Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/upuf-wzlFQEFeC5Q__4wiigCVOI.roa
File: upuf-wzlFQEFeC5Q__4wiigCVOI.roa (raw, json)
Hash identifier: 5jguoCcRQxx7qkm//KVgo7yKhbEvdUCMFn7TOaeEzWk=
Subject key identifier: BA:9B:9F:FB:0C:E5:15:01:05:78:2E:50:FF:FE:30:8A:28:02:54:E2
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 06FB5F84
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/upuf-wzlFQEFeC5Q__4wiigCVOI.roa
Signing time: Sat 01 Jan 2022 00:56:20 +0000
ROA not before: Sat 01 Jan 2022 00:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62000
IP address blocks: 194.147.47.0/24 maxlen: 24
194.147.67.0/24 maxlen: 24
194.146.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117137284 (0x6fb5f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Jan 1 00:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba9b9ffb0ce5150105782e50fffe308a280254e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:3d:a3:88:32:13:7c:2b:63:ee:07:73:ad:
ce:1a:5b:64:32:58:ed:cf:c7:5b:dd:fa:70:b7:3f:
ec:a0:a9:a8:53:93:a2:9e:b7:a2:52:53:0f:90:01:
dd:4b:50:b8:bb:47:7d:df:28:99:27:2a:e5:47:9e:
9c:c8:a8:14:d9:e9:31:29:29:55:5a:1b:72:30:02:
2d:89:2e:17:fa:2e:39:2f:28:86:e4:35:ae:6b:c3:
12:01:86:e4:6e:a9:57:e8:51:59:ac:31:d8:9e:10:
34:15:71:f9:51:ad:03:08:43:19:69:fb:4f:da:2f:
41:45:65:c2:3c:11:5b:15:b7:e2:bd:1d:cc:5c:07:
4a:06:78:b4:df:13:57:74:55:d2:d6:7c:91:58:c1:
71:4f:85:b0:12:7c:5d:36:5e:cc:42:cf:6c:1c:a0:
8e:19:8c:29:29:a0:e7:56:5f:02:58:40:ab:34:bb:
c6:a6:9c:58:41:3b:f4:fb:a3:fb:6e:48:22:3f:26:
f3:ae:b8:06:eb:94:ef:67:e3:6c:6a:f0:97:28:a9:
22:38:f5:92:69:68:c6:4c:22:74:e1:25:cb:45:49:
6d:f7:cd:1e:ad:8c:05:60:11:a9:98:6d:b3:31:2a:
70:87:2f:da:af:7e:83:8a:88:53:8d:8c:e9:15:b5:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:9F:FB:0C:E5:15:01:05:78:2E:50:FF:FE:30:8A:28:02:54:E2
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/upuf-wzlFQEFeC5Q__4wiigCVOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.126.0/24
194.147.47.0/24
194.147.67.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ec:0c:50:44:cf:54:d6:58:93:4b:73:8b:44:28:98:41:2f:
32:76:58:6b:0a:ae:c0:3b:6d:b6:76:5a:c1:2c:67:22:32:49:
08:cd:cc:97:24:d9:be:27:12:8e:e9:df:39:67:e9:f3:1d:53:
38:db:fa:2f:bc:d0:24:2b:d4:93:a2:32:8f:5c:53:89:b6:22:
c5:43:2b:f1:5b:be:45:66:38:0a:79:7a:e0:0a:b3:ac:07:4e:
2a:10:e4:8a:40:e6:c3:74:1b:88:af:a1:93:77:bb:84:16:26:
f6:d5:e0:d8:9d:4c:9e:96:d4:99:63:9f:ce:a1:4b:6c:c4:f4:
40:4f:28:78:8f:a4:11:28:b4:45:0f:53:71:96:3b:2e:90:b5:
52:b8:23:90:97:a9:02:3e:7d:5d:aa:ee:0d:19:10:f9:da:51:
22:23:02:ec:8b:37:48:b2:c2:59:6f:10:a0:8b:bd:70:42:90:
d0:57:8b:7a:18:c1:c1:f3:59:57:66:79:9a:2e:85:b0:34:0c:
9b:55:69:82:b7:4a:e9:7e:ba:61:42:97:82:2f:7f:b7:49:68:
99:48:6b:9b:6a:98:df:dd:0e:99:ec:53:46:d2:d4:2c:bc:36:
9b:12:1e:83:75:28:19:47:52:bd:4c:c5:63:77:24:e9:8e:13:
47:b9:3b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:35 2024 by rpki-client on console-fra.rpki-client.org