Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/keZZD_Ko7UGiqATpxTSO8b4wFOE.roa
File: keZZD_Ko7UGiqATpxTSO8b4wFOE.roa (raw, json)
Hash identifier: KQOU/WwqQMB0hbF7+h0gynLAacDe1yts+zodgc3PcBA=
Subject key identifier: 91:E6:59:0F:F2:A8:ED:41:A2:A8:04:E9:C5:34:8E:F1:BE:30:14:E1
Certificate issuer: /CN=6ecf2d3d727f4affac30faa6d0572294ad42cc9b
Certificate serial: 0184A3B8AF13F22BE8E8E025423982F34DCF
Authority key identifier: 6E:CF:2D:3D:72:7F:4A:FF:AC:30:FA:A6:D0:57:22:94:AD:42:CC:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/keZZD_Ko7UGiqATpxTSO8b4wFOE.roa
Signing time: Wed 23 Nov 2022 09:01:40 +0000
ROA not before: Wed 23 Nov 2022 09:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48146
IP address blocks: 194.36.104.0/22 maxlen: 24
185.209.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:b8:af:13:f2:2b:e8:e8:e0:25:42:39:82:f3:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecf2d3d727f4affac30faa6d0572294ad42cc9b
Validity
Not Before: Nov 23 09:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91e6590ff2a8ed41a2a804e9c5348ef1be3014e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:43:48:75:35:86:ea:da:c0:fa:88:ba:3c:
1e:fe:70:5d:98:96:34:3e:fa:eb:96:c7:c4:78:b6:
64:8b:e0:82:31:3a:ae:79:e7:d5:66:8a:e6:e5:f8:
79:7d:3d:47:1a:6d:e1:94:8f:72:db:6a:37:be:fa:
0d:f1:ca:4c:3c:97:83:74:10:02:a9:7f:e3:7b:3e:
6a:4c:3e:08:3c:b6:db:a3:0d:c4:e5:0a:8d:12:a0:
60:9a:26:f4:63:32:bd:87:96:5e:da:ad:1e:c0:32:
d2:cb:d6:1e:fd:71:ee:86:65:4d:0f:64:cb:0f:e5:
69:78:ab:cb:f6:a2:7a:0a:37:c6:96:a2:cf:9b:ec:
41:42:64:14:63:b7:13:a3:b9:35:e7:27:1e:5e:b0:
c0:ff:bd:ce:98:d8:d8:46:5d:40:ed:a8:3b:fa:c5:
cd:15:62:18:5b:ea:ff:57:fa:3b:68:5b:3f:bb:e9:
d5:43:fc:aa:83:df:35:ad:8b:a0:a9:7d:80:ed:ac:
1d:96:4d:27:a3:73:57:23:3b:58:a2:02:4e:3d:90:
3d:29:ff:e6:a4:1f:72:66:92:e2:07:d6:4d:92:fa:
bc:5b:73:0c:19:0b:80:d2:cb:64:8f:3d:1d:56:85:
cd:4e:be:72:be:2f:42:e4:e0:1b:f9:b1:8f:2c:8e:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E6:59:0F:F2:A8:ED:41:A2:A8:04:E9:C5:34:8E:F1:BE:30:14:E1
X509v3 Authority Key Identifier:
keyid:6E:CF:2D:3D:72:7F:4A:FF:AC:30:FA:A6:D0:57:22:94:AD:42:CC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/keZZD_Ko7UGiqATpxTSO8b4wFOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/41c170-eb39-4750-bed3-f9c749dd4b48/1/bs8tPXJ_Sv-sMPqm0FcilK1CzJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.8.0/22
194.36.104.0/22
Signature Algorithm: sha256WithRSAEncryption
21:59:9e:81:0d:5d:f8:2d:db:28:2d:55:68:ba:b4:ae:c0:a2:
93:70:44:32:3f:a3:22:c6:c1:ec:eb:49:e8:34:2b:73:aa:80:
98:e9:cf:da:ed:81:42:75:12:c8:e2:aa:a4:bb:d7:7a:33:22:
a5:bf:78:c4:30:90:f6:b7:f2:65:48:35:23:7c:d2:b7:a4:d6:
66:ad:33:64:39:3c:5d:3e:9d:0f:7f:63:8c:55:82:58:c0:0f:
57:0f:d4:9e:da:2b:1f:ea:7c:30:72:8a:3d:bf:a8:2d:d5:54:
d6:49:78:f4:5e:50:11:e7:1e:01:e2:36:32:ca:b1:7b:29:10:
5e:78:cf:c0:ed:7b:db:74:a3:d0:4c:9f:81:0a:ee:28:8f:9b:
3f:7e:74:d6:93:6a:d4:38:5e:9d:2b:8d:df:2a:71:31:8a:7e:
da:c5:d8:bb:0e:9a:67:f2:a4:2a:c5:33:92:e5:b9:f2:ed:f1:
df:d1:be:9e:12:23:8a:2a:33:ba:21:32:f8:72:cc:a8:33:8b:
21:22:9c:e0:2f:6a:4d:e2:1d:50:60:8b:28:1a:69:1c:7f:50:
31:e9:04:40:74:48:29:bf:22:dc:48:3d:c9:48:b0:4c:f1:03:
e5:db:e8:76:b5:c5:10:aa:46:e3:77:6c:ae:06:eb:64:80:be:
23:de:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:02 2024 by rpki-client on console-fra.rpki-client.org