Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/PCijsJVFHiC47QPAo2P_dhoQlV4.roa
File: PCijsJVFHiC47QPAo2P_dhoQlV4.roa (raw, json)
Hash identifier: qo547NWRlqAmKhtHOM/BzX5Fte+ObwlhhJS5gqTwj4g=
Subject key identifier: 3C:28:A3:B0:95:45:1E:20:B8:ED:03:C0:A3:63:FF:76:1A:10:95:5E
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 0185A2CAE8321A10DD1F810684E5CDEF3402
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/PCijsJVFHiC47QPAo2P_dhoQlV4.roa
Signing time: Wed 11 Jan 2023 21:44:44 +0000
ROA not before: Wed 11 Jan 2023 21:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 194.147.44.0/24 maxlen: 24
84.252.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a2:ca:e8:32:1a:10:dd:1f:81:06:84:e5:cd:ef:34:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Jan 11 21:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c28a3b095451e20b8ed03c0a363ff761a10955e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4d:91:9b:6e:9d:5f:6c:34:45:5b:d4:cf:a2:
cb:a5:4b:a2:51:75:dd:55:6f:d6:df:d4:26:97:58:
d1:1c:4e:dc:f9:21:36:09:2a:d3:b5:ba:5c:bd:df:
96:c7:c1:87:e1:fd:8d:fe:4b:6c:82:70:97:82:bc:
cf:e7:0e:fd:65:5e:b2:59:88:ee:79:47:e6:6b:b9:
35:43:e6:ca:d7:8a:6a:ec:58:f6:a1:45:0a:ff:93:
fd:23:c6:db:61:19:b3:7a:7e:50:96:41:08:20:db:
f2:c9:72:db:71:64:3e:72:61:34:67:f1:b3:86:f8:
b2:71:21:d1:4d:2d:bf:b5:6f:00:ca:c2:c7:c5:70:
0d:1c:af:c3:a6:9d:14:79:2c:4e:2a:0d:2d:ca:f5:
20:5d:3a:91:ea:da:32:40:e1:d7:c4:f9:86:2b:fd:
de:a6:bf:8d:42:50:31:24:67:0f:a3:2b:38:a5:c3:
b2:48:28:6c:11:8e:17:fc:d5:b3:25:cc:ff:0e:20:
41:8c:28:e9:3b:98:6b:57:c6:e4:b6:26:e0:a4:2a:
19:85:13:e5:b9:f9:fd:21:f4:38:c3:7a:02:94:9e:
28:fd:1e:47:ad:af:58:5d:12:21:b7:65:52:df:0a:
83:87:d9:ba:e0:86:a6:8e:8b:9a:ac:4d:b3:d4:cc:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:28:A3:B0:95:45:1E:20:B8:ED:03:C0:A3:63:FF:76:1A:10:95:5E
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/PCijsJVFHiC47QPAo2P_dhoQlV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.112.0/22
194.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cf:48:3f:86:42:c6:16:29:bf:12:7c:d2:a0:36:a1:82:5f:
cb:0e:92:10:67:02:78:46:4d:21:f7:a6:ce:41:e5:41:80:cd:
05:03:65:c0:07:f2:cf:95:97:19:52:46:1c:22:d8:66:d9:4b:
a9:79:27:95:eb:9b:9b:f8:2e:68:50:d7:6e:b4:15:4e:7a:70:
14:cf:d7:46:a8:9e:64:f2:78:33:92:6b:32:11:3c:86:00:d3:
d4:ec:d9:77:2d:15:b1:95:da:ef:fe:39:23:44:51:94:71:12:
94:ff:64:3f:c0:f6:2c:2c:0c:69:d2:c1:f2:7a:cc:04:80:62:
fc:3d:81:a4:60:28:8d:63:52:5d:b1:c0:c6:de:1c:0a:9c:f0:
60:f9:40:23:70:25:8d:45:20:cc:48:f3:da:01:2e:aa:34:a2:
ce:cc:1a:09:f0:46:0a:d0:27:bd:be:85:2b:13:03:e4:21:e8:
d9:32:8c:6c:6e:7b:ef:6c:a9:18:69:ba:62:14:de:9b:de:62:
fe:26:9b:23:1c:82:94:f0:86:bc:37:71:a8:2f:c6:b8:f0:e9:
9a:9b:d0:7c:01:0e:ba:42:f0:b6:71:b5:cc:b5:d9:e1:73:7c:
77:7e:1f:19:bb:09:82:88:37:de:43:64:d8:0f:a3:bd:47:21:
9e:d4:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org