Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/wI6okE874DZspN_SGN64BSPV_N8.roa
File: wI6okE874DZspN_SGN64BSPV_N8.roa (raw, json)
Hash identifier: 29ClZQUjYdncBYgEv8BbDpFgl14AgV+z+JEDmT+Athk=
Subject key identifier: C0:8E:A8:90:4F:3B:E0:36:6C:A4:DF:D2:18:DE:B8:05:23:D5:FC:DF
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 0189A850FDCC7966CDAEAE32520D8C98F4BB
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/wI6okE874DZspN_SGN64BSPV_N8.roa
Signing time: Sun 30 Jul 2023 19:40:27 +0000
ROA not before: Sun 30 Jul 2023 19:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197555
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a8:50:fd:cc:79:66:cd:ae:ae:32:52:0d:8c:98:f4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Jul 30 19:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c08ea8904f3be0366ca4dfd218deb80523d5fcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:83:5f:ad:1c:af:14:9c:19:b9:ec:dc:31:16:
29:26:3b:b3:dd:89:1b:1a:f0:f2:c2:23:03:0a:83:
40:65:34:bd:40:8d:b2:19:35:3c:0b:b5:e5:96:e5:
2f:8d:61:e0:58:43:7a:4d:ed:de:76:da:1c:be:90:
8e:f1:6f:a0:0b:6f:97:48:6c:7c:df:ee:e8:43:38:
a9:1a:90:50:73:2f:f4:dd:2a:88:c4:ab:76:45:e6:
2e:1e:8a:7d:a4:5f:c5:d9:83:81:ff:4a:09:25:83:
27:cc:2e:ce:72:2e:f6:17:1d:cd:6f:01:0b:e9:5b:
fd:1f:c5:9a:4a:2c:96:7f:53:9f:23:53:a7:a1:d2:
de:3b:96:05:f4:6d:ac:bc:2f:83:97:69:21:9d:7d:
f5:b9:8d:09:47:8e:5b:77:53:0d:e6:e8:27:e5:b8:
42:e1:54:7a:65:b4:8c:cc:a0:ec:e8:3b:b8:53:55:
14:66:fd:d7:57:33:39:a1:62:70:f0:b9:ca:6c:d7:
1a:6a:3b:85:8b:c2:6b:8a:df:8c:91:e9:5f:c1:f8:
2f:60:d7:04:be:1f:e6:97:1b:36:a8:c8:24:ea:c9:
a2:a9:7d:4a:d4:89:20:0b:93:02:d9:39:e4:c1:65:
9a:eb:46:e0:8a:47:27:da:07:c2:57:34:ed:48:aa:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:A8:90:4F:3B:E0:36:6C:A4:DF:D2:18:DE:B8:05:23:D5:FC:DF
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/wI6okE874DZspN_SGN64BSPV_N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:92:49:18:f7:9a:99:38:7d:1f:0a:cd:57:cf:06:aa:fa:f3:
e2:8d:9b:48:9a:82:fb:37:b1:31:6e:63:fc:4c:67:1b:26:55:
8c:c1:e6:7a:7d:ba:d8:d3:52:bc:0c:f1:2b:29:5a:8e:85:89:
0a:18:20:ce:18:c6:83:ff:07:0f:28:0e:f8:68:f7:fd:51:52:
08:73:28:a0:09:aa:04:fb:9d:52:b4:b0:98:28:d8:56:92:50:
ce:2e:cd:86:c5:cd:87:7e:87:ea:fb:ec:c9:ca:dc:9e:44:be:
0f:47:21:fc:8f:7a:b8:ca:b2:93:a4:0d:df:1b:21:57:a7:ad:
06:56:83:df:26:7a:51:3e:3c:69:93:b9:b6:54:2c:31:88:26:
8d:eb:c2:3a:c5:8d:50:0a:0e:97:6b:4f:cd:03:40:c1:07:ae:
df:22:00:3c:f3:75:e1:87:62:0b:95:f8:5f:e3:4e:6f:a9:2e:
ae:25:dc:11:20:b7:07:dd:ca:33:7a:0a:60:90:b8:e9:27:be:
c6:6b:21:c4:05:15:24:ba:98:dc:aa:d0:19:1a:2e:b8:98:75:
d0:da:14:35:70:ef:d0:20:57:e4:7a:45:ee:ea:a2:62:ee:af:
a0:9e:7f:09:21:b0:73:96:be:1b:1a:82:45:b3:f0:7d:de:83:
92:42:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org