Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/PGgSqPbqr2__eJK9i5fjWR7u8zY.roa
File: PGgSqPbqr2__eJK9i5fjWR7u8zY.roa (raw, json)
Hash identifier: QFYNg9YLkJT2hvlAf6C3A3TBYVHr5LI7vyk2Ro3ss6s=
Subject key identifier: 3C:68:12:A8:F6:EA:AF:6F:FF:78:92:BD:8B:97:E3:59:1E:EE:F3:36
Certificate issuer: /CN=014318684fcad9f86a21c45d0c7b88166590a8b9
Certificate serial: 0B67823C
Authority key identifier: 01:43:18:68:4F:CA:D9:F8:6A:21:C4:5D:0C:7B:88:16:65:90:A8:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUMYaE_K2fhqIcRdDHuIFmWQqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/PGgSqPbqr2__eJK9i5fjWR7u8zY.roa
Signing time: Sat 01 Jan 2022 13:56:17 +0000
ROA not before: Sat 01 Jan 2022 13:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 194.110.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191332924 (0xb67823c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014318684fcad9f86a21c45d0c7b88166590a8b9
Validity
Not Before: Jan 1 13:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c6812a8f6eaaf6fff7892bd8b97e3591eeef336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:62:7c:7f:4f:89:08:0f:47:b8:4c:cc:33:
71:3f:8c:25:6e:6c:0c:bc:b2:cc:b8:fb:c0:2b:79:
d3:a4:36:7d:1c:0c:eb:0a:8c:4d:4f:7d:b5:cf:dd:
63:54:76:d5:8e:d2:26:f7:df:f9:e3:aa:4c:f1:a7:
06:47:45:73:44:24:03:5f:f3:e8:84:70:dc:3d:93:
c7:50:99:29:02:9d:51:a2:e7:53:e2:0b:d2:8e:b3:
db:08:33:b5:a8:92:4a:a3:fa:14:41:43:5c:12:38:
34:32:6e:98:a2:2e:85:1e:d2:f7:85:cc:3e:36:36:
be:eb:be:a7:a0:68:d8:b5:4a:c6:20:4c:3e:1b:db:
46:bb:4f:c5:aa:ec:06:37:10:8a:dd:53:7e:c5:99:
41:1f:c7:da:bf:d0:c9:64:d0:e0:9d:c7:19:17:f7:
49:e5:62:b1:09:aa:e7:6f:d8:95:e2:38:19:31:1c:
6d:56:c9:8e:92:c4:f2:17:57:40:4f:16:24:df:2b:
b2:2c:93:fa:f6:e0:ac:f3:13:a9:b5:c0:6a:b1:63:
33:2e:17:ac:74:8a:aa:b0:1f:91:e8:3b:bf:d8:8d:
89:5c:e9:6c:41:08:04:6c:f0:55:bf:c7:58:4d:6a:
a7:88:3b:5b:d9:3a:72:10:f0:63:80:a9:49:7e:f1:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:12:A8:F6:EA:AF:6F:FF:78:92:BD:8B:97:E3:59:1E:EE:F3:36
X509v3 Authority Key Identifier:
keyid:01:43:18:68:4F:CA:D9:F8:6A:21:C4:5D:0C:7B:88:16:65:90:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUMYaE_K2fhqIcRdDHuIFmWQqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/PGgSqPbqr2__eJK9i5fjWR7u8zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/AUMYaE_K2fhqIcRdDHuIFmWQqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:dd:ea:60:46:c1:1f:4a:75:9c:85:7f:f0:d2:5d:0a:6d:b9:
cc:0f:70:20:19:51:bc:15:53:0a:58:af:10:c6:b3:10:19:5d:
c6:f5:2b:d3:1b:7e:d5:28:9b:c1:39:b8:72:ea:b7:2a:cf:51:
6a:31:96:6b:ec:24:12:cb:a1:07:fe:79:54:87:06:0a:75:25:
7d:f3:7a:52:a3:8e:9b:12:b3:e8:ff:39:27:8e:5b:a5:d5:8e:
89:80:b7:d0:e1:3f:40:d2:b4:fe:9b:9c:58:16:f6:91:82:94:
f6:36:f9:80:82:9d:d5:60:41:4b:29:6c:3b:70:b3:c5:93:2c:
51:ee:95:b8:09:c1:af:4f:a2:b5:60:f0:57:3a:fc:e8:48:56:
28:67:40:ed:f4:02:13:f2:0d:46:7c:aa:64:45:fa:13:ed:aa:
fe:ac:8d:3b:10:64:39:e2:e7:a5:05:92:a7:58:54:25:ce:81:
27:98:a6:f0:47:35:90:87:61:65:d2:9d:cf:5d:86:b0:f4:54:
4f:6d:8d:78:81:5a:8e:64:2e:38:56:53:6d:8c:9e:3c:c5:ed:
6d:1f:0f:37:bc:27:88:71:ce:03:e5:ea:fa:39:69:b3:1d:e6:
6e:fd:c1:07:b4:2d:0a:72:11:0c:02:1d:0a:8f:64:39:b7:f4:
7d:1a:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:52 2023 by rpki-client on console-fra.rpki-client.org