Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/sCmDxUH_BIbV3ox4YqnCdyyMxsY.roa
File: sCmDxUH_BIbV3ox4YqnCdyyMxsY.roa (raw, json)
Hash identifier: QsWMjv43NUaRWoVa/lmKg8hrca+6Dmo/3aDVDFTaRo0=
Subject key identifier: B0:29:83:C5:41:FF:04:86:D5:DE:8C:78:62:A9:C2:77:2C:8C:C6:C6
Certificate issuer: /CN=b4a09c900a8578bd029d04de93a7ff3047d38f83
Certificate serial: 018CC6B82F4A844A0AA6D4D1002DA2E6B7AE
Authority key identifier: B4:A0:9C:90:0A:85:78:BD:02:9D:04:DE:93:A7:FF:30:47:D3:8F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKCckAqFeL0CnQTek6f_MEfTj4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/sCmDxUH_BIbV3ox4YqnCdyyMxsY.roa
Signing time: Mon 01 Jan 2024 20:30:08 +0000
ROA not before: Mon 01 Jan 2024 20:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 94.143.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:2f:4a:84:4a:0a:a6:d4:d1:00:2d:a2:e6:b7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a09c900a8578bd029d04de93a7ff3047d38f83
Validity
Not Before: Jan 1 20:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b02983c541ff0486d5de8c7862a9c2772c8cc6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ea:91:39:09:5c:6f:12:d2:a7:72:4c:3a:1f:
44:c7:df:b9:81:23:f2:00:30:ab:1f:fa:a3:d9:f3:
4e:f9:9c:3a:14:f3:cf:ca:c7:2a:00:fc:81:b8:3a:
e9:8f:39:f6:ec:14:39:66:83:9b:d5:14:f2:1b:47:
f7:ef:a1:94:e9:12:f7:c6:9f:bc:ea:94:a5:d9:68:
b4:4e:c3:81:b8:09:46:a9:0b:59:80:9c:3e:b3:7d:
90:87:4c:df:5c:a7:9d:f3:12:43:86:31:fb:5d:b6:
81:87:ef:31:5d:1f:c3:40:2d:eb:c1:ef:ae:5c:70:
aa:c7:f5:bc:d8:8b:47:b2:8c:db:0f:4f:3e:3d:40:
f6:f6:e2:b3:7f:b5:20:4e:cd:d7:d4:9c:62:5b:c6:
47:1c:59:4c:bb:d4:0c:c0:a4:69:a4:55:4f:3f:e4:
5d:7f:c4:32:90:03:c8:a0:68:56:9d:b2:08:19:12:
81:58:81:fd:53:af:db:fa:fc:57:de:35:e9:dd:b1:
b7:24:dc:38:d5:b1:d1:2a:53:12:ee:af:1a:52:66:
f8:6d:03:dd:bf:66:90:d5:25:0b:4a:a8:fc:60:ff:
09:bf:8e:0f:6c:79:53:f7:9c:42:6b:71:e1:8a:db:
28:0e:ca:7f:c1:03:7f:14:57:6f:dc:61:71:25:18:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:29:83:C5:41:FF:04:86:D5:DE:8C:78:62:A9:C2:77:2C:8C:C6:C6
X509v3 Authority Key Identifier:
keyid:B4:A0:9C:90:0A:85:78:BD:02:9D:04:DE:93:A7:FF:30:47:D3:8F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKCckAqFeL0CnQTek6f_MEfTj4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/sCmDxUH_BIbV3ox4YqnCdyyMxsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/tKCckAqFeL0CnQTek6f_MEfTj4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.226.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d5:10:3a:b1:f7:44:59:6b:6d:b7:15:72:9d:95:f7:3c:ee:
a1:91:6b:c1:21:a7:92:70:64:12:77:e9:c7:0e:72:0d:b6:35:
4d:d8:99:f1:28:08:af:af:bf:ee:02:5f:b5:cc:21:30:d4:cc:
94:fb:7f:9c:f7:ef:33:52:c3:87:5e:95:0e:81:53:01:1f:b6:
4f:7d:45:4b:ad:00:b3:7f:21:64:96:cb:a7:30:ab:49:cf:20:
23:1f:28:e2:82:64:b2:11:23:9c:e9:be:d6:46:3c:ce:a7:a8:
af:d0:3c:87:fe:c2:aa:6f:20:63:87:54:07:8f:00:f9:04:07:
7a:ba:f4:e1:ff:e0:f2:18:31:b4:45:4e:c6:01:19:2c:33:3d:
e6:f6:30:21:9d:50:ec:80:b7:06:6c:f0:19:56:38:ff:04:64:
79:cf:38:5e:cb:f8:d4:8a:c4:ac:87:0a:b3:a3:7e:c3:ff:c9:
88:4f:72:da:88:e1:0d:da:4f:45:ac:c8:21:ab:8a:a9:18:2e:
4e:4b:95:13:07:88:cb:b9:2a:9a:f7:ce:dd:ca:cc:d0:20:b3:
5b:a6:fe:ad:4b:51:d4:06:53:30:ac:cd:ce:5e:a2:2e:77:c9:
23:7a:30:75:8f:6c:78:fa:5d:df:c7:6d:50:b2:d5:a9:c8:43:
36:0d:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org