Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/Vz_pDU_Xo8bVWNOnsREXIWMGk4M.roa
File: Vz_pDU_Xo8bVWNOnsREXIWMGk4M.roa (raw, json)
Hash identifier: SbS+i2jCgEE4nxwHiQAzeuIxcAZSEjoxm9JXbw8iAwo=
Subject key identifier: 57:3F:E9:0D:4F:D7:A3:C6:D5:58:D3:A7:B1:11:17:21:63:06:93:83
Certificate issuer: /CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
Certificate serial: 01856F42E5F3ECB3522D3981E27A992DF116
Authority key identifier: 7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/Vz_pDU_Xo8bVWNOnsREXIWMGk4M.roa
Signing time: Sun 01 Jan 2023 21:35:33 +0000
ROA not before: Sun 01 Jan 2023 21:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 94.247.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e5:f3:ec:b3:52:2d:39:81:e2:7a:99:2d:f1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
Validity
Not Before: Jan 1 21:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=573fe90d4fd7a3c6d558d3a7b111172163069383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:ee:6b:62:43:15:a2:45:e9:61:c4:f1:43:
81:8c:68:b2:93:94:45:d0:e5:1e:a9:95:fa:69:e9:
91:84:0c:d9:be:2f:56:7e:ff:a7:85:1b:c3:3a:32:
2c:6d:d8:85:7e:d7:c7:6a:41:cd:c4:61:81:91:dd:
7b:92:0b:3c:ff:65:21:87:f4:75:16:6c:ee:4a:2c:
dc:13:bf:9f:74:a2:69:89:4c:ac:c1:10:49:0c:48:
e6:24:c5:c2:db:01:bd:b6:41:21:a3:d8:b8:6e:2b:
f7:9a:2b:c7:d7:58:aa:6a:77:ba:1d:fb:e3:94:e4:
36:82:49:93:10:85:60:ca:9c:53:af:81:39:58:c1:
52:5a:e0:ab:1b:38:b3:c7:ed:00:53:35:e2:0b:7a:
33:13:77:b0:64:c5:0d:c6:e0:f4:f3:fa:d6:7f:31:
d9:d6:ed:55:27:9f:fe:62:ba:db:86:c5:1e:ad:74:
6b:2e:34:8f:07:19:7b:bf:18:2e:03:9f:8a:6e:19:
73:33:7d:be:e5:ae:a6:39:69:0a:40:c7:30:46:f0:
0d:b6:b8:25:03:60:f1:81:24:92:2d:9f:c6:3e:cd:
b2:06:30:96:d2:d7:24:33:2b:c1:05:5a:1e:b1:c7:
69:26:d4:de:20:6a:22:ea:2f:37:61:2b:be:4a:13:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:E9:0D:4F:D7:A3:C6:D5:58:D3:A7:B1:11:17:21:63:06:93:83
X509v3 Authority Key Identifier:
keyid:7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/Vz_pDU_Xo8bVWNOnsREXIWMGk4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.139.0/24
Signature Algorithm: sha256WithRSAEncryption
15:38:cd:6b:2c:8c:a3:43:ad:ef:9c:e4:e4:59:aa:dc:ab:4c:
23:6d:01:e2:bb:df:5d:1d:5b:05:37:8d:cc:4d:c5:33:84:d5:
4a:9d:2b:65:79:de:f7:55:91:9d:8d:f8:81:eb:e6:41:0d:61:
d4:a2:3f:e8:51:79:21:63:c3:18:67:85:cf:7b:13:b6:17:2b:
db:5d:3f:45:c4:39:db:89:33:f7:66:1c:40:a0:93:d7:28:b4:
e6:23:92:14:22:17:5f:ab:5f:f4:20:3a:ec:24:32:f1:60:f4:
de:85:34:cb:46:c6:7f:69:27:9c:36:5a:6f:92:9f:92:bf:c0:
d4:e2:8c:80:42:23:72:96:21:a7:99:fb:77:65:cb:af:9d:54:
3b:72:53:a5:9e:2d:11:a1:7c:4b:d9:9f:e8:37:88:30:b4:d0:
01:a2:02:76:d3:14:b4:d1:ae:61:83:6f:0f:16:b5:c7:ca:f5:
fe:8a:e0:b8:37:3b:b6:3f:ec:39:aa:2b:f9:19:78:d5:b2:cc:
3e:d2:7d:d7:84:bb:ef:46:74:06:24:29:13:9f:19:8f:f3:e9:
63:ac:77:7d:5a:b8:08:dd:97:ed:42:d2:0b:ac:30:8a:c2:c4:
3f:12:c3:f4:71:8f:bf:c8:34:04:33:2c:cb:db:18:dc:1f:0e:
1e:3c:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:11 2024 by rpki-client on console-fra.rpki-client.org