Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/DmhMdOASUYrJ_jTlA5FZQ3Un02o.roa
File: DmhMdOASUYrJ_jTlA5FZQ3Un02o.roa (raw, json)
Hash identifier: JAQinfYRFx+OIbS2IdD4Uch5ywD8HcH2k2PzHBRWZmw=
Subject key identifier: 0E:68:4C:74:E0:12:51:8A:C9:FE:34:E5:03:91:59:43:75:27:D3:6A
Certificate issuer: /CN=a7f1a0af5a7e92077ce3a2988d7976d1f5c74b19
Certificate serial: 0189CA20DBA154AEF99EC7A10B3CB07AC3ED
Authority key identifier: A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ggr1p-kgd846KYjXl20fXHSxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/DmhMdOASUYrJ_jTlA5FZQ3Un02o.roa
Signing time: Sun 06 Aug 2023 09:14:58 +0000
ROA not before: Sun 06 Aug 2023 09:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.29.58.0/24 maxlen: 24
194.29.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:20:db:a1:54:ae:f9:9e:c7:a1:0b:3c:b0:7a:c3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f1a0af5a7e92077ce3a2988d7976d1f5c74b19
Validity
Not Before: Aug 6 09:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e684c74e012518ac9fe34e5039159437527d36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:4b:19:98:c5:4b:31:23:05:ed:c4:d4:58:
e8:eb:e0:24:bb:f2:17:48:05:22:26:9f:78:85:d5:
39:4b:66:5b:26:78:e4:73:4b:a5:b6:30:d2:f2:38:
93:bd:d3:cc:07:b0:38:ec:ee:3e:db:67:4f:0d:ba:
5d:27:42:c0:32:91:fd:c7:42:0e:6a:02:50:62:1f:
f5:28:fb:bf:e2:ec:42:4d:1e:11:c2:ad:b8:9e:48:
08:16:98:20:6b:25:0d:24:4c:b2:4d:13:08:41:be:
8c:b6:2b:c0:3a:68:4b:e9:18:b7:14:9a:7b:41:5b:
07:5f:ff:fe:25:af:33:e4:77:b3:00:a1:98:46:f8:
08:dd:8d:e6:91:c4:e0:97:53:80:a6:49:c3:ca:c8:
3a:5b:f2:b0:29:f5:3c:34:56:8f:5b:d2:67:49:03:
d7:ea:39:cd:1d:eb:41:c3:7c:02:47:31:ac:65:dc:
f7:d2:d5:8d:14:73:d8:7f:90:16:79:95:c3:cf:4c:
16:56:04:41:96:f2:2e:2b:00:18:e9:03:c0:79:1c:
23:32:11:b9:6e:69:44:ae:2b:86:ff:a3:92:e9:43:
5c:85:12:b6:b6:33:a2:0d:36:9e:8e:d9:c0:8a:f8:
bd:dc:1c:49:37:97:e5:0a:ab:88:98:2f:99:c7:ca:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:4C:74:E0:12:51:8A:C9:FE:34:E5:03:91:59:43:75:27:D3:6A
X509v3 Authority Key Identifier:
keyid:A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ggr1p-kgd846KYjXl20fXHSxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/DmhMdOASUYrJ_jTlA5FZQ3Un02o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/p_Ggr1p-kgd846KYjXl20fXHSxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.56.0/24
194.29.58.0/24
Signature Algorithm: sha256WithRSAEncryption
37:07:46:5d:01:8c:4c:77:2a:71:6d:84:70:57:b8:7d:f3:43:
ba:f2:28:cd:cc:57:5f:55:91:7a:60:ee:52:38:07:6e:a6:d2:
c4:0b:7a:c4:51:e8:22:69:aa:d7:06:bb:eb:32:7f:f0:22:e1:
d3:b7:a3:6f:a1:be:f7:1c:74:58:4f:93:d4:9d:ae:ec:70:7b:
a9:02:d0:d2:68:0e:6b:c1:9e:df:71:fd:19:a5:10:2e:4e:99:
5a:c3:4c:e2:8e:12:d3:94:30:b4:d0:25:e7:b9:46:60:28:c9:
64:ce:b7:a8:81:41:88:51:64:b8:cd:0d:a1:bf:23:62:c1:82:
de:80:13:b5:84:d4:3a:c5:55:b1:e4:e6:99:1c:52:2a:92:ba:
de:c7:db:3a:f5:9c:12:d7:4d:a9:88:43:a0:44:15:31:24:84:
e0:80:81:f9:00:9f:98:4c:92:95:83:78:e8:47:86:05:a7:58:
e5:e4:29:80:7e:9c:fe:5e:68:bf:ed:eb:ca:5c:4d:b8:45:9b:
e6:6f:eb:49:7e:22:e0:21:70:e8:1a:12:14:48:8d:a6:1b:64:
0b:00:c3:a6:d7:39:dd:ba:cb:03:72:26:0b:88:04:53:f0:58:
4e:94:eb:cd:dc:d8:6d:bb:34:15:c4:e5:51:6b:1f:15:62:2d:
15:84:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 13:59:27 2023 by rpki-client on console-fra.rpki-client.org