Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/m_A7dOT9Tqs0YmgkNWjJgHzIvVc.roa
File: m_A7dOT9Tqs0YmgkNWjJgHzIvVc.roa (raw, json)
Hash identifier: vXA6jwLGc6on9R3BD+d28UFLU5fy8VuJgDGH3tkFiSw=
Subject key identifier: 9B:F0:3B:74:E4:FD:4E:AB:34:62:68:24:35:68:C9:80:7C:C8:BD:57
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D786080EEE3860DF0A27EE3E085B038
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/m_A7dOT9Tqs0YmgkNWjJgHzIvVc.roa
Signing time: Sun 01 Jan 2023 13:14:43 +0000
ROA not before: Sun 01 Jan 2023 13:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39368
IP address blocks: 194.31.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:60:80:ee:e3:86:0d:f0:a2:7e:e3:e0:85:b0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bf03b74e4fd4eab346268243568c9807cc8bd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:ce:53:a3:c0:e1:9f:d5:b4:2d:a9:3d:d3:
d1:94:48:bd:fe:25:8a:d6:02:62:fc:65:f0:91:e6:
28:e4:72:af:f7:34:6f:05:89:82:6e:80:86:32:de:
c5:2f:39:b8:14:61:e9:60:4f:6f:80:84:4c:8e:a2:
5a:85:2b:27:18:4f:63:49:b3:47:b0:7d:0f:cc:d1:
b3:22:59:40:91:1f:e0:33:f5:1a:11:c7:43:0d:68:
98:f3:43:df:aa:56:08:4b:ad:9f:25:8f:fc:8b:d1:
72:91:95:62:ac:ee:ab:3c:e2:50:f6:ce:2b:a7:71:
ac:5b:8f:6c:ee:e5:25:bb:96:e5:dc:d1:f9:b7:c6:
b2:5d:00:5b:6e:a7:f0:ba:1d:c5:17:6c:60:b6:92:
1c:62:9b:33:2e:95:f4:57:38:dd:7c:58:90:ae:2b:
ed:9d:7c:68:ee:91:a1:35:a9:37:1f:0f:ac:13:71:
20:85:be:61:58:70:c2:0f:b9:3a:e6:b2:ca:6f:fb:
61:41:28:80:af:3c:99:c9:5f:5b:67:63:91:c9:ae:
0d:7d:c1:dc:1c:4b:0a:0b:15:b4:07:31:c9:b7:48:
cd:78:1b:90:67:48:2c:a8:6c:c6:ee:90:9d:96:68:
02:64:18:8a:e9:a7:4a:33:d6:4a:fb:07:c4:16:0d:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F0:3B:74:E4:FD:4E:AB:34:62:68:24:35:68:C9:80:7C:C8:BD:57
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/m_A7dOT9Tqs0YmgkNWjJgHzIvVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.194.0/24
Signature Algorithm: sha256WithRSAEncryption
30:71:bf:72:dc:48:16:fc:4b:0f:2e:73:2a:a7:d5:77:23:79:
7c:2f:c7:e0:0f:2e:51:a2:14:5f:ef:be:1e:df:ec:4d:a2:a6:
a8:4e:e8:5d:36:2d:29:98:4c:4c:ba:67:75:79:80:32:26:e6:
0a:68:3b:b7:4d:2c:02:6c:e7:a0:3c:b1:65:f5:2e:40:4d:12:
0b:fa:d1:cd:35:a3:dd:7f:35:56:13:8a:19:a5:94:a2:58:6c:
df:66:7f:cc:ff:13:63:74:f2:ce:4a:18:d7:2c:5f:dc:12:0b:
d2:fe:6d:d4:d8:83:65:71:d9:19:2a:62:3f:10:60:c4:47:8a:
d9:a7:54:35:83:8f:d0:6c:d6:ca:c7:ed:27:7a:1b:d8:ea:33:
b3:dc:9c:74:fc:e4:41:b2:80:c0:56:46:fe:ab:08:9a:db:2e:
8f:1e:87:ae:c0:7e:a9:69:51:9a:82:1f:ad:bf:11:55:3e:69:
e2:59:c7:69:77:8e:2d:20:36:7f:8c:f6:4d:21:8d:31:8d:12:
ac:c8:f9:d0:c2:28:82:6c:74:f3:91:44:b5:75:22:c6:f7:c7:
b2:e2:a8:d2:ff:4f:eb:b5:fa:85:a4:e8:fe:b8:2f:fe:83:9c:
66:a3:a0:55:96:c7:ac:6b:ca:32:eb:14:32:b4:f9:ec:b4:b5:
33:ff:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:43 2023 by rpki-client on console-fra.rpki-client.org