Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/l2ZqtyNkniuqgMIajHkltlHy55I.roa
File: l2ZqtyNkniuqgMIajHkltlHy55I.roa (raw, json)
Hash identifier: 28YL9owDvsFI1YlNiZ7XD+3g6fDW0tcW+uJ2zetVlkc=
Subject key identifier: 97:66:6A:B7:23:64:9E:2B:AA:80:C2:1A:8C:79:25:B6:51:F2:E7:92
Certificate issuer: /CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Certificate serial: 0187036250090602D71504DC6232DDF91186
Authority key identifier: 0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/l2ZqtyNkniuqgMIajHkltlHy55I.roa
Signing time: Tue 21 Mar 2023 08:56:27 +0000
ROA not before: Tue 21 Mar 2023 08:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209828
IP address blocks: 194.69.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:62:50:09:06:02:d7:15:04:dc:62:32:dd:f9:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Validity
Not Before: Mar 21 08:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97666ab723649e2baa80c21a8c7925b651f2e792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:f0:8a:8d:52:b5:46:72:39:aa:8e:f9:d8:
b9:0c:70:e6:c7:be:1f:04:06:c3:40:89:e2:9d:1d:
24:52:67:d4:34:6f:1c:57:ee:df:72:f0:9d:76:0f:
9a:46:0b:06:45:fd:51:c3:3d:da:aa:5c:c8:94:f4:
12:fb:4f:bf:52:2f:e4:07:f7:c6:00:9b:5e:b6:47:
b6:c8:a4:c0:8f:38:ea:80:fd:72:02:67:b5:4a:84:
52:1b:c2:fd:59:1a:79:40:34:1a:6a:9e:46:84:13:
3d:21:d7:85:e2:a3:45:99:dd:8e:69:a6:62:7d:c1:
5d:6e:5f:7e:0f:77:f1:9f:49:de:7f:62:7f:be:38:
ae:9e:6c:55:ed:d7:1b:ca:e1:c1:51:6f:24:aa:1a:
67:30:dd:32:1a:5f:9e:8d:48:9c:0a:af:09:ef:28:
1c:ad:b0:a9:aa:1e:40:84:77:39:92:f1:11:fa:73:
d7:32:e2:dc:ab:1e:a0:7d:75:05:b5:f6:d6:e2:d4:
5c:92:50:ba:2f:64:93:d6:bd:72:fe:64:4b:35:84:
5a:a9:23:d8:51:22:83:1e:21:c3:4e:35:63:0f:5f:
e7:6d:fb:0f:29:74:f6:a1:4a:26:30:65:d7:80:69:
5b:bf:4c:ac:4c:8c:0e:e4:ab:c5:40:59:74:bd:b9:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:6A:B7:23:64:9E:2B:AA:80:C2:1A:8C:79:25:B6:51:F2:E7:92
X509v3 Authority Key Identifier:
keyid:0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/l2ZqtyNkniuqgMIajHkltlHy55I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/Cqw4izfUR2j84Orsl95DP69yudw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7f:cc:5c:b2:51:c4:aa:e2:a4:cc:08:bd:aa:3a:78:38:8a:
20:33:cc:14:d0:ab:26:90:0e:e9:0d:8a:46:0f:55:f1:cf:55:
51:e7:c1:97:d7:cb:d1:a0:15:cb:89:2a:e0:9c:ec:b7:20:78:
ca:b4:64:47:0c:1c:ba:fe:ad:b0:00:03:53:d0:9c:92:47:75:
eb:75:39:dc:10:64:70:1f:ce:89:1d:d9:9e:67:a0:36:f4:23:
0f:3d:42:47:2e:8d:18:a2:e0:be:f3:b9:d3:38:e9:77:11:08:
37:26:5a:01:96:3c:32:15:e7:f3:73:fd:a4:aa:83:f0:de:3e:
81:cd:48:8f:99:e6:f4:c0:66:f1:e0:c9:3b:a8:d5:a9:67:b6:
cb:ff:7e:a1:7c:09:13:7d:9f:43:72:a0:8b:28:e6:9c:88:e5:
86:85:20:c6:d9:fd:89:d4:38:b9:e5:2b:0f:2e:cb:a8:87:a9:
bd:ac:87:0d:14:a2:b2:4c:75:4e:82:de:1b:59:04:42:42:f6:
29:4c:5e:ef:fa:a2:eb:59:a7:5e:30:f9:e4:d1:52:c5:78:8d:
4f:64:54:f0:45:89:b2:ee:1a:38:c6:06:bb:6f:04:be:80:58:
40:fb:ca:87:52:93:ee:c5:5b:e4:d3:20:42:ff:3b:88:24:c4:
d4:c8:45:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 07:41:06 2023 by rpki-client on console-fra.rpki-client.org