Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/C2_OSj7f5gam7QjhlByKLUR-vtQ.roa
File: C2_OSj7f5gam7QjhlByKLUR-vtQ.roa (raw, json)
Hash identifier: KrrFvIXfSvaGAL2g6/QHzKiaDyzrLdPSR4A/2YugvQU=
Subject key identifier: 0B:6F:CE:4A:3E:DF:E6:06:A6:ED:08:E1:94:1C:8A:2D:44:7E:BE:D4
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018F6384C5C6507ACB1F5B98ECAE10EF39B7
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/C2_OSj7f5gam7QjhlByKLUR-vtQ.roa
Signing time: Fri 10 May 2024 17:19:56 +0000
ROA not before: Fri 10 May 2024 17:19:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 93.114.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:63:84:c5:c6:50:7a:cb:1f:5b:98:ec:ae:10:ef:39:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: May 10 17:19:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b6fce4a3edfe606a6ed08e1941c8a2d447ebed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:cc:86:bc:4d:fe:f8:7e:ae:2b:3e:c4:90:
d0:ea:ee:d4:eb:c0:3b:00:07:68:ea:99:81:b2:27:
72:6a:b1:ae:48:21:ac:1e:7b:37:47:76:8b:a3:40:
09:2f:34:7c:9d:f1:88:f1:8b:f6:77:46:90:a3:ab:
57:64:90:d8:2d:b4:13:76:f5:fe:28:4a:62:d1:5b:
d5:db:b7:7b:d4:68:c2:4d:70:24:0a:6a:d5:5a:d9:
a5:d3:c0:1e:88:e4:a3:2f:c2:32:bf:b1:be:09:4c:
6f:f5:76:c5:d8:38:07:12:94:62:80:8a:28:a5:66:
3c:90:a5:54:df:7c:ba:1b:7d:3f:2b:45:d9:49:88:
b0:a6:5b:8a:43:2e:88:eb:27:a1:7d:47:e2:f3:db:
4c:ff:a4:76:06:ef:fb:f9:6e:6a:14:79:be:51:b8:
33:a0:1c:5a:a4:42:3a:ff:bf:a5:12:14:29:a1:02:
5c:72:b6:51:47:b9:60:83:c0:c6:f6:f6:e8:fc:ba:
df:7c:3e:fb:78:b1:62:33:bb:9e:4c:38:59:72:8f:
ca:47:b7:fd:cf:e1:54:38:af:94:64:86:fa:f6:3d:
91:4e:fb:48:f7:cc:fe:19:22:1b:b5:d7:c4:40:8d:
f4:e4:c6:65:2e:5c:77:3b:2c:24:d0:1b:06:fc:f1:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:CE:4A:3E:DF:E6:06:A6:ED:08:E1:94:1C:8A:2D:44:7E:BE:D4
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/C2_OSj7f5gam7QjhlByKLUR-vtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:68:d7:2b:d1:e0:1a:a2:a9:22:13:5e:73:8f:4e:80:cf:17:
3f:b2:b2:71:8d:6d:c2:39:b7:7a:2a:ab:c3:29:b0:f8:5f:d6:
59:4b:f2:1e:3a:a0:38:72:81:f0:43:f0:c8:7f:7d:d4:23:20:
85:d2:11:ec:a7:e0:65:3e:9b:05:86:ac:dd:59:22:49:6c:fc:
c8:ad:e7:54:70:ea:c7:a2:07:01:da:02:54:ef:bc:76:5c:59:
78:e2:60:ea:12:d2:94:64:c1:f6:2f:53:a2:25:15:aa:72:26:
23:2c:e4:cc:4a:c6:76:d3:51:04:65:0f:62:03:1c:31:4a:80:
f4:bc:a2:37:32:04:50:8e:fb:d5:ac:59:68:77:d1:aa:90:97:
ab:58:67:6e:39:cc:39:f4:f9:d1:1a:8d:1b:b2:48:d3:f1:83:
0d:de:75:2f:df:33:5b:85:8c:a0:fe:2b:e7:78:d0:6e:d9:51:
a5:58:4b:94:e5:63:e1:64:6a:84:c1:52:dc:cc:cf:d9:f5:0c:
bf:00:62:c3:38:b1:7b:13:f7:a6:52:49:91:ab:45:35:32:ec:
25:5b:ec:f6:2f:31:c6:f1:ed:2a:6d:6b:d9:db:79:d8:c6:e1:
be:d9:14:78:d2:70:c3:15:c4:d2:88:8b:76:4b:ad:60:a1:5d:
07:40:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 12:52:51 2024 by rpki-client on console-ams.rpki-client.org