Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aoXvW1y9kVLgKouqT0VexjpBebg.roa
File: aoXvW1y9kVLgKouqT0VexjpBebg.roa (raw, json)
Hash identifier: +XLFI/r52XF/QRpInnOjPJg80oUvnzJb+rkYtqHP0Aw=
Subject key identifier: 6A:85:EF:5B:5C:BD:91:52:E0:2A:8B:AA:4F:45:5E:C6:3A:41:79:B8
Certificate issuer: /CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
Certificate serial: 010B3429
Authority key identifier: 69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aoXvW1y9kVLgKouqT0VexjpBebg.roa
Signing time: Sat 01 Jan 2022 12:54:04 +0000
ROA not before: Sat 01 Jan 2022 12:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 94.247.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17511465 (0x10b3429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
Validity
Not Before: Jan 1 12:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a85ef5b5cbd9152e02a8baa4f455ec63a4179b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:b6:fe:9d:73:2e:35:ed:60:06:3b:9e:cf:
c9:47:cb:e5:94:3a:64:7e:79:a6:95:39:b3:81:97:
e6:e2:c6:7b:7c:47:c6:70:83:f0:cf:92:fb:09:f6:
98:08:ae:43:c1:cb:ad:1e:a1:d8:7d:a9:c5:49:e6:
17:66:32:4a:2c:d5:71:09:3b:c4:5c:02:a0:0c:f8:
49:b0:06:7d:1b:83:99:24:47:49:50:29:33:e9:fd:
c5:8b:f2:bf:a5:5e:84:87:3e:99:92:b4:a2:3d:8d:
38:56:06:48:39:e8:03:73:b1:f1:2d:16:0f:af:4f:
09:4b:a8:f4:29:bc:c6:ed:4d:25:a0:98:17:8c:29:
65:43:6b:fd:1c:5c:58:a4:ca:55:de:7e:cb:69:d4:
95:12:8e:ed:e0:c0:d9:e8:36:b1:7b:42:4d:6d:de:
74:44:7e:f4:77:e7:9b:cb:a8:aa:37:92:4d:4c:86:
10:fc:92:e2:9e:d3:5a:18:3f:ed:05:2b:07:b0:f8:
08:bf:4e:4c:3f:79:df:d6:17:50:89:97:aa:2a:61:
0a:b5:82:1d:e4:7c:df:08:ab:4a:22:ad:b3:ce:41:
d4:ec:7b:85:9c:f3:cc:4a:55:95:dc:ac:e3:c4:c7:
af:40:4f:65:36:51:06:d0:84:a5:6b:d9:ca:fd:24:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:85:EF:5B:5C:BD:91:52:E0:2A:8B:AA:4F:45:5E:C6:3A:41:79:B8
X509v3 Authority Key Identifier:
keyid:69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aoXvW1y9kVLgKouqT0VexjpBebg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aT37ir0rcFEviOrsWQP_ksrLUTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2b:79:9d:8f:07:40:ac:36:2c:74:e3:e0:1e:bb:39:ba:b2:
0f:54:04:e3:a5:f0:54:65:a6:df:db:e4:58:05:8d:0b:06:c6:
a6:89:25:4f:f9:51:82:36:f0:e0:88:bc:e5:0d:17:99:fd:23:
fd:cc:2a:5c:9d:c3:28:57:bf:fc:06:e2:a0:0a:fe:87:23:0d:
03:b6:d5:48:02:94:ac:d1:5b:61:7e:b7:a7:6b:f0:9d:67:be:
80:3b:2a:25:f2:c2:6f:84:3e:fb:f7:16:f2:a0:8c:9d:d7:af:
09:5b:84:51:9f:4b:78:71:b9:ad:fd:1f:2d:8e:c9:3e:29:d6:
d5:0f:63:20:15:55:4f:68:7e:fe:18:1b:0d:c3:f3:ad:79:26:
82:bf:74:14:23:20:b3:a8:cb:d5:b1:e7:74:5c:2f:89:e9:8c:
1a:8e:5d:d7:15:4b:98:db:12:57:ce:a1:f2:97:13:29:dd:3c:
64:7c:ac:75:56:37:01:53:6f:17:e7:f4:8a:e4:18:e6:d5:b1:
01:00:23:db:f8:6d:bd:ad:49:a8:a4:96:13:78:cd:eb:14:57:
c0:65:d8:32:ca:c8:e6:1d:33:83:36:e4:51:74:04:9b:b2:90:
ed:17:0c:40:a3:08:3c:ba:b3:77:77:ea:ee:3a:8b:a9:f6:7b:
d1:56:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:03 2024 by rpki-client on console-fra.rpki-client.org