Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/g444gPmL2vk7UkFwRfQe4OeEphQ.roa
File: g444gPmL2vk7UkFwRfQe4OeEphQ.roa (raw, json)
Hash identifier: I3DmmmH+dMgDS8WkhFkYQZJWNsW1Rmy4nb/V++B+7O8=
Subject key identifier: 83:8E:38:80:F9:8B:DA:F9:3B:52:41:70:45:F4:1E:E0:E7:84:A6:14
Certificate issuer: /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial: 0185BA53289DC611B1D19AA1BB14547FF290
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/g444gPmL2vk7UkFwRfQe4OeEphQ.roa
Signing time: Mon 16 Jan 2023 11:24:50 +0000
ROA not before: Mon 16 Jan 2023 11:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 194.59.8.0/24 maxlen: 24
194.59.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:53:28:9d:c6:11:b1:d1:9a:a1:bb:14:54:7f:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Validity
Not Before: Jan 16 11:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=838e3880f98bdaf93b52417045f41ee0e784a614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:02:af:bd:1e:b3:5a:c9:70:c9:7b:58:84:
22:08:45:ee:e5:a5:1b:be:f2:a3:ef:c8:fd:a7:d7:
54:45:52:3c:87:ab:40:55:a0:56:ee:90:e1:ff:3f:
56:9d:eb:bb:b7:f5:f1:51:7e:5e:48:44:c7:2f:de:
13:4f:68:a8:2c:cb:7e:6f:ea:34:ce:93:60:4b:35:
da:c5:50:87:52:53:36:a1:a9:ba:1e:d4:23:5c:96:
8e:b7:48:8b:64:f2:a8:d0:18:fa:7b:35:df:26:7b:
ee:17:0b:f0:54:31:ca:c2:63:73:fd:e0:a4:a1:ab:
77:10:86:37:4c:4a:e6:46:12:16:e8:0a:d6:69:b4:
c8:f3:c4:b4:32:a7:2a:b9:9f:b7:05:d0:fb:c1:77:
2e:bb:4c:14:3d:47:fb:83:6e:6a:a3:ef:98:c1:95:
93:0b:40:83:4b:cf:6f:36:45:ad:b0:fd:aa:0b:8a:
39:14:5a:2b:34:70:50:c4:1b:f5:83:e9:b9:21:ef:
71:ea:c9:b2:01:4c:eb:6f:08:4b:72:fc:19:5f:22:
40:d3:46:48:ec:f8:8f:63:c7:8e:9b:ed:ad:3d:03:
c2:17:b4:66:6b:3b:dc:12:22:b6:2e:75:35:90:91:
c4:88:3a:20:1c:1d:47:80:8f:05:2f:d9:ee:49:3e:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8E:38:80:F9:8B:DA:F9:3B:52:41:70:45:F4:1E:E0:E7:84:A6:14
X509v3 Authority Key Identifier:
keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/g444gPmL2vk7UkFwRfQe4OeEphQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.8.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:03:de:73:64:20:e5:0d:a1:78:e5:fc:64:97:18:de:11:75:
e0:70:c0:88:e1:1f:d2:40:16:95:ac:62:6a:62:6f:a1:7e:98:
ef:3a:78:6b:40:15:3e:01:de:66:3b:6c:5b:51:41:84:ba:00:
2e:65:8b:3b:1c:07:e8:cb:8b:ad:17:c2:7e:11:1a:87:e3:fe:
70:4a:70:fd:60:28:7f:89:3e:dd:e9:36:73:eb:7a:fd:bc:bd:
77:a1:0d:ca:86:42:c1:79:c9:5d:7c:7f:d8:46:05:c9:ba:8a:
be:53:de:4a:72:42:6a:95:5d:52:5c:24:0a:7e:19:a6:e8:74:
9a:f9:01:09:35:dd:c2:1e:dd:df:c7:d8:78:63:93:de:f0:62:
31:b0:cb:32:7b:ef:48:9a:93:05:a0:6e:16:cc:c5:1e:d5:19:
3a:57:c1:04:b9:d0:ae:8a:d0:0c:1a:ba:9d:7f:3e:d5:ae:88:
b6:a5:fe:39:d0:ed:b3:88:ab:13:0d:3b:59:c7:60:57:d7:1d:
bd:4b:55:d0:06:0c:a6:85:1b:2c:bc:8e:12:bc:67:aa:3f:57:
b6:00:66:fd:9f:ed:32:e1:ab:71:a1:a5:5e:89:3a:5d:8f:1a:
68:83:e9:72:b9:cf:65:11:6f:c6:02:fd:1b:ea:4f:9e:9e:33:
ed:5c:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-fra.rpki-client.org