Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/U0kAzt-QpiYP6A5vl8eXyArw11g.roa
File: U0kAzt-QpiYP6A5vl8eXyArw11g.roa (raw, json)
Hash identifier: kNXDgp3AnmnEUCfuBA1Ug7Q1D1Pa/MtNFDSekSbv7qc=
Subject key identifier: 53:49:00:CE:DF:90:A6:26:0F:E8:0E:6F:97:C7:97:C8:0A:F0:D7:58
Certificate issuer: /CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
Certificate serial: 01856E6672184E648F35F7B440E82BD40620
Authority key identifier: 69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/U0kAzt-QpiYP6A5vl8eXyArw11g.roa
Signing time: Sun 01 Jan 2023 17:34:45 +0000
ROA not before: Sun 01 Jan 2023 17:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 94.247.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:72:18:4e:64:8f:35:f7:b4:40:e8:2b:d4:06:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
Validity
Not Before: Jan 1 17:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=534900cedf90a6260fe80e6f97c797c80af0d758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:fc:93:75:10:4d:09:0e:09:0e:a4:79:9c:
ee:db:f4:f7:45:c6:0a:5a:02:da:dd:be:d3:54:33:
71:95:8d:5b:cc:e4:c5:6c:2d:58:8b:a0:11:1b:31:
e1:dc:60:a6:11:50:10:95:80:ef:49:14:f9:9d:ea:
36:1c:14:b1:59:77:2b:55:be:aa:65:21:dd:fe:41:
21:d0:6a:95:38:75:c2:8c:a0:3d:c6:ea:81:23:0e:
ec:fb:20:c7:2a:ed:18:a3:65:9a:06:e1:5b:3c:ab:
dc:a4:4c:f8:93:5e:cd:f0:2e:1c:b0:71:db:38:83:
a9:af:19:b2:33:31:90:88:cb:cf:50:83:34:ba:c8:
eb:5b:bb:d6:ec:7f:70:ca:e4:60:00:ee:21:49:a7:
55:90:2e:7e:5c:4a:1b:d0:fc:50:0e:bd:64:ce:3a:
c6:f2:03:7c:20:7c:b1:07:96:57:d3:26:f6:b0:38:
23:87:b6:15:a8:bd:81:83:b8:13:89:e2:87:f9:d6:
7b:92:c2:08:aa:67:9e:f7:a2:c0:f6:26:b3:e2:a7:
a6:a9:85:9c:0e:d7:cd:e4:34:44:80:74:dc:2a:06:
44:f1:6f:b8:06:0b:26:56:f9:bd:8c:bf:e6:f5:46:
bd:15:0a:40:19:27:16:e6:dd:d6:a1:a3:ad:0e:6c:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:00:CE:DF:90:A6:26:0F:E8:0E:6F:97:C7:97:C8:0A:F0:D7:58
X509v3 Authority Key Identifier:
keyid:69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/U0kAzt-QpiYP6A5vl8eXyArw11g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aT37ir0rcFEviOrsWQP_ksrLUTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ce:57:58:82:06:8c:17:5e:be:9a:4a:fa:6e:d5:d2:44:85:
a5:55:e7:44:4e:d6:2b:32:ac:5f:f4:ac:8c:eb:0b:74:e2:ed:
1f:02:01:32:1e:de:4c:f6:d0:32:4e:d8:2a:02:be:3b:8e:9d:
41:b7:6d:5e:d0:c8:04:18:a2:56:9b:b7:64:4a:df:53:be:f7:
01:a9:cd:1b:40:1d:f0:d9:15:29:13:9b:1c:54:0d:8c:e6:62:
6a:e8:f0:1b:34:d8:d7:34:c0:92:52:c5:38:49:74:9e:65:0c:
24:b6:fc:65:3d:2e:be:54:8d:42:dc:82:60:ce:03:6b:5a:5e:
f9:3d:3b:87:df:3d:2a:e0:30:2f:47:58:6e:76:52:e2:12:a3:
ac:0c:49:06:12:3f:58:5d:39:c7:00:9f:24:a1:2b:ee:1a:f9:
e5:c4:f7:b4:5c:02:e8:69:39:45:16:2d:9e:ec:1b:74:4e:fd:
e1:d1:00:03:c2:d1:d2:f6:18:7e:69:af:81:5b:cc:10:2d:3e:
94:28:29:bc:01:48:79:bb:7f:f1:eb:87:8a:57:fc:84:2d:65:
d9:b4:f1:5d:5c:3a:3a:b1:4b:b4:0a:01:6a:c8:6e:5a:9d:20:
8d:f2:8f:fd:f5:4a:a7:8f:b9:53:de:4f:a9:73:ba:e6:e7:c5:
8e:1d:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:37 2024 by rpki-client on console-ams.rpki-client.org