Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/SXr8E8qU3KXTCLhWrikYFsAuHIU.roa
File: SXr8E8qU3KXTCLhWrikYFsAuHIU.roa (raw, json)
Hash identifier: U1KNe9apgDkwS3nlMAG7Jr75UAuHVcmBHIaYgIMvBeQ=
Subject key identifier: 49:7A:FC:13:CA:94:DC:A5:D3:08:B8:56:AE:29:18:16:C0:2E:1C:85
Certificate issuer: /CN=a7f1a0af5a7e92077ce3a2988d7976d1f5c74b19
Certificate serial: 01856DDD46E1A2DD32D5FA01ABE825EFB4A5
Authority key identifier: A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ggr1p-kgd846KYjXl20fXHSxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/SXr8E8qU3KXTCLhWrikYFsAuHIU.roa
Signing time: Sun 01 Jan 2023 15:04:56 +0000
ROA not before: Sun 01 Jan 2023 15:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.29.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:46:e1:a2:dd:32:d5:fa:01:ab:e8:25:ef:b4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f1a0af5a7e92077ce3a2988d7976d1f5c74b19
Validity
Not Before: Jan 1 15:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=497afc13ca94dca5d308b856ae291816c02e1c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:27:d2:1e:f2:89:f3:05:48:02:2c:f1:8c:
52:73:90:66:45:32:ec:01:07:99:b1:d8:f4:d1:95:
1b:92:be:09:79:0d:b2:38:c6:65:aa:37:59:4f:9f:
ea:50:01:45:3d:26:42:11:c5:0d:c5:18:fd:c1:93:
1a:6b:19:b1:8b:f5:73:e1:34:ce:df:06:65:52:fa:
2c:fc:85:cd:b0:58:e7:4c:d7:48:31:31:74:f0:2a:
45:a7:b1:c2:57:d4:3d:ab:e6:c2:95:b8:18:6c:33:
9f:cd:08:d5:11:bc:ed:c8:32:68:10:4b:91:b6:7e:
13:ff:03:a6:de:5c:b4:d5:5e:ff:16:b7:2c:70:b1:
81:c8:ae:03:28:17:00:74:da:f6:ff:16:a5:c9:b8:
ce:6f:9a:61:e7:7f:9f:e6:8f:03:57:20:ab:67:be:
6e:b3:87:cc:43:c9:d2:f1:6a:3a:4c:5f:11:8b:0d:
47:b9:09:34:6b:19:84:e5:64:34:e7:76:66:be:08:
3a:37:19:5d:38:d8:67:d2:dd:69:f5:12:75:4a:28:
7d:e4:27:29:83:ef:cf:96:f2:d9:79:ba:fd:e3:fe:
a8:1e:34:24:b9:b1:1b:9d:b3:60:97:54:f6:a7:6b:
38:17:c4:d9:fd:3f:ae:1f:84:f9:2d:b5:4c:51:a3:
4c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7A:FC:13:CA:94:DC:A5:D3:08:B8:56:AE:29:18:16:C0:2E:1C:85
X509v3 Authority Key Identifier:
keyid:A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ggr1p-kgd846KYjXl20fXHSxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/SXr8E8qU3KXTCLhWrikYFsAuHIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/p_Ggr1p-kgd846KYjXl20fXHSxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.58.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b8:fd:3f:17:50:74:83:c3:2f:b7:f7:e9:0d:2c:a4:92:2c:
77:44:b0:37:c9:c6:fb:1a:d7:b1:63:1d:f9:a8:67:6e:5c:7d:
b8:00:c7:38:0c:4f:57:1a:63:0b:50:8a:d3:06:3b:85:a9:e4:
a0:3e:36:4a:50:1b:90:55:29:03:ef:f2:c6:13:cc:16:c8:d0:
77:a1:41:44:26:ad:b1:b9:09:09:52:de:f0:6b:5e:5a:d3:08:
74:9e:e6:7e:e2:b7:34:96:31:16:31:92:24:c3:b2:ff:a1:14:
a4:d6:bc:c1:60:5e:7a:62:59:e7:a5:e6:c4:16:3c:cd:7e:7e:
8d:2f:d2:22:1f:df:cc:7b:2f:ee:21:ca:88:1b:75:f9:ae:44:
de:9d:d9:c4:98:5e:62:09:0d:3d:06:98:75:1a:66:96:f4:71:
be:43:11:49:2c:ab:f8:82:50:4a:09:51:30:26:11:40:38:e4:
5b:c9:8d:c9:5f:10:44:d9:6b:16:7b:c5:ec:e3:1f:ee:4a:0b:
45:2a:68:82:13:56:c9:70:b4:d2:5a:8f:88:6d:5a:0e:98:c6:
f9:96:1f:3b:83:9e:9e:49:96:ca:74:6e:54:52:1a:a6:5e:34:
85:60:f0:53:34:8e:36:d8:4b:6b:a6:e6:2a:b7:3b:f1:d0:a3:
8a:73:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:35 2024 by rpki-client on console-ams.rpki-client.org