Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/CzWJzo9FhjCqUx_ctSKc7dok-Hg.roa
File: CzWJzo9FhjCqUx_ctSKc7dok-Hg.roa (raw, json)
Hash identifier: rcK8aAlHxPazcOiKqwW3OeY+fnx58NxwNZUllCnAiv4=
Subject key identifier: 0B:35:89:CE:8F:45:86:30:AA:53:1F:DC:B5:22:9C:ED:DA:24:F8:78
Certificate issuer: /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial: 0711DD1D
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/CzWJzo9FhjCqUx_ctSKc7dok-Hg.roa
Signing time: Sat 01 Jan 2022 13:01:13 +0000
ROA not before: Sat 01 Jan 2022 13:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206119
IP address blocks: 193.169.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118611229 (0x711dd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Validity
Not Before: Jan 1 13:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b3589ce8f458630aa531fdcb5229cedda24f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:e5:34:9b:6e:53:0e:62:64:78:68:96:77:
30:a6:79:02:56:b3:88:03:ce:c3:ae:be:13:aa:f2:
86:8f:d3:85:55:d1:7c:19:88:38:f3:2a:bc:22:cd:
4f:25:ef:93:ee:38:96:73:f7:ea:c4:66:3c:24:d7:
d3:72:3b:be:0b:5f:ee:01:af:07:88:6c:a2:3b:87:
9b:5a:bc:18:dd:9a:88:a5:03:0d:c1:8f:4a:9f:ac:
16:be:89:01:d5:14:c1:53:3c:ab:42:4d:72:ce:84:
28:d4:fd:c5:96:f4:c5:ac:90:c7:a6:3e:fd:b8:e8:
ff:f4:56:4e:ce:a1:39:76:63:09:64:18:80:0c:44:
0c:8b:78:d8:3c:1e:73:22:cb:7a:f7:14:fc:c3:02:
a9:11:2b:16:88:a8:89:13:a0:57:cf:a1:fd:87:86:
24:50:b7:3f:8a:b8:e0:74:41:ef:fe:25:8e:0a:9c:
28:2f:80:c5:d1:2e:9a:39:5c:f4:e2:ce:14:40:1e:
d2:6e:61:07:62:8f:b7:6a:8b:4e:d7:78:d2:0f:93:
b0:2e:1e:7a:0c:fc:49:ce:83:1e:50:12:ca:fe:89:
87:40:f7:a1:1e:a0:82:59:78:96:9e:be:ee:0b:9a:
f3:5f:89:8e:e2:b4:c1:fb:49:5e:91:a6:99:b6:f5:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:35:89:CE:8F:45:86:30:AA:53:1F:DC:B5:22:9C:ED:DA:24:F8:78
X509v3 Authority Key Identifier:
keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/CzWJzo9FhjCqUx_ctSKc7dok-Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.238.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0a:a1:11:dc:72:13:25:a2:34:ef:8d:9d:82:ec:27:2a:55:
41:e3:f0:0f:eb:48:00:02:ac:24:7d:6c:de:b5:d4:1d:fe:88:
d9:b4:47:ae:11:2c:4b:43:1b:f8:2d:04:99:97:fd:f0:99:b5:
0c:54:bd:dd:77:99:2b:50:92:c7:c2:26:f4:82:38:11:c6:6f:
ce:3c:ae:6d:bc:d8:e0:d0:cc:fe:78:cc:0a:e9:d1:d6:57:99:
47:45:08:7d:87:a9:b2:8e:a6:b5:fd:06:e4:10:1c:09:5b:d4:
6e:74:36:3a:27:fc:be:f9:ba:89:cd:0c:28:cd:63:f7:90:00:
26:54:ea:3a:f5:b3:fb:e7:07:47:0a:1c:e9:1e:a8:27:e9:76:
4f:bf:37:e2:44:21:15:5e:1f:8e:06:cf:51:2d:ec:29:b9:c4:
0c:7c:4f:7b:50:c3:c0:28:97:ae:32:eb:ba:1d:23:34:c7:a0:
5b:27:cf:af:78:88:70:e7:bc:ed:8d:91:fb:65:75:10:33:67:
76:10:9f:1f:f4:5d:57:f1:e8:ab:5e:a7:be:d3:0d:6f:61:89:
45:e2:1b:83:a7:ee:4e:23:f4:12:6f:cd:4e:31:81:e9:89:42:
e9:28:63:bd:90:ea:fb:a1:7e:13:f9:a3:bc:5a:91:09:2e:55:
2e:79:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org