Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/zYNHHZi3KBY-Bg6nu1tB227AKF4.roa
File: zYNHHZi3KBY-Bg6nu1tB227AKF4.roa (raw, json)
Hash identifier: Jh4J/HYfXW1VsrPa3qRoj7byKpqBBISHh83VU837N/w=
Subject key identifier: CD:83:47:1D:98:B7:28:16:3E:06:0E:A7:BB:5B:41:DB:6E:C0:28:5E
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563FB6F4BDEEF096BB063DD707A9E50
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/zYNHHZi3KBY-Bg6nu1tB227AKF4.roa
Signing time: Thu 15 Aug 2024 09:35:01 +0000
ROA not before: Thu 15 Aug 2024 09:35:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29874
IP address blocks: 194.69.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:fb:6f:4b:de:ef:09:6b:b0:63:dd:70:7a:9e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd83471d98b728163e060ea7bb5b41db6ec0285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:4f:f8:ef:43:ed:93:23:65:e6:0a:78:de:
2b:c9:ac:64:b3:7f:ac:19:67:ff:e8:28:34:6d:b9:
b0:2d:69:e3:50:1e:76:c5:2f:30:d6:82:80:af:3e:
64:6c:6f:91:9f:c1:cd:bb:cc:05:af:32:aa:02:1e:
73:0e:02:1f:95:79:9a:ed:56:95:05:8f:0e:3a:37:
d3:08:4d:23:e6:bc:7d:4c:94:50:00:6b:11:d9:0d:
86:ca:7e:35:61:e2:cc:55:fc:07:7e:55:7e:18:0c:
fb:2e:a6:d7:52:01:cd:cb:80:db:0c:1c:ca:2c:26:
b0:0f:5d:a1:72:c9:7b:c1:71:4e:c3:a9:42:cb:ef:
2a:12:b4:c9:7e:e9:cf:07:c7:c0:59:39:ba:c4:ac:
ea:40:02:17:49:1e:92:b8:44:f1:d8:02:7b:d4:7e:
07:99:ac:8e:74:5a:d9:3b:80:1b:65:60:4a:e8:8a:
f7:65:0a:80:36:3a:0b:18:95:41:13:43:13:df:f4:
84:f6:73:86:16:a3:28:f7:57:f0:e2:21:5f:9e:c1:
e6:f8:84:ed:26:9a:f9:78:6d:6c:df:b4:87:60:c0:
36:55:90:24:18:0b:d6:9e:ef:ec:83:1b:ba:e3:ee:
a8:1b:c5:ba:cb:f5:d5:8c:65:43:55:aa:e8:ed:32:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:47:1D:98:B7:28:16:3E:06:0E:A7:BB:5B:41:DB:6E:C0:28:5E
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/zYNHHZi3KBY-Bg6nu1tB227AKF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.182.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2d:d8:3d:d7:4d:f3:da:44:3a:7b:d9:78:7d:41:e9:9c:95:
fa:fe:6e:36:89:86:df:0b:c2:fa:e0:9b:ef:25:38:ab:ce:f2:
56:30:38:7e:08:8c:80:b1:62:57:9f:5c:6e:5b:28:23:85:b4:
7b:02:c3:c0:cc:93:e7:09:93:1b:87:bd:be:2d:2a:48:af:f5:
e1:11:6b:27:de:df:cc:0a:a5:0e:04:d4:28:38:93:33:ab:92:
3f:6a:ec:77:4d:ec:2e:85:62:fd:36:95:77:5c:82:7c:72:e7:
cc:39:d1:70:07:eb:fe:31:07:fa:df:ae:89:88:54:54:00:ba:
6e:76:80:1f:64:2d:30:2e:7b:8d:23:b4:66:e9:d2:b1:e3:5b:
ee:c0:2c:9f:71:ed:26:66:d7:ac:fb:65:8a:9c:f8:0f:f3:dd:
65:a7:99:d9:8f:4d:e4:58:4b:b2:66:e3:06:58:95:77:e0:6e:
7f:5c:5b:62:03:25:6e:5a:a1:b8:5b:e1:5a:a3:df:16:1f:24:
54:40:92:c5:3d:48:3e:fb:9f:bb:9a:7b:8c:84:1d:3e:cc:60:
18:76:0e:7b:6c:58:f6:9e:96:d3:8b:37:4f:4e:6c:13:fb:c9:
06:51:b7:89:f0:38:db:06:d8:ed:26:b0:5a:20:17:c0:36:81:
3c:09:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:33 2024 by rpki-client on console-fra.rpki-client.org