Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/77f84a-0c87-4eab-bf2f-03972ccce6c1/1/2SRKTzDhwbRSd_o29YUa1Vmnzg4.roa
File: 2SRKTzDhwbRSd_o29YUa1Vmnzg4.roa (raw, json)
Hash identifier: XKpqTNKRXiZVStnsDqh3CDuN676rlJr9CMEuEU1gSVc=
Subject key identifier: D9:24:4A:4F:30:E1:C1:B4:52:77:FA:36:F5:85:1A:D5:59:A7:CE:0E
Certificate issuer: /CN=532a146d89e626e507e7ef7963add35a6eb72352
Certificate serial: 018570B073578128B0A0A6B0298A653D7AF0
Authority key identifier: 53:2A:14:6D:89:E6:26:E5:07:E7:EF:79:63:AD:D3:5A:6E:B7:23:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyoUbYnmJuUH5-95Y63TWm63I1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/77f84a-0c87-4eab-bf2f-03972ccce6c1/1/2SRKTzDhwbRSd_o29YUa1Vmnzg4.roa
Signing time: Mon 02 Jan 2023 04:14:50 +0000
ROA not before: Mon 02 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 194.63.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:73:57:81:28:b0:a0:a6:b0:29:8a:65:3d:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532a146d89e626e507e7ef7963add35a6eb72352
Validity
Not Before: Jan 2 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9244a4f30e1c1b45277fa36f5851ad559a7ce0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6b:dc:5f:ce:11:8f:fd:cd:d6:7e:0d:24:4a:
7d:5f:f5:1b:0b:d7:38:0b:a8:8c:72:d6:b4:1b:8b:
9b:98:db:c2:9d:51:e8:47:0f:5b:73:f5:4e:9c:ae:
f5:e2:12:9c:e3:12:3d:42:21:0c:71:90:ee:a0:af:
1d:4d:6f:38:b7:55:93:f7:77:71:4c:f8:f3:9c:52:
ac:2b:50:89:8e:89:f9:c5:c0:24:4e:c9:ff:72:10:
56:66:33:ce:54:fa:1c:0a:ec:07:26:3f:13:39:08:
a0:59:d4:aa:a3:f1:10:d8:d0:b7:57:62:3f:2e:e6:
d0:4d:25:3c:1f:a8:f6:f2:a5:66:6d:52:85:f2:ad:
07:49:9f:24:5c:8e:ec:62:cb:bc:af:f3:ac:d7:32:
b2:48:53:b2:ed:1d:9a:15:3d:90:74:2c:e7:c7:26:
ea:a1:01:f1:84:ee:5f:cd:1d:ed:32:88:72:d9:2f:
b7:b3:e4:c9:33:4e:38:b5:2e:00:41:6c:9c:0e:f4:
a9:b0:91:30:49:7c:4a:03:cf:32:0a:19:fd:db:ef:
95:09:e1:e3:69:df:b8:74:49:c5:db:8a:e9:25:16:
01:9f:f1:ba:96:73:da:55:f9:3c:00:b1:ae:30:d1:
08:ac:0b:e9:2e:f8:f8:8c:1c:48:df:a4:36:33:1e:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:24:4A:4F:30:E1:C1:B4:52:77:FA:36:F5:85:1A:D5:59:A7:CE:0E
X509v3 Authority Key Identifier:
keyid:53:2A:14:6D:89:E6:26:E5:07:E7:EF:79:63:AD:D3:5A:6E:B7:23:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyoUbYnmJuUH5-95Y63TWm63I1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/77f84a-0c87-4eab-bf2f-03972ccce6c1/1/2SRKTzDhwbRSd_o29YUa1Vmnzg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/77f84a-0c87-4eab-bf2f-03972ccce6c1/1/UyoUbYnmJuUH5-95Y63TWm63I1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.63.145.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a0:0c:19:e1:bd:85:81:4a:22:e5:ab:4a:13:f3:b7:af:b9:
7d:5f:6b:31:75:9f:15:84:58:ee:27:a5:7b:c2:7d:7f:2d:8c:
4e:b1:53:d2:94:de:b0:59:e0:63:53:b9:53:25:7e:5e:99:13:
02:b2:e8:eb:c3:9f:9a:36:a1:a6:15:4d:15:36:44:4a:41:28:
24:72:af:e3:3f:62:3e:45:e8:75:f0:d8:9f:6f:07:7f:ca:e9:
4a:96:04:ff:07:7a:c9:8e:a6:4d:81:b7:d7:20:b4:a0:bf:ef:
6c:7c:38:70:fb:50:bc:d4:1f:34:22:dc:fb:e3:23:0e:c7:2e:
31:50:3a:2a:da:3f:16:1b:3e:13:9c:48:cf:c0:51:fd:55:64:
fb:9b:54:b1:c5:1c:31:0b:ab:92:59:14:53:e5:a1:2c:b0:ae:
1f:db:a8:a8:11:da:2a:84:ab:c4:28:e6:24:68:a2:aa:9d:f1:
61:fc:e1:83:9d:c7:6b:b2:ef:e5:9d:f9:ae:ac:cf:77:57:68:
e4:4b:db:1c:f8:fb:71:d1:bb:56:bc:51:f1:4f:c9:25:07:42:
05:51:f0:0c:ae:1f:08:69:8e:34:39:ee:a6:02:8a:bd:a4:95:
96:34:1a:31:66:92:83:e7:af:09:ad:41:e1:df:e9:2f:28:0f:
e3:88:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:21 2024 by rpki-client on console-ams.rpki-client.org