Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/kfzUCJ1FQ_KJgaI_TRLTFq6xiMI.roa
File: kfzUCJ1FQ_KJgaI_TRLTFq6xiMI.roa (raw, json)
Hash identifier: 05mQxAY/uYIEYyK5mL63ZC3DhmNLjSB7RyZHyPCVvrc=
Subject key identifier: 91:FC:D4:08:9D:45:43:F2:89:81:A2:3F:4D:12:D3:16:AE:B1:88:C2
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 01849ECF4B593A034D506692A4295A5FC4D3
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/kfzUCJ1FQ_KJgaI_TRLTFq6xiMI.roa
Signing time: Tue 22 Nov 2022 10:08:16 +0000
ROA not before: Tue 22 Nov 2022 10:08:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:cf:4b:59:3a:03:4d:50:66:92:a4:29:5a:5f:c4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Nov 22 10:08:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91fcd4089d4543f28981a23f4d12d316aeb188c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:f6:7e:a6:5c:cc:47:25:a1:8b:e8:50:ad:
e9:8d:f7:c2:55:b8:cb:9e:a0:3f:4b:ce:4f:23:65:
33:60:52:f2:5b:d7:63:35:72:e9:be:40:dd:86:39:
90:43:c1:a8:5e:26:14:8d:05:0a:04:3a:af:af:c9:
3f:0f:b3:4b:36:a1:75:1c:2f:36:65:3b:fc:20:27:
54:87:2a:70:c4:5f:d5:3c:be:b9:f7:af:29:e2:2e:
18:e9:8f:73:82:1b:a2:42:4d:34:60:da:86:06:8e:
c2:8a:ff:eb:dd:ed:c5:bc:c0:09:38:57:20:c2:05:
9e:19:08:b4:86:ab:85:42:80:9d:67:f1:52:3b:c7:
1a:8c:67:1d:d2:21:61:41:17:85:85:6f:3d:f5:ef:
17:ea:db:dc:f4:14:c1:cc:e1:2e:ed:b4:f4:8b:15:
94:ef:3a:e7:b8:f0:30:b7:a2:fd:07:63:94:da:5b:
94:8e:77:ec:4c:0c:3c:6a:9e:fa:7d:9e:15:88:2f:
ef:c4:4c:49:07:8e:51:d3:25:dc:b3:2d:2b:0b:11:
9e:f6:06:22:80:f1:9b:b7:59:8b:8f:46:c8:55:a4:
e7:b8:2d:d0:4b:e1:c3:ee:9d:1d:72:21:0e:f3:ec:
1c:2e:b3:b2:43:eb:2d:d9:c2:88:ca:22:91:5e:fb:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FC:D4:08:9D:45:43:F2:89:81:A2:3F:4D:12:D3:16:AE:B1:88:C2
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/kfzUCJ1FQ_KJgaI_TRLTFq6xiMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:75:dd:dd:12:98:31:89:7b:59:63:09:67:fe:1d:30:be:ea:
87:d6:04:a1:e7:7f:e0:fe:c5:f9:3d:20:dd:34:26:97:07:d0:
8e:bc:54:24:85:12:53:24:04:3e:5a:9e:6a:af:2e:51:cc:80:
b9:f4:54:e2:52:9b:a1:c4:9e:91:9c:07:f3:39:2e:76:d6:e5:
5f:98:31:0f:9e:82:40:ca:76:b0:44:16:8a:61:27:60:f9:d5:
b1:b7:fa:bc:33:66:2b:d5:4c:8e:33:55:12:7c:5f:84:ec:aa:
f7:23:8a:02:5e:70:9b:ed:73:07:da:56:db:a1:80:33:22:45:
40:4a:ec:1e:e2:eb:5d:2a:e8:0d:a0:93:7b:3e:19:3d:e7:81:
e9:2f:b7:76:59:33:4f:9c:9e:fb:f0:1a:67:d7:b8:80:08:ca:
a9:86:9f:85:06:41:35:8c:85:e7:93:5d:8f:68:9d:41:01:d7:
e7:af:7b:3c:0f:1f:a3:33:73:77:ef:ad:4d:d7:eb:00:c0:a5:
b5:66:9c:b7:2c:c0:d2:2a:0b:6e:61:9e:dc:94:10:d5:1f:02:
ad:96:b9:44:96:54:f3:bc:84:10:81:ae:da:fc:ef:0a:6f:0a:
f2:78:c2:df:84:fa:0f:1f:85:a5:7d:99:7c:8f:4a:b6:36:0c:
a7:dd:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:26 2024 by rpki-client on console-ams.rpki-client.org