Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/ukURrdYtp7bUN794LAdkKSV77xA.roa
File: ukURrdYtp7bUN794LAdkKSV77xA.roa (raw, json)
Hash identifier: 1GQGLXrmvyG6ZSr7ke5uiuBHPBgm8QS4Ue30tPQKDaU=
Subject key identifier: BA:45:11:AD:D6:2D:A7:B6:D4:37:BF:78:2C:07:64:29:25:7B:EF:10
Certificate issuer: /CN=34d4debf87f67cbb442373817e7d62f758a59acd
Certificate serial: 018571A7BE3B4B172B353F74B8925AAA7AE4
Authority key identifier: 34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/ukURrdYtp7bUN794LAdkKSV77xA.roa
Signing time: Mon 02 Jan 2023 08:44:56 +0000
ROA not before: Mon 02 Jan 2023 08:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 94.143.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:be:3b:4b:17:2b:35:3f:74:b8:92:5a:aa:7a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d4debf87f67cbb442373817e7d62f758a59acd
Validity
Not Before: Jan 2 08:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba4511add62da7b6d437bf782c076429257bef10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a7:03:b5:a9:5c:bd:28:12:c0:73:9b:0f:11:
c8:d1:55:cc:a4:86:e6:aa:4b:78:e2:17:03:a4:42:
7b:47:85:9e:a9:9e:c1:8e:cb:34:5e:86:31:22:00:
f0:ae:e7:b3:cb:20:dc:7d:05:70:c0:a2:ae:e7:68:
cd:97:c0:76:fb:2f:1c:f5:e9:51:9a:37:d7:86:31:
fb:ee:8e:bd:25:8c:c1:f8:0d:d2:fa:18:85:45:c7:
fb:ae:2f:ef:a1:c6:1a:4a:7b:ed:c7:7c:56:8d:9a:
c4:c2:c3:52:c5:90:0f:68:a9:b1:b2:12:5b:a1:2d:
d0:9a:e1:74:81:4e:f3:47:38:88:12:6a:b5:92:e9:
71:60:11:08:50:b8:90:04:90:b7:96:4d:5b:f5:f8:
8b:85:8b:28:df:fb:81:9e:13:40:c5:ce:2c:ed:db:
22:4b:8a:c7:73:4d:7b:24:96:89:c8:8e:76:06:49:
3d:04:4b:93:56:c9:d5:6d:05:75:f3:1c:45:df:3b:
8e:b7:21:c9:f2:83:ed:7e:20:6b:7a:8d:7c:d6:75:
16:e8:7d:99:29:50:be:2d:13:f3:6e:17:16:6e:18:
ed:d8:98:7e:18:3f:55:9c:04:68:c7:1c:3b:ce:2a:
a7:12:e6:19:dc:f5:ae:c4:29:75:0a:d7:53:2f:9d:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:45:11:AD:D6:2D:A7:B6:D4:37:BF:78:2C:07:64:29:25:7B:EF:10
X509v3 Authority Key Identifier:
keyid:34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/ukURrdYtp7bUN794LAdkKSV77xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:33:bc:0f:43:78:99:39:e3:bf:eb:5f:c4:22:37:bc:4f:53:
ef:5d:ca:46:8d:f5:48:51:39:f7:4b:c2:df:48:b6:82:79:4e:
0d:9d:78:d7:80:1c:d4:86:e9:3e:63:17:3d:31:d1:f6:92:fb:
19:2d:16:ad:e7:7f:97:68:0b:62:6c:b0:bf:07:b6:ed:6d:73:
78:54:b0:e7:b9:25:01:5b:b1:8a:ce:d8:50:dc:80:a8:02:f8:
c7:25:c6:43:8a:b7:ca:ad:77:33:82:46:10:76:99:0e:07:4a:
6d:20:df:fd:e0:b2:52:63:f1:d7:61:8a:86:2e:13:76:7f:03:
50:f9:50:04:5e:72:6f:9a:89:4d:82:c4:8e:35:9f:7b:16:08:
25:9f:ac:54:74:6e:a9:7b:5d:73:5b:dd:e3:c1:90:a3:17:3b:
5c:70:50:85:4d:a4:33:c6:43:e0:72:be:c8:52:dc:0c:38:5f:
82:77:c8:ae:8f:6e:8c:30:97:4d:e0:da:f9:99:27:a6:eb:09:
ac:96:49:6a:90:ff:87:46:fb:5e:61:c4:05:e4:a6:c9:94:db:
3a:28:a7:ee:c5:34:b0:d3:ec:36:57:bc:3f:ac:2b:be:26:c9:
0f:d9:b6:68:64:9e:3e:7f:5f:59:a1:ee:91:29:9b:52:d1:2e:
bb:6d:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:31 2024 by rpki-client on console-fra.rpki-client.org