Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/KeZGh_u5QxREE00P8l50vb1Z1TI.roa
File: KeZGh_u5QxREE00P8l50vb1Z1TI.roa (raw, json)
Hash identifier: fedWOvdZXfF+3J10T2rFzYCfnp/6GZFKSS1k8rWdqm8=
Subject key identifier: 29:E6:46:87:FB:B9:43:14:44:13:4D:0F:F2:5E:74:BD:BD:59:D5:32
Certificate issuer: /CN=c648ee064453d799b82e847b349666bf29daa961
Certificate serial: 6C07
Authority key identifier: C6:48:EE:06:44:53:D7:99:B8:2E:84:7B:34:96:66:BF:29:DA:A9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjuBkRT15m4LoR7NJZmvynaqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/KeZGh_u5QxREE00P8l50vb1Z1TI.roa
Signing time: Sat 09 Apr 2022 18:34:36 +0000
ROA not before: Sat 09 Apr 2022 18:34:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206654
IP address blocks: 194.39.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27655 (0x6c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648ee064453d799b82e847b349666bf29daa961
Validity
Not Before: Apr 9 18:34:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29e64687fbb9431444134d0ff25e74bdbd59d532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:c1:08:b1:32:97:22:73:9f:97:2d:9c:60:
42:c4:88:e3:c5:25:be:d8:01:87:97:37:d0:b8:1f:
4b:30:73:ef:09:9d:16:8e:96:97:ad:5c:9b:82:20:
74:86:76:78:9b:87:f3:11:e0:59:2e:bc:59:c4:94:
c9:ce:79:f5:a8:b1:1e:8f:48:75:54:61:c5:df:a9:
d3:0b:47:cf:17:00:ae:5a:61:8f:3e:08:8d:da:f5:
8b:d6:e5:a7:65:68:c4:ad:a6:70:54:c8:07:d1:8c:
cb:2c:70:71:17:60:74:79:d6:b4:e3:20:4e:92:bd:
d1:36:4d:c7:d3:a8:86:41:4a:0c:c4:b9:51:4e:63:
67:65:88:2f:36:7e:a6:df:f7:2e:c7:89:42:5d:1d:
3b:65:54:a7:e1:91:99:f7:0d:50:63:eb:a1:80:53:
0c:21:46:0b:35:cb:ee:76:73:7a:80:58:be:20:2c:
2c:49:3f:f3:25:12:17:8d:13:df:b3:6e:b1:03:b2:
82:cb:21:a6:50:5b:47:de:c0:01:1e:fc:74:e2:6c:
19:d4:0e:c3:7e:9a:71:10:06:13:f5:9c:ab:61:93:
d1:6d:98:2c:cd:73:bd:93:fc:e1:39:ca:5a:04:a1:
ed:27:ac:81:24:6e:d9:0b:c1:21:1d:03:e1:26:03:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E6:46:87:FB:B9:43:14:44:13:4D:0F:F2:5E:74:BD:BD:59:D5:32
X509v3 Authority Key Identifier:
keyid:C6:48:EE:06:44:53:D7:99:B8:2E:84:7B:34:96:66:BF:29:DA:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjuBkRT15m4LoR7NJZmvynaqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/KeZGh_u5QxREE00P8l50vb1Z1TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/xkjuBkRT15m4LoR7NJZmvynaqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ae:d0:71:38:f9:07:cf:ac:e8:c9:f8:b7:bb:0a:81:12:8a:
6a:ae:f0:86:07:db:98:a8:2d:eb:d0:7c:2e:10:40:cf:3d:7b:
9f:23:98:b6:27:7e:4a:00:86:6c:c7:25:90:18:32:7d:ed:f8:
82:38:8b:0d:29:45:97:aa:f0:82:01:12:19:d0:bd:a5:bc:fb:
3c:ae:02:70:cc:32:03:67:b1:a7:e6:af:5c:23:93:01:9e:70:
c5:f3:e5:1a:2a:4b:8d:7a:a9:47:6c:ed:a4:eb:f2:b6:72:f7:
4f:1d:e5:4f:71:88:0c:74:f1:9b:cb:b0:b8:de:3d:78:1b:5d:
c6:c7:35:a6:41:58:28:9e:e4:59:7f:3e:8c:e0:f5:d7:c4:8b:
c3:7e:b8:fc:8a:83:6c:73:c6:00:66:6f:2c:3b:04:08:0b:56:
e1:52:5d:6c:30:f1:92:81:1f:b3:04:1f:e4:2b:10:25:11:26:
b5:bf:4b:7a:9c:13:fd:90:38:13:63:38:e2:79:05:5b:01:ab:
d0:a2:cc:a3:5e:fa:9f:ef:4e:54:f8:3a:e8:00:5a:e6:80:7e:
3e:de:fe:47:3d:eb:53:e6:82:23:8c:ef:c6:08:97:8c:43:77:
69:e1:bc:39:7f:43:ec:5a:39:40:c6:7d:3a:e4:5f:c1:e9:2e:
34:21:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:04 2024 by rpki-client on console-fra.rpki-client.org