Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/cw14v7tIcn9-Pnn_qA6SP5-QEak.roa
File: cw14v7tIcn9-Pnn_qA6SP5-QEak.roa (raw, json)
Hash identifier: K+9OHlVo5eIG99BhWOOVvg6UdDqwSP9JDG3qkGht8gM=
Subject key identifier: 73:0D:78:BF:BB:48:72:7F:7E:3E:79:FF:A8:0E:92:3F:9F:90:11:A9
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563FEC68A20E753CFD6FE1EF1D94ADF
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/cw14v7tIcn9-Pnn_qA6SP5-QEak.roa
Signing time: Thu 15 Aug 2024 09:35:02 +0000
ROA not before: Thu 15 Aug 2024 09:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134536
IP address blocks: 194.69.169.0/24 maxlen: 24
194.69.173.0/24 maxlen: 24
194.69.178.0/24 maxlen: 24
213.62.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:fe:c6:8a:20:e7:53:cf:d6:fe:1e:f1:d9:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=730d78bfbb48727f7e3e79ffa80e923f9f9011a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f6:ab:e9:16:e6:3b:94:a6:e6:e3:e3:ce:0d:
39:d3:ab:b7:4a:28:6b:b6:0b:6a:3e:60:80:fb:06:
ea:90:31:ea:c4:64:2b:c6:ae:f0:61:79:e2:95:7b:
e6:79:ce:1d:d7:7b:f1:ce:cd:af:6d:d4:78:82:f0:
1a:25:55:d8:44:03:31:38:89:4a:11:80:b2:ff:7e:
d8:05:3d:2a:fd:b7:b1:22:6f:bf:69:10:53:8f:17:
f0:6d:83:66:41:7c:fc:03:7b:de:d3:8b:96:dd:e3:
b6:95:bd:63:df:a1:be:85:df:e0:e0:f8:f2:32:3b:
c2:55:77:91:74:44:c8:c1:3d:6e:b0:f0:0c:c5:7c:
42:07:78:e2:75:17:41:62:87:4c:05:b0:df:61:82:
9f:83:1a:c7:31:c3:00:72:07:65:88:d0:77:1f:2a:
27:4c:d0:7f:8d:c6:b1:46:68:eb:f3:0a:22:02:f6:
06:98:0e:54:ac:3e:3c:ff:d2:4e:9a:f5:8c:68:bd:
10:64:37:eb:76:47:01:0b:85:fe:a9:ab:0a:f1:9a:
32:82:42:8d:1c:48:96:ec:89:df:30:33:e4:12:dd:
31:47:21:1f:ec:3a:b6:2c:1a:f2:81:53:b0:25:f7:
97:5a:49:80:6e:7e:b2:c1:09:62:13:12:53:5a:bc:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0D:78:BF:BB:48:72:7F:7E:3E:79:FF:A8:0E:92:3F:9F:90:11:A9
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/cw14v7tIcn9-Pnn_qA6SP5-QEak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.169.0/24
194.69.173.0/24
194.69.178.0/24
213.62.27.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5e:cf:b8:3d:9f:13:16:15:74:36:f5:73:20:82:6f:e4:0a:
cc:b0:af:63:24:1f:27:d9:54:3d:0d:29:2a:74:38:f0:b2:e5:
61:9b:bc:1f:76:3e:b3:49:ca:46:a3:00:d1:1d:27:0c:d6:4c:
97:c6:78:c5:3b:61:8a:d5:bf:74:03:17:c3:41:a8:92:0e:cb:
3c:97:24:38:7d:cf:6e:ff:aa:77:82:77:ca:3f:bb:c2:3b:3c:
b0:65:65:3b:04:a8:6b:88:d0:18:69:24:44:96:27:16:1d:48:
53:c0:f1:26:e9:33:6f:ae:36:9d:82:27:4d:89:36:49:86:e0:
14:01:7a:18:61:7a:56:e4:88:29:33:f2:0e:3e:c3:0f:1d:89:
ae:02:16:53:4b:ff:4f:0b:46:14:b3:1d:50:1b:75:e4:20:4e:
4e:dd:00:e0:e7:3a:17:3c:28:17:7d:d2:9e:cd:fa:19:98:b1:
7b:0b:17:5b:b8:71:78:4c:0b:8a:c9:33:36:66:53:2a:cb:2e:
ef:29:94:ab:fd:40:f1:94:69:63:1d:67:9c:6d:75:38:8d:da:
d5:e5:29:fe:03:39:a7:a6:29:14:fb:06:e2:cf:00:5c:79:bc:
d0:a7:73:83:93:af:58:80:a1:6d:7b:26:69:b4:01:1d:c1:8b:
52:df:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org