Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/266990-8874-4d0d-a627-079bb20a99ff/1/38OLZryCjs1wPW8Am6RWdmiMSHA.roa
File: 38OLZryCjs1wPW8Am6RWdmiMSHA.roa (raw, json)
Hash identifier: ALDgKfijng7wAZ0S3YOGBJ3L90BI5k0FJpjI5wRHA/0=
Subject key identifier: DF:C3:8B:66:BC:82:8E:CD:70:3D:6F:00:9B:A4:56:76:68:8C:48:70
Certificate issuer: /CN=5626c962614686d15ce6ae9605546b633f27fa1f
Certificate serial: 0189654A8FCAE79E8352D2A35FA8F52C9CC8
Authority key identifier: 56:26:C9:62:61:46:86:D1:5C:E6:AE:96:05:54:6B:63:3F:27:FA:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VibJYmFGhtFc5q6WBVRrYz8n-h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/266990-8874-4d0d-a627-079bb20a99ff/1/38OLZryCjs1wPW8Am6RWdmiMSHA.roa
Signing time: Mon 17 Jul 2023 19:18:52 +0000
ROA not before: Mon 17 Jul 2023 19:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 94.124.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8f:ca:e7:9e:83:52:d2:a3:5f:a8:f5:2c:9c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5626c962614686d15ce6ae9605546b633f27fa1f
Validity
Not Before: Jul 17 19:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfc38b66bc828ecd703d6f009ba45676688c4870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:17:a6:0d:4e:e4:46:27:45:15:99:c6:09:
81:2b:f4:a5:b1:be:94:fe:c5:59:d2:05:f3:1e:58:
85:55:7a:2c:a9:a9:03:3b:4a:18:7c:0e:9d:f4:da:
06:d0:bd:f5:42:0f:34:67:14:23:d2:68:69:cf:9d:
fb:4d:d7:b0:34:82:8f:8d:43:49:fe:42:9d:09:bc:
39:eb:ce:ed:63:f4:5e:b2:76:c3:21:7f:9b:9a:9d:
22:ab:d8:db:71:7c:c6:70:6a:bb:91:d6:41:06:b9:
e4:98:e2:3d:88:f5:ad:c1:cf:fb:ec:dc:3f:3e:60:
a8:d6:71:6e:dc:02:92:81:93:e5:55:f1:60:8b:d8:
5a:bd:34:34:c9:fd:1c:9e:a0:b9:e2:5c:92:7d:30:
9a:8f:8f:14:ac:46:07:76:1f:e0:4b:c5:76:0d:d4:
aa:39:82:2a:69:d3:cd:dc:99:af:26:5b:a6:bc:6e:
fd:db:08:0c:1e:d6:af:cb:da:6e:65:f8:41:60:c8:
80:1e:d5:fc:28:a5:7d:0e:3c:f1:0f:01:a1:a1:15:
6e:86:06:a3:00:8d:ee:02:96:77:39:57:28:4a:63:
e9:b4:0b:7f:e7:70:05:58:ba:47:5d:b3:00:cf:78:
c8:24:6c:f1:2e:bf:12:33:07:f5:b1:60:af:71:50:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C3:8B:66:BC:82:8E:CD:70:3D:6F:00:9B:A4:56:76:68:8C:48:70
X509v3 Authority Key Identifier:
keyid:56:26:C9:62:61:46:86:D1:5C:E6:AE:96:05:54:6B:63:3F:27:FA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VibJYmFGhtFc5q6WBVRrYz8n-h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/266990-8874-4d0d-a627-079bb20a99ff/1/38OLZryCjs1wPW8Am6RWdmiMSHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/266990-8874-4d0d-a627-079bb20a99ff/1/VibJYmFGhtFc5q6WBVRrYz8n-h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.77.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2f:5f:b8:86:97:0c:08:1a:73:f7:fd:46:90:c5:50:4c:84:
5d:cc:70:b7:42:13:8d:f1:81:52:cf:98:06:9e:ca:1a:ca:f1:
4a:e1:01:18:fd:8b:cd:2a:0a:fc:1d:e4:5c:c8:9d:85:6a:b2:
7f:f5:d7:5a:bc:9c:25:58:8a:5f:14:5b:12:2f:d8:23:5f:59:
59:56:4a:c5:10:c8:24:52:dc:35:72:0f:e1:23:30:66:94:02:
ff:0d:77:88:6e:80:86:5b:35:8c:2f:a4:1a:2a:e9:e6:1c:ee:
ab:bd:66:e9:6c:09:b9:58:65:cc:0b:1f:e5:35:9e:ce:aa:94:
40:f7:a9:3f:88:a7:00:e1:68:4e:ce:85:c9:17:cd:08:57:75:
96:e3:9c:e0:6e:a9:74:2a:78:b4:d6:72:c5:11:a3:a4:b8:86:
11:4e:10:06:f9:0a:a8:32:e3:49:30:a8:f3:95:bf:03:bb:30:
4e:00:cc:30:dd:99:a1:d0:6e:c4:b1:0d:4d:a9:55:12:14:35:
a7:ab:ca:ab:93:72:ff:85:5b:8e:9e:7d:e2:5e:48:2b:ef:c4:
94:eb:eb:e0:88:50:49:5a:94:29:9c:37:ca:2b:7c:1e:25:4e:
cf:7f:22:e2:5f:4f:0b:50:64:a0:fa:17:4c:ee:86:e7:96:4e:
4f:69:1e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:19 2024 by rpki-client on console-ams.rpki-client.org