Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/VUOFRWkj09_9xO4F0QqKsNbkWNg.roa
File: VUOFRWkj09_9xO4F0QqKsNbkWNg.roa (raw, json)
Hash identifier: rRa50aNfqD+t+vV8L5CJx7rkc5R7huRxlUKqNwnRI0o=
Subject key identifier: 55:43:85:45:69:23:D3:DF:FD:C4:EE:05:D1:0A:8A:B0:D6:E4:58:D8
Certificate issuer: /CN=057c6f47bc3099a4ec86bec29605269140ad7319
Certificate serial: 018572E82CDA6857A98C31CBCD1426508236
Authority key identifier: 05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXxvR7wwmaTshr7ClgUmkUCtcxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/VUOFRWkj09_9xO4F0QqKsNbkWNg.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 194.99.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2c:da:68:57:a9:8c:31:cb:cd:14:26:50:82:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057c6f47bc3099a4ec86bec29605269140ad7319
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554385456923d3dffdc4ee05d10a8ab0d6e458d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:e3:4a:d8:76:fa:ae:64:62:87:bd:f6:00:
a0:b4:bc:5b:67:f7:72:f9:7d:4c:9e:61:75:92:82:
d4:4f:a4:f9:79:fe:c3:1c:9d:27:b9:c3:e6:83:2b:
12:90:00:42:72:67:a0:05:fd:77:2e:1b:8f:0f:f4:
28:05:f1:08:95:46:92:82:a8:10:b5:17:61:41:94:
07:96:fa:9a:61:8c:44:9c:47:b5:95:34:23:86:2c:
bc:6e:68:49:ea:b3:56:30:cb:94:dd:62:1c:4a:f6:
59:a4:94:85:39:fa:0b:18:04:58:0e:01:a4:98:16:
4f:a0:81:2b:0b:ad:29:7a:e3:cb:4f:11:20:31:7c:
a3:23:c4:75:1a:9c:ca:91:a3:15:e0:ef:d0:ab:42:
ec:eb:f8:ae:f0:71:77:ed:c7:9a:76:7b:61:cf:12:
4a:7a:49:c9:24:48:ab:92:09:bb:51:be:2d:d3:84:
8f:5a:b1:16:f9:ca:4b:97:48:6a:cb:44:ee:9b:5c:
28:36:12:28:ca:27:6e:1b:19:cf:f9:86:64:36:f3:
63:7f:d3:42:29:2b:93:ec:a1:8f:76:96:a1:7d:d2:
d2:22:30:1c:62:59:e3:ae:f3:a8:fc:48:74:70:1a:
72:9a:73:66:a8:35:c7:31:fa:fc:ec:70:e4:85:f0:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:85:45:69:23:D3:DF:FD:C4:EE:05:D1:0A:8A:B0:D6:E4:58:D8
X509v3 Authority Key Identifier:
keyid:05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXxvR7wwmaTshr7ClgUmkUCtcxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/VUOFRWkj09_9xO4F0QqKsNbkWNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/BXxvR7wwmaTshr7ClgUmkUCtcxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.158.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6a:e0:83:1a:72:9e:97:ba:98:32:b2:85:b7:cf:5d:b1:02:
fd:64:fa:4a:13:d2:aa:44:fb:4e:93:ef:23:39:51:38:6c:f8:
e1:bc:8f:6b:7c:ea:5c:ab:f5:ae:44:75:46:e1:78:74:c6:b4:
ed:89:5f:b8:ab:56:ef:02:7b:7c:f9:e6:c6:f4:00:01:91:24:
2a:bb:33:75:df:8d:96:14:1d:95:a7:b9:11:d9:62:b6:2e:c3:
2a:2b:9d:88:bc:c3:12:86:90:b6:db:a3:73:42:0d:d3:10:28:
bf:2c:97:5d:77:92:c2:b2:c1:5e:06:c5:de:28:0e:3f:3a:03:
2c:04:24:f8:e2:6e:29:bb:62:bc:97:ca:76:52:7b:92:21:f2:
8e:f2:2b:6c:ae:5a:17:b6:84:5c:69:8f:35:96:93:d2:a5:8e:
a3:ed:94:ec:8f:da:8e:18:43:67:94:b2:3d:f0:24:1f:39:a2:
a6:cd:f8:68:72:fb:0f:56:26:8e:be:3c:d7:92:85:ce:61:cf:
ba:e2:2d:df:10:d6:e7:67:be:76:ed:01:57:d9:3c:03:54:73:
89:99:33:d9:f0:3d:0a:f5:96:09:5f:85:ab:99:2a:dd:ba:3e:
06:e4:fa:46:10:61:df:c1:e3:85:ef:c9:c6:51:8c:f6:48:05:
79:45:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 15:53:47 2023 by rpki-client on console-fra.rpki-client.org