Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/bUUquC97x2MKNErf9ugdjMCtRVU.roa
File: bUUquC97x2MKNErf9ugdjMCtRVU.roa (raw, json)
Hash identifier: 4v7tFTz878dSfycM4sEqp4lHHDl3yjM8HxLfD/xWbfw=
Subject key identifier: 6D:45:2A:B8:2F:7B:C7:63:0A:34:4A:DF:F6:E8:1D:8C:C0:AD:45:55
Certificate issuer: /CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
Certificate serial: 01869C88A27182EE0CF371BE79765D96ED85
Authority key identifier: 7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/bUUquC97x2MKNErf9ugdjMCtRVU.roa
Signing time: Wed 01 Mar 2023 09:37:25 +0000
ROA not before: Wed 01 Mar 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39486
IP address blocks: 94.247.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:88:a2:71:82:ee:0c:f3:71:be:79:76:5d:96:ed:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
Validity
Not Before: Mar 1 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d452ab82f7bc7630a344adff6e81d8cc0ad4555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:67:db:bf:00:29:de:da:d9:11:d8:28:77:
8c:31:65:98:1c:80:ab:72:69:c6:81:55:54:d2:97:
0a:41:03:5f:b7:e3:84:ac:19:31:cd:b0:bd:b3:f0:
ae:d2:cb:93:25:87:7c:15:9d:11:fa:2d:13:31:98:
db:26:5b:41:79:94:53:2f:aa:1d:41:0a:6d:a8:91:
93:ba:41:ac:87:d2:8f:21:07:df:f7:95:35:ba:cf:
87:f9:ae:4a:cc:ae:cb:37:0c:58:8a:88:7d:32:ab:
17:f7:e3:b3:78:0f:ee:97:0e:53:6d:40:18:46:45:
38:62:8d:5c:b1:7a:50:4b:fe:08:88:96:8a:e9:a9:
28:51:49:9d:bc:21:0c:0e:89:f2:8a:5c:ff:2d:24:
51:7e:fe:36:e7:3d:e5:47:3d:bf:9b:e3:3d:65:b1:
98:ee:93:58:95:f0:51:81:a1:fc:a4:16:95:ed:1a:
f1:59:f2:2a:07:92:d4:70:d1:31:75:23:cc:40:47:
d5:68:ff:72:59:0c:63:da:75:7d:b4:89:ec:24:b8:
2b:72:95:c1:31:ec:15:f7:30:72:f9:d9:22:c1:0a:
05:31:9b:64:58:06:23:5f:25:04:b5:c6:09:34:d3:
20:7d:75:22:95:ab:9c:16:6b:1e:2b:0e:7d:f3:a2:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:45:2A:B8:2F:7B:C7:63:0A:34:4A:DF:F6:E8:1D:8C:C0:AD:45:55
X509v3 Authority Key Identifier:
keyid:7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/bUUquC97x2MKNErf9ugdjMCtRVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.139.0/24
Signature Algorithm: sha256WithRSAEncryption
40:df:fd:78:b3:d0:d5:f4:62:7f:7f:ab:75:e3:01:34:e7:c5:
02:a2:1e:29:4e:df:60:35:8d:0f:9d:3a:5f:54:98:3c:e5:27:
ea:9d:ad:05:82:39:b7:d2:c3:31:aa:4a:5e:ac:cc:e8:6d:28:
43:81:51:d1:fb:d6:3f:36:70:a4:74:4d:c2:db:f2:2c:0f:1a:
e9:78:b4:0b:6a:34:08:94:a0:dd:86:e9:58:6e:66:c4:ae:03:
a3:66:9f:84:87:89:a2:58:97:4e:c3:d9:d0:82:33:dd:f9:0c:
99:8f:74:6e:8c:11:16:a2:8c:58:56:08:53:d3:25:8e:a8:4e:
c1:8b:72:11:47:21:c8:88:af:33:fd:47:b5:77:09:6d:70:b7:
78:5a:b9:6e:3d:ed:74:50:63:d6:e6:6a:0f:1d:fe:f1:2b:82:
2d:5b:a9:7d:ab:4d:7b:7b:2d:f0:f7:89:b2:25:f1:f4:9d:4e:
83:24:f1:0f:ea:a8:2d:6e:8e:74:f2:89:f9:8c:d4:3f:7b:6d:
a3:f0:60:f5:e8:c5:23:0c:eb:5d:1b:7c:a6:bc:bb:cc:ae:49:
70:cd:af:74:2c:48:28:29:d9:1e:89:a2:e6:27:58:6a:45:71:
f1:f7:1b:32:77:f6:21:7b:f1:c6:f2:41:0e:bc:e1:30:f1:8b:
54:ba:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:11 2024 by rpki-client on console-fra.rpki-client.org