Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/pMbWajWaIkBvn9knke4YficBKi8.roa
File: pMbWajWaIkBvn9knke4YficBKi8.roa (raw, json)
Hash identifier: rXWcs5J2FGPHeJrp4I+OCvxLrSxZa4aQVWKbgslaqyI=
Subject key identifier: A4:C6:D6:6A:35:9A:22:40:6F:9F:D9:27:91:EE:18:7E:27:01:2A:2F
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563FD1D4C60E161CFF133BD4A925B4F
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/pMbWajWaIkBvn9knke4YficBKi8.roa
Signing time: Thu 15 Aug 2024 09:35:01 +0000
ROA not before: Thu 15 Aug 2024 09:35:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 194.196.38.0/23 maxlen: 23
213.62.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:fd:1d:4c:60:e1:61:cf:f1:33:bd:4a:92:5b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4c6d66a359a22406f9fd92791ee187e27012a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:a6:c5:63:5b:29:c0:79:a3:05:88:fe:6a:
f8:89:5d:8f:b8:83:e3:82:84:da:76:da:cb:2d:27:
0a:e3:a2:45:74:56:68:fb:ce:a1:b5:bd:41:00:b5:
2e:fd:8f:35:81:a1:1d:d2:bc:b4:bb:87:0f:12:cd:
1b:da:0d:ed:a5:ec:49:b0:cd:4d:dd:bc:d6:1f:7e:
41:43:c8:42:5d:fb:2f:57:bc:fb:04:b8:ca:dd:d5:
8a:5e:2e:7d:73:2d:07:50:22:db:60:18:21:3b:f8:
f2:f8:2e:8a:69:78:0b:82:e2:66:99:fd:9d:f0:e9:
a0:fd:3e:40:ad:ff:e9:89:95:20:e3:e7:e5:0b:4e:
51:47:eb:5c:fa:be:ba:08:16:40:4e:d5:a3:58:f8:
40:bf:fa:18:60:61:b2:70:bd:3a:f9:35:91:85:8c:
8d:57:4c:a6:d1:50:3e:53:ff:ac:b8:f7:a3:8b:a2:
18:7b:e9:23:18:4f:44:d9:81:a5:8a:4a:ab:89:e9:
06:73:37:0c:18:6d:20:7d:df:8c:2e:2a:04:99:e1:
f3:3c:38:2b:b1:01:d2:30:27:d1:aa:84:e4:b6:ed:
7e:8f:14:e7:80:6d:a3:af:56:3f:3d:54:2a:be:1e:
cd:20:71:22:af:63:99:87:cc:2a:4c:85:bd:c2:91:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C6:D6:6A:35:9A:22:40:6F:9F:D9:27:91:EE:18:7E:27:01:2A:2F
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/pMbWajWaIkBvn9knke4YficBKi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.196.38.0/23
213.62.24.0/23
Signature Algorithm: sha256WithRSAEncryption
15:f6:75:13:3f:7c:4b:92:18:cc:03:b2:26:47:ad:e8:2c:37:
f4:c3:5f:6d:8e:9d:10:d0:4f:b9:df:b4:f0:45:26:17:e7:eb:
cf:26:0b:7b:4c:7e:f8:de:86:db:93:54:25:cf:d3:06:27:5d:
0b:dd:51:26:c0:00:25:a0:0c:a5:c9:ea:8b:7d:d7:13:84:55:
da:a5:ec:ea:d4:78:9a:44:52:f3:21:a5:37:41:9a:a4:35:19:
b4:41:96:9d:07:7d:be:45:76:fd:28:30:65:63:49:af:54:33:
29:2f:0d:28:67:eb:77:d8:20:74:82:03:1d:fa:6c:eb:21:f2:
0b:7c:66:6a:70:14:fb:c4:78:63:9e:73:ec:47:98:3c:31:4f:
7b:d3:8c:e4:d6:d2:20:8a:4b:d2:f1:fb:34:14:23:d2:e5:3e:
95:70:25:80:77:f0:71:24:4e:eb:52:51:d2:c8:e3:5e:72:60:
ac:2c:fc:65:65:75:00:ed:e0:32:66:80:49:37:f1:f5:89:73:
b6:6c:ed:32:c5:9a:53:c4:ec:65:ee:c0:c0:ce:97:fe:f7:56:
c8:10:1a:e8:37:0b:69:4d:63:d6:bf:8c:a4:00:61:2e:9d:81:
dc:20:24:5d:6b:9a:aa:b2:15:27:63:0a:b5:5c:14:b0:aa:86:
9c:42:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org