Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/tLMP8PFVH2SknrBHK4v2fV6wUbc.roa
File: tLMP8PFVH2SknrBHK4v2fV6wUbc.roa (raw, json)
Hash identifier: OkkvRXd7xIeD8icufOurNe6lfBvedXnAUB/MMSXNd9o=
Subject key identifier: B4:B3:0F:F0:F1:55:1F:64:A4:9E:B0:47:2B:8B:F6:7D:5E:B0:51:B7
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 06F7AD0F
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/tLMP8PFVH2SknrBHK4v2fV6wUbc.roa
Signing time: Sat 01 Jan 2022 00:56:19 +0000
ROA not before: Sat 01 Jan 2022 00:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 194.147.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116894991 (0x6f7ad0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Jan 1 00:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4b30ff0f1551f64a49eb0472b8bf67d5eb051b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:2b:c6:be:dc:5c:7b:8c:07:dd:89:e6:c7:
bb:78:32:47:66:31:ec:ec:b9:9e:22:a4:ed:8b:17:
df:c1:b8:4f:b2:bb:ef:8d:30:32:a6:e9:24:3d:f1:
df:bd:1b:d1:58:b7:10:ea:b8:a3:eb:ef:b5:f4:15:
df:ae:6b:22:bf:e1:e4:03:f5:5e:00:e7:84:1b:aa:
e9:81:ce:8c:50:ff:e7:2f:77:60:0b:fc:3f:94:28:
60:b5:9d:b7:ea:91:2f:9e:a8:8e:1b:56:8d:06:d8:
14:2d:ec:49:da:20:c5:cc:5a:8d:64:2e:f1:52:f9:
f0:70:ab:98:09:ca:3e:77:15:90:b7:36:9e:aa:15:
1d:ff:0d:b3:cb:be:68:53:87:4b:44:54:89:51:50:
e2:08:ff:e5:a8:79:c5:72:a9:c2:cd:0d:01:62:4c:
9a:4a:77:5c:ff:1f:b8:ad:cf:3d:23:73:45:b4:63:
d4:81:58:10:c3:7a:c1:8a:e8:19:b3:50:18:ed:3f:
bf:1f:51:01:62:d2:1e:62:3b:c2:95:6c:41:e0:71:
cb:14:47:70:ee:e4:ef:56:4d:9a:0a:16:62:e8:d8:
20:4f:29:09:4a:8e:11:20:fb:fc:16:40:47:f8:cb:
2e:59:98:b0:6d:f3:44:a9:f5:b7:5f:98:b4:23:ca:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:0F:F0:F1:55:1F:64:A4:9E:B0:47:2B:8B:F6:7D:5E:B0:51:B7
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/tLMP8PFVH2SknrBHK4v2fV6wUbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:29:53:12:8f:bc:0e:78:dc:b5:bc:4c:09:10:7d:26:9d:dc:
83:28:b7:18:65:06:58:77:bf:9d:fe:fd:4f:25:ec:da:15:e4:
12:26:25:67:30:39:a8:3c:56:32:42:fb:bf:6f:f7:3a:e5:43:
af:94:fa:1e:ff:05:5a:cd:42:b4:47:9e:48:03:b5:4e:55:04:
fa:b3:dc:72:e1:a3:fc:df:7e:62:39:c2:af:f0:ed:a1:e0:ad:
9f:2b:da:5f:94:07:41:08:b7:dd:76:c1:51:c5:d7:31:d7:bd:
bc:8f:7d:f8:ca:c7:03:da:9c:43:a0:d6:bb:a2:c4:6b:6f:30:
88:f5:fc:b9:99:48:76:ac:79:2d:f3:02:d7:b5:6d:5d:62:2b:
56:02:42:15:04:0a:6e:31:fa:ff:51:19:bf:8a:2e:ca:dc:98:
0f:7a:1b:36:52:c7:7f:fb:11:de:7b:2e:41:e8:46:45:b9:52:
f9:2b:ab:bd:88:02:27:f6:4e:7b:24:32:51:97:be:9c:c5:50:
3c:c7:46:34:04:70:17:d9:8b:f1:8d:01:9a:aa:f3:e6:a3:bd:
45:b3:d7:0a:b2:99:13:b6:7e:a1:92:90:d7:9d:92:bd:c7:63:
10:44:93:2a:23:1a:fd:3a:ce:f5:c6:b7:36:d6:99:bb:cc:82:
b2:b9:ae:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org