Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/0_QXPpaJw7C2ZxuYrtoLTQ2dqRk.roa
File: 0_QXPpaJw7C2ZxuYrtoLTQ2dqRk.roa (raw, json)
Hash identifier: XTrn14KbsngPjhXOhqBPlrZAVoqKjFr77rx5GueUSXU=
Subject key identifier: D3:F4:17:3E:96:89:C3:B0:B6:67:1B:98:AE:DA:0B:4D:0D:9D:A9:19
Certificate issuer: /CN=04aaea3ef619379db71d476b3b90bbe2a6efd036
Certificate serial: 01856E0AE07FEF83E8B914354CD768F60A9D
Authority key identifier: 04:AA:EA:3E:F6:19:37:9D:B7:1D:47:6B:3B:90:BB:E2:A6:EF:D0:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKrqPvYZN523HUdrO5C74qbv0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/0_QXPpaJw7C2ZxuYrtoLTQ2dqRk.roa
Signing time: Sun 01 Jan 2023 15:54:44 +0000
ROA not before: Sun 01 Jan 2023 15:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41509
IP address blocks: 194.145.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:e0:7f:ef:83:e8:b9:14:35:4c:d7:68:f6:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04aaea3ef619379db71d476b3b90bbe2a6efd036
Validity
Not Before: Jan 1 15:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3f4173e9689c3b0b6671b98aeda0b4d0d9da919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:bb:c5:29:3f:c0:e0:5a:ee:af:78:fa:37:
d9:20:15:ea:af:79:5d:36:31:5c:e4:13:b2:7b:24:
79:a6:41:86:dc:68:4a:a6:cf:0f:07:c8:81:c9:fd:
42:c2:bc:c0:5f:02:fd:5f:4a:5e:ff:bc:fd:82:b0:
70:20:13:82:e5:77:51:05:27:2e:8f:6b:88:37:80:
8a:8f:2c:aa:b3:52:2b:96:0a:30:e7:f8:ca:55:14:
95:94:aa:c3:f5:36:33:c4:7f:40:74:4d:ac:56:ee:
9a:93:14:f1:0a:dc:a2:e8:da:74:05:71:99:00:18:
ab:6c:65:c3:61:4d:9a:db:11:2c:ce:27:a0:a6:f6:
82:6d:d6:39:9b:bb:26:4d:74:a4:11:d9:87:7c:75:
72:4d:99:20:6a:2f:a9:45:62:7c:67:26:14:eb:ce:
7d:02:96:95:9d:63:1b:59:f4:f3:7f:e7:6d:7b:31:
b2:f3:49:a7:95:1e:0d:8b:80:8b:3e:46:6a:72:f0:
3d:73:85:7c:25:80:62:dc:fd:51:84:3c:3e:1f:6d:
0d:9a:6f:f7:21:eb:c2:f6:38:7e:69:c8:df:72:e5:
f9:a6:ee:a6:46:6f:2c:4c:8a:d8:45:b6:a7:bd:3b:
a7:ef:c2:08:28:01:e6:61:65:f4:5e:f1:c3:6b:f0:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F4:17:3E:96:89:C3:B0:B6:67:1B:98:AE:DA:0B:4D:0D:9D:A9:19
X509v3 Authority Key Identifier:
keyid:04:AA:EA:3E:F6:19:37:9D:B7:1D:47:6B:3B:90:BB:E2:A6:EF:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKrqPvYZN523HUdrO5C74qbv0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/0_QXPpaJw7C2ZxuYrtoLTQ2dqRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/BKrqPvYZN523HUdrO5C74qbv0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:35:cb:45:5c:b8:8a:92:8e:47:6f:f8:0e:47:5f:66:e4:a3:
74:44:62:92:17:50:ab:55:e7:73:74:39:7d:8a:7e:1d:22:47:
48:9b:78:eb:f7:6d:f2:ea:24:99:49:ff:8a:6a:4a:2a:5c:1e:
e4:45:35:13:42:92:61:d2:6c:15:88:05:3c:1d:b6:ca:a0:80:
8b:2b:08:e0:a2:67:e0:b3:0f:2b:d9:f4:7f:3c:84:62:c0:9e:
fb:2a:5c:6a:86:d8:c6:13:d6:02:67:23:37:2f:bd:10:f2:55:
2f:07:ec:4a:a9:35:5e:86:27:14:0d:e2:3a:eb:d4:4d:6a:42:
d0:97:d2:99:1d:86:6a:3c:02:da:86:9d:d5:e5:c3:0a:ee:79:
3b:d5:97:6b:ed:85:2b:a1:ba:e8:fc:7d:87:ab:5d:21:6b:d1:
27:82:f3:3c:a9:3a:77:cf:fc:50:ff:53:7b:7e:a3:2b:40:db:
f9:d4:69:c9:1e:ab:bb:a7:8e:d4:5d:70:73:cb:ba:e3:e9:96:
32:67:64:5b:91:d2:8f:09:25:ff:20:46:9e:a3:8f:c3:b0:d6:
f1:d8:89:6d:d5:99:b0:7c:1a:8b:6d:58:cc:9c:da:44:e8:9d:
1f:96:f1:84:8d:2b:20:8d:ab:86:0a:c7:cb:6d:72:96:44:5e:
ba:a4:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:31 2024 by rpki-client on console-fra.rpki-client.org