Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/lsntfObGi21rTzcPP8M1OUjAbqA.roa
File: lsntfObGi21rTzcPP8M1OUjAbqA.roa (raw, json)
Hash identifier: EzN1AL+rKe+Fv7B2goT43GnKbUrq2fC6OaFSvMOhLLw=
Subject key identifier: 96:C9:ED:7C:E6:C6:8B:6D:6B:4F:37:0F:3F:C3:35:39:48:C0:6E:A0
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F7634D91923D2A5630C2CEAE0BCE
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/lsntfObGi21rTzcPP8M1OUjAbqA.roa
Signing time: Thu 15 Aug 2024 09:35:00 +0000
ROA not before: Thu 15 Aug 2024 09:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6742
IP address blocks: 193.41.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f7:63:4d:91:92:3d:2a:56:30:c2:ce:ae:0b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96c9ed7ce6c68b6d6b4f370f3fc3353948c06ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:59:d1:d3:f7:ae:df:f1:34:af:28:2a:15:
3c:c0:cf:ca:be:84:30:f0:a5:c3:c8:9e:3e:1a:d2:
bb:b5:02:66:f9:75:76:04:14:4e:1c:c8:33:60:04:
9a:c8:0b:73:b5:3c:a8:0d:a2:84:88:81:30:53:a7:
b1:2b:00:13:52:36:ca:c9:31:13:a7:ae:9a:07:d4:
39:4f:9d:29:47:fb:b8:1d:88:1e:f3:3d:fd:64:f3:
b6:ff:58:9e:c1:39:a0:f6:4b:78:16:a5:e1:ec:15:
c9:7c:87:c1:ca:56:f6:b1:21:01:f6:76:36:83:aa:
3f:11:cd:d4:53:7f:4b:fc:c3:cf:ba:ad:e0:25:3f:
6d:d5:ec:b1:53:35:63:5b:c4:5f:63:dd:c6:57:c3:
b2:45:22:4b:5f:84:e5:27:9d:b0:4f:90:4b:ed:fc:
48:34:3b:72:89:55:f5:d8:6e:6f:3d:e3:39:64:88:
c0:78:8e:1a:c3:a8:e1:c5:97:df:af:ba:2e:b2:c4:
ab:f3:48:99:0e:86:a4:96:bb:b7:e0:61:b2:f2:35:
75:03:8e:4d:c2:51:b9:d1:99:e3:8a:7f:0b:ac:e6:
4f:3a:4c:42:0b:8e:f6:22:33:ce:21:88:fd:6d:1d:
36:de:5d:73:b2:21:48:1d:b4:69:88:b4:44:ae:1c:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C9:ED:7C:E6:C6:8B:6D:6B:4F:37:0F:3F:C3:35:39:48:C0:6E:A0
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/lsntfObGi21rTzcPP8M1OUjAbqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.111.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2b:e6:50:59:ea:ac:05:05:3d:e4:e9:98:17:88:d0:b5:de:
6a:98:f9:1b:99:fe:39:bb:cf:38:c6:cf:ea:52:3d:05:56:d7:
93:0b:86:69:ea:3e:f4:24:5b:99:eb:11:88:6c:d4:3c:9f:ff:
7a:d6:fa:1b:d1:4b:97:84:b9:29:f0:c2:7a:e2:87:e3:a9:1b:
60:58:f0:45:c0:da:39:ea:7f:0c:ad:00:ca:ac:49:99:45:0d:
bd:e7:45:64:2f:88:48:f6:38:17:0a:d6:dc:47:f5:f4:33:7b:
9f:25:83:eb:40:f9:eb:84:78:81:fb:01:a9:e2:6b:52:cf:bd:
c4:33:51:79:62:33:87:77:ed:93:67:ae:f5:45:c1:29:01:45:
a2:96:1d:e3:81:13:0f:9c:bf:08:4c:f1:a1:ca:7c:13:67:d1:
c5:14:7a:23:67:e1:6f:56:d4:f5:e0:a9:ef:ff:c5:e4:70:dd:
ef:00:23:c3:16:7d:2d:93:70:5f:a1:f2:2a:05:de:a7:24:47:
71:b0:1f:2d:de:8b:72:e2:45:fd:b7:03:bd:b6:bb:6c:a5:d3:
8f:01:ae:3b:a3:b0:73:32:42:f2:2b:72:6c:4c:ea:72:ba:5a:
74:dc:81:4d:48:f6:cb:5e:ab:85:ba:a1:9a:ec:d0:d5:b5:0d:
1b:ca:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org