Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/eOZGmF3QG3RGGRgxC4QfRLI7-Qk.roa
File: eOZGmF3QG3RGGRgxC4QfRLI7-Qk.roa (raw, json)
Hash identifier: qY4BjAQ3L2RdjhJrv+9c3TTQfiIgQ0YVws7IL8f5MUM=
Subject key identifier: 78:E6:46:98:5D:D0:1B:74:46:19:18:31:0B:84:1F:44:B2:3B:F9:09
Certificate issuer: /CN=04a77442f6895c9032464260622887aa96fc6daa
Certificate serial: 018CC6B93359C4200690FE763105FF1D085A
Authority key identifier: 04:A7:74:42:F6:89:5C:90:32:46:42:60:62:28:87:AA:96:FC:6D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKd0QvaJXJAyRkJgYiiHqpb8bao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/eOZGmF3QG3RGGRgxC4QfRLI7-Qk.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202448
IP address blocks: 94.231.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:33:59:c4:20:06:90:fe:76:31:05:ff:1d:08:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a77442f6895c9032464260622887aa96fc6daa
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e646985dd01b74461918310b841f44b23bf909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:46:a4:21:38:7d:1a:94:82:b6:22:e8:e0:
ca:ed:a1:60:93:38:85:22:3c:d8:3a:43:02:79:24:
00:be:b9:a7:9f:7c:00:60:96:66:86:e3:28:82:f4:
1d:d8:66:1c:0b:f2:d0:93:b4:ba:fc:4b:1e:dd:fd:
98:32:4a:c6:6a:01:7f:ce:01:fb:df:64:39:db:9a:
10:54:01:33:c4:c0:bc:21:3f:06:9c:95:ec:82:40:
6f:9a:0d:cd:0f:24:d2:04:e8:b7:e0:01:c7:bd:2a:
16:5f:7e:15:3d:9f:31:ef:3a:4a:bc:f1:c6:0a:e3:
85:e7:3e:4a:03:52:29:3a:db:81:e5:68:19:79:a1:
53:0e:c9:b4:00:bb:aa:64:7a:bf:aa:11:38:13:2b:
52:a0:f1:96:0d:9a:26:fe:d5:92:35:c2:f3:6e:63:
f0:99:44:9c:64:37:c0:c3:07:29:08:41:a6:a3:a5:
89:9b:0c:54:94:5f:56:e5:b7:d4:d9:47:d8:5b:96:
6f:0e:74:bd:53:fc:e2:75:37:70:7f:9a:6a:5f:95:
e6:1a:57:1b:9a:a9:71:bb:bf:3c:e5:93:6c:ee:60:
ee:de:e2:00:7f:0a:3c:10:09:7e:8e:e8:81:4d:28:
2a:cb:05:39:77:2b:c3:cd:a9:36:d2:6a:b7:ed:ea:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E6:46:98:5D:D0:1B:74:46:19:18:31:0B:84:1F:44:B2:3B:F9:09
X509v3 Authority Key Identifier:
keyid:04:A7:74:42:F6:89:5C:90:32:46:42:60:62:28:87:AA:96:FC:6D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKd0QvaJXJAyRkJgYiiHqpb8bao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/eOZGmF3QG3RGGRgxC4QfRLI7-Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/BKd0QvaJXJAyRkJgYiiHqpb8bao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d2:80:da:f6:e8:60:21:9c:49:67:31:75:3f:2f:77:ec:7b:
81:da:21:c7:e1:36:6a:a8:7d:8f:52:a9:25:70:f4:30:2d:e5:
25:ca:47:84:83:78:92:f4:fc:04:a1:fb:71:31:db:3f:61:5a:
24:52:32:d8:76:12:2e:d0:6e:24:90:59:a6:19:c0:60:a2:c9:
a9:28:05:88:16:34:e8:33:94:ea:f6:22:3d:b7:1d:f5:ad:6f:
85:08:4b:3c:78:a8:0b:4a:19:da:e9:96:02:00:53:08:e1:f3:
e7:40:08:d6:9e:70:09:de:89:38:30:15:e6:cc:bc:42:36:58:
e6:92:e3:6e:a0:a9:40:1d:11:31:3a:63:62:9c:78:d5:78:7a:
00:10:00:60:a0:53:15:99:d9:9c:0e:c9:ee:04:bb:e7:36:49:
b0:24:cd:31:b3:01:43:3b:78:77:0d:a5:9f:36:5a:09:d5:37:
1e:84:de:df:a4:fc:e7:60:37:bf:a0:41:72:de:47:44:f6:46:
24:0b:9b:51:26:40:7f:fd:bb:15:e6:98:2e:d1:69:5b:da:51:
e5:2b:68:cb:20:2c:05:37:c2:94:0b:45:51:6d:64:91:a7:54:
8e:31:85:dc:22:98:34:50:40:b0:ee:5e:8d:45:52:a0:b5:e9:
56:6d:bc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 11:24:33 2024 by rpki-client on console-ams.rpki-client.org