Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/T3-8Q8nt4yoZAfm3Ge0zt0_VqoA.roa
File: T3-8Q8nt4yoZAfm3Ge0zt0_VqoA.roa (raw, json)
Hash identifier: OjVofzoWdJOtCHw2bnszg2bSmShnKWDKFuirmGHe9/0=
Subject key identifier: 4F:7F:BC:43:C9:ED:E3:2A:19:01:F9:B7:19:ED:33:B7:4F:D5:AA:80
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 01856C0A43B47ECB654DC2CC1F5A33CC2CBA
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/T3-8Q8nt4yoZAfm3Ge0zt0_VqoA.roa
Signing time: Sun 01 Jan 2023 06:34:49 +0000
ROA not before: Sun 01 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.147.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:43:b4:7e:cb:65:4d:c2:cc:1f:5a:33:cc:2c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Jan 1 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f7fbc43c9ede32a1901f9b719ed33b74fd5aa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:64:14:e4:1a:a5:72:2c:fb:d1:34:83:65:
f0:71:45:bb:d8:87:a2:ac:89:d5:3a:64:3c:36:1e:
d6:2f:5c:79:ee:15:c3:3d:18:be:41:a2:66:ca:e2:
c7:b5:b4:01:d5:c3:93:86:f6:4b:55:9c:71:f2:50:
b7:e4:27:ff:40:cf:f7:d7:62:11:14:72:0f:c2:ba:
11:ca:3b:9b:ec:81:f9:fb:a9:9d:42:08:1c:60:9a:
6c:98:ad:cc:e0:23:0a:83:0c:bc:b6:59:ab:b6:d6:
f4:b7:f9:e4:1c:c0:a3:cd:1d:f9:9e:3e:7b:79:3c:
b4:dc:e5:f7:6c:8d:db:22:16:47:d9:3e:ce:11:dd:
ff:0c:07:28:95:b0:35:c9:9f:49:07:e3:3f:08:95:
3e:78:a0:c5:da:6d:a0:fc:0f:f9:8b:30:5c:e8:b7:
0f:9c:79:08:f5:cc:9f:7a:bb:3f:17:15:63:e8:61:
b4:1e:d9:b3:b6:5f:df:2c:1d:a8:b2:55:e8:40:45:
c3:35:17:9d:f7:b4:84:1b:01:95:f0:f2:51:b0:f0:
f7:cf:4c:7e:7a:fe:41:50:56:7c:c0:b7:ad:05:74:
89:78:7f:dd:80:9c:4d:94:17:1b:01:64:0d:54:0d:
f2:6e:1d:e4:7d:88:b5:37:b3:c9:0d:76:58:52:ee:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:BC:43:C9:ED:E3:2A:19:01:F9:B7:19:ED:33:B7:4F:D5:AA:80
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/T3-8Q8nt4yoZAfm3Ge0zt0_VqoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
85:82:df:18:e9:ff:6c:2c:a1:88:80:a9:49:91:09:90:38:a8:
b8:50:b1:01:7a:e5:c7:29:87:52:f5:bc:77:f0:ef:36:0d:18:
a3:7a:cd:44:1d:b1:73:d8:30:c1:df:7b:ff:1c:51:63:8b:dd:
fd:25:f8:55:87:41:e1:02:98:62:c0:34:a1:1a:56:28:d0:99:
55:f8:b2:8e:d5:e0:96:c6:a5:45:f6:86:52:95:84:03:fc:7a:
e7:9b:c4:8a:3a:aa:54:46:9d:a9:12:e8:41:39:5b:eb:86:4b:
3c:67:a4:61:56:c5:c2:71:d9:1f:43:a1:f3:e9:07:15:a0:28:
4d:39:df:6b:0f:5b:7a:b3:33:87:9d:20:77:bf:ac:bd:5d:75:
ea:51:b8:2b:88:a4:14:5e:31:81:1d:95:eb:40:33:56:ee:52:
a4:0e:66:0c:44:97:a9:7f:f6:54:05:75:3f:6b:a1:40:72:6c:
3f:4d:f4:7c:16:8f:08:3b:d7:e2:ce:8d:0e:27:ec:9f:6f:38:
4a:24:93:33:b0:46:a8:2f:98:cd:b3:ff:1a:75:d0:cb:52:e1:
83:a5:37:04:e8:a6:3d:07:d7:a6:f6:19:f5:c7:bb:24:d4:77:
a6:42:47:45:7a:d7:58:c8:2f:91:fd:6a:e7:93:9b:e0:38:7b:
4e:48:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-ams.rpki-client.org