Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/iizUdxUEd4t5vF9me5VYfZojE68.roa
File: iizUdxUEd4t5vF9me5VYfZojE68.roa (raw, json)
Hash identifier: wyXg3wIWRIVkwEiYederwXzr4HYMPepKf3hU45kzegw=
Subject key identifier: 8A:2C:D4:77:15:04:77:8B:79:BC:5F:66:7B:95:58:7D:9A:23:13:AF
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 018799FC377C55D980A8461050F69480786C
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/iizUdxUEd4t5vF9me5VYfZojE68.roa
Signing time: Wed 19 Apr 2023 14:47:35 +0000
ROA not before: Wed 19 Apr 2023 14:47:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60159
IP address blocks: 194.146.191.0/24 maxlen: 24
194.146.190.0/24 maxlen: 24
194.146.189.0/24 maxlen: 24
194.146.188.0/22 maxlen: 22
2a0c:d540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:fc:37:7c:55:d9:80:a8:46:10:50:f6:94:80:78:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Apr 19 14:47:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a2cd4771504778b79bc5f667b95587d9a2313af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:d4:e6:51:06:84:14:2d:f8:bb:fa:4d:b8:
cb:4a:14:a4:cb:01:b6:6c:41:c4:03:d3:1a:3d:e7:
b9:dd:7d:ab:a7:75:a1:b8:48:ae:5b:b5:d7:59:1c:
d4:6a:0d:13:a3:26:8b:d7:02:e5:34:6c:c4:14:2f:
06:51:ef:35:3a:aa:0e:06:0e:60:7e:55:7e:17:54:
24:da:6c:79:87:c1:23:be:ee:9c:7b:23:e7:99:90:
50:a4:ac:03:ae:b5:1a:ad:48:bf:57:cd:9a:16:8b:
58:0c:fd:75:4a:da:2f:e4:e9:7e:20:b6:36:87:ae:
c0:f0:80:19:ee:6c:68:f0:c2:7f:70:a2:11:fb:db:
b0:62:b2:1c:a2:c4:bc:9e:45:35:72:83:80:ef:98:
b1:ee:ff:09:fa:2a:fa:ed:2e:1f:3b:bc:19:46:a0:
18:6f:27:38:e9:f9:03:b6:6f:81:59:76:a7:85:4e:
d3:53:4e:96:1f:f4:70:b8:10:78:2c:35:8a:66:90:
d7:ba:4c:2d:d0:ec:07:cb:d6:2b:60:ac:4d:0e:df:
c9:cb:4e:aa:b1:16:ac:83:a5:f2:4c:5d:fc:fc:1f:
a6:23:7a:dc:28:61:4f:46:df:d9:ec:74:6f:12:6c:
05:c6:5b:cb:1f:3a:ce:6c:97:23:b4:75:be:50:7b:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:D4:77:15:04:77:8B:79:BC:5F:66:7B:95:58:7D:9A:23:13:AF
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/iizUdxUEd4t5vF9me5VYfZojE68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.188.0/22
IPv6:
2a0c:d540::/32
Signature Algorithm: sha256WithRSAEncryption
6a:3f:ef:47:e2:f0:3a:85:3d:c8:8c:9d:79:03:17:39:d1:29:
dc:70:c1:37:61:4a:27:46:19:75:e2:76:a9:b6:f6:8a:fb:71:
a1:91:ec:a8:55:6d:72:a0:5e:07:d0:9b:87:20:70:22:cd:31:
12:c6:71:18:bd:6a:b7:e9:4f:b5:f2:8c:bd:13:6e:4d:67:36:
23:b3:c7:8d:83:98:42:08:f8:af:d6:8f:cf:8d:29:2e:84:a4:
ad:40:86:a2:c6:62:c1:7c:86:5c:cf:e2:70:15:42:09:0e:16:
cb:11:a4:ea:ca:d2:c5:70:75:79:e1:95:d8:34:f8:56:76:0b:
35:cc:53:1a:1c:90:1a:7c:18:aa:43:bd:e4:26:67:42:9c:4c:
60:5c:91:0e:e2:69:e8:ca:b6:34:98:28:a7:5d:5b:aa:90:0b:
1c:e7:2d:b4:a1:b1:94:7d:37:2c:10:8a:54:cf:d3:11:33:27:
41:9a:c3:24:5c:42:ed:60:d4:b2:21:1c:d2:0c:d8:e5:7f:e5:
e0:02:3d:7a:69:ba:ec:e4:03:c8:b6:96:cc:96:e3:b4:6e:ff:
1e:09:03:67:68:39:dd:7e:0e:fe:46:1d:85:a4:df:b2:d9:0e:
b1:4d:a9:5a:22:91:57:05:d6:ce:e0:ab:e8:84:3c:b0:a6:f4:
68:5e:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org