Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/Apmkq-ERWi1Ep2qgNxrTeyihi1I.roa
File: Apmkq-ERWi1Ep2qgNxrTeyihi1I.roa (raw, json)
Hash identifier: b5YRniv9xkzPDr9AddIUOXGpUXTATy5XWyqakU7GurU=
Subject key identifier: 02:99:A4:AB:E1:11:5A:2D:44:A7:6A:A0:37:1A:D3:7B:28:A1:8B:52
Certificate issuer: /CN=c648ee064453d799b82e847b349666bf29daa961
Certificate serial: 2F004D
Authority key identifier: C6:48:EE:06:44:53:D7:99:B8:2E:84:7B:34:96:66:BF:29:DA:A9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjuBkRT15m4LoR7NJZmvynaqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/Apmkq-ERWi1Ep2qgNxrTeyihi1I.roa
Signing time: Wed 27 Apr 2022 08:39:24 +0000
ROA not before: Wed 27 Apr 2022 08:39:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206654
IP address blocks: 194.39.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080269 (0x2f004d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648ee064453d799b82e847b349666bf29daa961
Validity
Not Before: Apr 27 08:39:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0299a4abe1115a2d44a76aa0371ad37b28a18b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:e6:0f:0d:18:9f:12:7b:68:d2:83:db:d9:
48:5a:36:e3:96:43:3c:e5:30:1a:af:8c:6f:a2:ac:
ec:21:9c:6b:ed:d6:cd:62:a8:cb:38:57:51:c2:b5:
fd:77:54:58:fe:f7:31:4f:f3:85:2d:55:dc:38:0f:
53:18:2b:eb:cb:aa:05:2c:78:26:61:5c:bd:c3:eb:
53:c6:af:12:ec:e1:4a:49:7e:15:b2:86:5c:7e:36:
36:9b:d3:df:de:dd:0f:26:ab:b7:bb:4e:39:21:6a:
09:87:19:61:d0:36:67:c7:7f:94:a8:be:41:1f:e5:
1b:5d:da:3e:3d:2b:43:e1:06:3e:5a:e2:28:2a:de:
fa:2c:c5:97:31:c4:6e:3b:0f:2d:2a:3b:9d:f2:1f:
48:e5:b3:d3:84:88:1a:0b:4f:38:35:ee:a3:5b:e1:
1e:d5:ca:48:38:1a:e9:82:e2:9e:fd:2c:92:74:77:
90:10:ee:c1:d0:f7:84:fa:f6:7f:eb:7b:a7:a9:81:
f7:0f:3d:48:d4:94:fc:27:10:55:f2:f2:ea:e5:1c:
f8:23:a6:93:b1:de:73:3c:c4:aa:a2:6d:10:3b:bf:
55:16:af:2a:4a:2e:c4:cd:b0:8e:bd:8c:a8:09:40:
fc:20:5d:7b:a1:66:20:0c:d4:d6:54:50:27:86:7a:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:A4:AB:E1:11:5A:2D:44:A7:6A:A0:37:1A:D3:7B:28:A1:8B:52
X509v3 Authority Key Identifier:
keyid:C6:48:EE:06:44:53:D7:99:B8:2E:84:7B:34:96:66:BF:29:DA:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjuBkRT15m4LoR7NJZmvynaqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/Apmkq-ERWi1Ep2qgNxrTeyihi1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/xkjuBkRT15m4LoR7NJZmvynaqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:19:39:1d:05:91:e8:f8:ff:04:12:91:e1:43:79:be:54:11:
df:2c:38:ba:70:8f:93:39:a4:ed:ff:85:0c:23:6a:50:c2:0d:
71:c7:60:0e:7b:c4:8f:34:22:4b:4d:d1:b9:45:9e:61:55:23:
e1:41:c6:d8:a3:da:3d:68:7c:83:8a:3d:7c:13:a3:a2:fe:95:
1e:c4:c2:a4:42:50:e5:15:fd:31:48:28:b2:5f:6d:eb:b9:67:
5b:8e:f6:04:31:e1:36:5b:66:b6:a3:f3:0b:d4:40:87:0a:dc:
49:83:01:7c:cb:4b:00:b5:bc:2d:e9:97:83:07:99:f4:31:da:
fc:c7:41:6b:d1:be:75:24:3b:5d:1b:74:ca:2c:31:d4:83:7e:
35:52:fc:de:2b:ed:62:9c:50:07:b2:92:d1:4b:31:50:74:ab:
9a:ca:3a:1a:11:93:07:2b:a5:9f:05:27:e5:bf:16:a5:dd:02:
80:4f:39:9e:a0:dd:0a:05:41:91:2e:f7:3b:e3:8b:fa:d6:a7:
fe:9a:ab:0e:39:64:f1:23:a4:ec:46:b2:58:e2:39:11:ec:db:
fe:6c:57:9a:2d:fd:3f:f8:2e:ac:9b:43:22:ae:ac:94:53:22:
22:0e:c3:dd:8e:4d:6c:4e:26:03:0e:2d:bf:da:e2:70:96:0d:
70:57:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:04 2024 by rpki-client on console-fra.rpki-client.org