eb:29:66:9e:e7:65:18:6c:de:fa:d4:c7:
5b:5b:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org