Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/aeHquRQSo1Fw0j6-5i795fqNeo8.roa
File: aeHquRQSo1Fw0j6-5i795fqNeo8.roa (raw, json)
Hash identifier: ZsSnrVMhR2XbkCzofIgoAP/tQdQ8TC5mDZafXskNJVw=
Subject key identifier: 69:E1:EA:B9:14:12:A3:51:70:D2:3E:BE:E6:2E:FD:E5:FA:8D:7A:8F
Certificate issuer: /CN=0ecf600f3311944dc4149f693db57735a9292c86
Certificate serial: 0183549001214259888AD2B3189AE3A0D9C7
Authority key identifier: 0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/aeHquRQSo1Fw0j6-5i795fqNeo8.roa
Signing time: Mon 19 Sep 2022 07:04:27 +0000
ROA not before: Mon 19 Sep 2022 07:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 194.180.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:90:01:21:42:59:88:8a:d2:b3:18:9a:e3:a0:d9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecf600f3311944dc4149f693db57735a9292c86
Validity
Not Before: Sep 19 07:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69e1eab91412a35170d23ebee62efde5fa8d7a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:d9:92:5a:83:21:f0:ad:8c:1a:30:11:38:
12:8c:c2:12:fc:08:7a:2d:cb:aa:93:a0:e3:c1:e6:
de:50:3e:34:2b:64:ef:0b:98:9a:a6:cf:f9:6d:5b:
41:df:b5:16:a0:72:1c:1d:ff:25:34:27:87:21:8b:
93:e2:1c:a7:05:6f:b5:9f:da:0d:a2:6d:56:80:2c:
ab:13:a7:7f:58:a1:0b:ea:57:26:b3:3b:3b:93:b3:
6a:f3:b0:5f:d4:d5:36:d7:6c:c9:fc:60:6c:9b:49:
6b:4f:33:a6:08:98:af:a1:76:36:6d:f1:a3:f2:88:
8e:be:e6:cc:33:4d:b1:37:df:53:a1:22:1b:2c:d6:
5d:60:6f:5f:b5:98:81:d0:0c:ef:0b:87:8a:1e:b5:
30:ed:10:45:0e:90:6a:74:56:ac:d0:70:cf:ae:c5:
af:13:13:35:e0:ea:3d:90:ff:94:92:6a:b0:51:6a:
ee:a4:00:e5:a1:a9:2a:8e:64:d1:09:05:f4:0c:7f:
39:87:5b:4e:b0:d4:2a:b9:77:49:4f:8b:1c:a9:82:
83:08:03:f5:bd:83:bd:b4:b9:92:68:97:cb:b8:95:
8e:a2:d6:1b:10:07:c9:28:41:6d:cb:39:c3:08:57:
ff:7c:9b:a6:e8:bd:73:12:3a:6f:e5:a6:b9:b2:3c:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E1:EA:B9:14:12:A3:51:70:D2:3E:BE:E6:2E:FD:E5:FA:8D:7A:8F
X509v3 Authority Key Identifier:
keyid:0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/aeHquRQSo1Fw0j6-5i795fqNeo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:1a:9a:c3:36:e1:6a:5b:3d:1b:7a:dc:f4:3e:70:45:38:1e:
6c:73:32:3e:62:ba:8e:5b:a7:40:87:30:06:08:60:d5:f3:2c:
2a:c7:8d:0e:0e:81:f5:0b:e9:30:24:01:4a:d2:76:7a:3a:07:
71:d5:b1:78:1a:6b:b3:c8:03:47:26:b7:a5:cc:dc:e5:6d:8f:
13:5c:e4:29:c9:42:58:c9:09:63:7e:dd:a7:10:94:bd:17:33:
29:11:b7:1b:9b:00:34:51:d0:06:1d:b0:89:6e:0b:50:cc:8d:
8b:9e:fd:a2:7c:3b:c2:a2:8e:ec:50:62:5e:56:77:bd:c4:7c:
c1:16:0e:5b:aa:3e:35:bd:a5:02:6f:1e:25:a0:ed:a7:ab:cc:
d5:0e:5a:9b:a7:e6:97:3c:d5:97:a8:2f:f7:24:d4:15:b3:ff:
da:df:1b:65:fe:2c:d8:48:10:28:36:ec:da:38:3b:aa:16:91:
e6:bb:1e:2d:e8:33:ec:3b:04:bc:32:22:39:cf:47:06:c2:a7:
77:98:ea:9c:ff:ca:c2:65:de:2e:fc:a9:4b:53:51:a9:04:29:
ac:45:79:96:bf:48:d6:0a:f8:1d:cf:19:51:61:a4:a8:6b:af:
98:4c:c4:11:8a:78:fb:ef:82:11:6e:ac:ff:60:e8:b5:6b:23:
8d:49:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:30 2024 by rpki-client on console-fra.rpki-client.org