Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/0A0x92zCUywq-idifWcesGUnNWE.roa
File: 0A0x92zCUywq-idifWcesGUnNWE.roa (raw, json)
Hash identifier: Qnd/qVYZ9yonR46fmHc0cqmG4uxWR5T4aSC7RXp4OXw=
Subject key identifier: D0:0D:31:F7:6C:C2:53:2C:2A:FA:27:62:7D:67:1E:B0:65:27:35:61
Certificate issuer: /CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
Certificate serial: 01856EAFA35C1CABF66F3A6B3D340DA69F49
Authority key identifier: 94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/0A0x92zCUywq-idifWcesGUnNWE.roa
Signing time: Sun 01 Jan 2023 18:54:42 +0000
ROA not before: Sun 01 Jan 2023 18:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43851
IP address blocks: 195.114.14.0/23 maxlen: 24
195.114.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:a3:5c:1c:ab:f6:6f:3a:6b:3d:34:0d:a6:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
Validity
Not Before: Jan 1 18:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d00d31f76cc2532c2afa27627d671eb065273561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:39:69:17:8c:04:31:f6:24:97:23:b3:5a:
4f:c5:f0:f3:ff:8b:ec:05:fc:1e:0b:1d:68:8d:4f:
28:04:18:01:91:5a:87:af:c0:f9:c8:b5:84:ba:d6:
fb:60:77:5f:17:90:33:45:98:0b:e2:10:5c:e7:4c:
de:af:69:b0:35:93:36:c5:c6:15:d4:c8:1d:17:13:
6c:1d:94:dc:6d:7b:2a:6b:ef:23:f0:be:0a:20:a6:
b2:ca:0f:0d:cb:01:d1:5a:74:49:d7:1b:38:8c:cb:
c4:ce:37:a2:7c:8b:5f:be:30:6c:94:1e:ac:c9:6f:
c1:76:42:b6:e1:47:6f:1a:55:db:e7:56:a5:d6:13:
6a:66:ba:e6:f0:60:c4:04:59:c9:62:57:97:c9:30:
98:36:f5:71:7c:6f:60:c9:a2:f5:81:10:f7:ab:6f:
a0:ae:f0:96:66:96:73:18:b2:20:a5:52:42:e2:41:
c7:d2:11:df:a9:3e:85:5a:c4:ca:50:d3:db:94:20:
ca:9d:d2:7f:68:5f:9f:7d:9a:eb:3c:e0:e0:24:7d:
ec:56:93:d2:7c:d2:fe:76:c4:93:d0:17:ea:78:bc:
72:e4:d4:a4:ff:cd:ac:b2:85:23:ae:f3:e9:6c:63:
b8:f1:a4:00:62:28:4d:f0:98:13:92:39:19:f9:1e:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0D:31:F7:6C:C2:53:2C:2A:FA:27:62:7D:67:1E:B0:65:27:35:61
X509v3 Authority Key Identifier:
keyid:94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/0A0x92zCUywq-idifWcesGUnNWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/lGjkm7lTCtsIRMOGDdfvXNjkofg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.14.0/23
195.114.126.0/23
Signature Algorithm: sha256WithRSAEncryption
43:70:fd:a9:b5:54:c3:2b:6a:8a:00:d8:22:ad:75:c6:21:55:
c3:4a:6f:6c:aa:e8:67:74:be:fb:e2:b2:cd:79:ab:bb:94:c4:
e1:cf:9f:b7:20:04:3c:31:89:1e:f4:dd:48:fd:21:71:a1:e1:
ae:b0:f9:0b:5f:8d:0e:1f:0c:10:41:e6:d0:4f:fc:5b:1e:aa:
10:d8:fb:7f:53:d3:6d:c2:56:b2:ca:a8:f6:80:c4:12:55:71:
c3:8c:57:b2:8b:68:db:5b:14:ab:4f:74:94:03:dd:af:62:72:
7f:eb:d0:af:33:05:c0:3b:47:96:4b:96:c1:c7:8e:4c:89:f2:
0e:64:2c:48:7e:46:c5:5c:b0:90:ae:b1:bb:89:00:93:63:0e:
b4:36:65:34:d1:55:e1:4d:9d:7e:71:5c:d5:a7:1c:45:da:18:
05:57:c1:9c:3a:db:61:95:37:f4:82:5b:85:97:93:76:e5:15:
4e:6a:e4:1e:b5:6c:60:3e:52:25:63:19:b5:6b:fc:cd:bd:10:
0c:12:58:e4:6b:57:4f:94:0e:bb:2e:e8:90:e1:31:f5:05:d3:
31:2b:6d:21:36:58:5f:de:58:25:fe:ee:de:bc:0d:54:05:8a:
73:c3:53:94:d0:d4:22:5e:8a:15:da:a4:dc:f4:d9:09:cf:d6:
bf:6e:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:00 2024 by rpki-client on console-fra.rpki-client.org