Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/DQQ3vvUuIud-VpLDRi9nTvmR1k4.roa
File: DQQ3vvUuIud-VpLDRi9nTvmR1k4.roa (raw, json)
Hash identifier: hj2RsD9jsYLwrnpznbFrCsHF2QQaIWZcn6/XeLPtELc=
Subject key identifier: 0D:04:37:BE:F5:2E:22:E7:7E:56:92:C3:46:2F:67:4E:F9:91:D6:4E
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 0185737A9853A934312C68258116D49394FC
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/DQQ3vvUuIud-VpLDRi9nTvmR1k4.roa
Signing time: Mon 02 Jan 2023 17:14:52 +0000
ROA not before: Mon 02 Jan 2023 17:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 94.158.191.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:98:53:a9:34:31:2c:68:25:81:16:d4:93:94:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jan 2 17:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d0437bef52e22e77e5692c3462f674ef991d64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:90:c7:3d:73:e0:af:ce:25:c0:33:4e:c1:
6f:7b:63:35:4a:03:d9:e4:22:4b:9f:6d:29:1e:bd:
d1:47:22:bf:8d:79:5d:bf:2b:d9:13:d6:12:10:dd:
dc:25:c5:ae:28:74:e7:47:d3:3b:f9:5f:62:d2:7f:
1f:f2:68:7f:11:d7:aa:82:c4:cf:36:70:d5:bf:39:
0f:15:98:8c:61:32:7d:6d:50:56:36:bb:4c:fe:c5:
46:98:a3:fe:08:05:84:5e:95:50:0b:f2:cb:66:4b:
05:22:c1:d3:18:92:67:a7:38:b0:c2:b2:1c:01:31:
86:25:0a:fd:88:e1:7e:05:0e:39:e3:0a:5b:d7:db:
38:39:5f:86:0d:70:32:eb:de:42:31:50:0d:77:01:
e1:b0:5e:52:ea:4f:b5:95:ac:dc:c8:60:28:e9:65:
ae:25:00:77:01:b1:8b:6b:b6:89:cb:5d:97:d1:eb:
b3:29:ec:c8:0d:c3:5f:66:27:c4:cb:69:33:1f:8d:
d5:75:e7:7e:4f:30:32:95:17:33:da:70:88:62:cb:
e1:0e:b9:b4:38:51:3b:67:4b:0c:fc:1e:41:b2:3b:
7d:06:81:58:1b:9b:2b:74:29:be:0d:df:90:27:61:
2d:ee:f2:8d:d2:c1:fd:94:4c:32:81:7b:84:c0:62:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:37:BE:F5:2E:22:E7:7E:56:92:C3:46:2F:67:4E:F9:91:D6:4E
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/DQQ3vvUuIud-VpLDRi9nTvmR1k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.191.0/24
194.32.243.0/24
Signature Algorithm: sha256WithRSAEncryption
33:17:7b:9b:33:14:6c:60:7e:5c:f4:58:10:ec:3b:92:e6:a8:
76:51:9d:de:9b:9b:94:72:d5:d1:ed:28:71:1d:ff:d1:52:39:
8f:b7:05:2d:47:b2:34:f5:38:27:1f:e9:16:d4:18:37:99:14:
a2:40:98:40:ee:98:b7:8b:ae:54:8e:a5:3b:af:3e:29:66:da:
78:2c:d3:5e:ac:81:b1:15:b1:c4:99:0c:b9:aa:bd:48:12:ea:
90:22:9f:0a:bd:6e:08:18:8f:a9:31:6a:36:46:05:b1:22:7d:
97:36:77:a4:41:07:c0:25:85:e6:87:44:e6:5c:71:a7:04:3e:
70:ff:a9:7b:aa:9a:cb:73:21:68:31:0d:10:9e:4e:d0:2e:45:
2d:5d:25:b4:0b:6a:ad:88:71:3a:cf:61:ab:63:7c:a0:82:b7:
3d:f3:cd:fc:ea:55:78:c4:7a:79:b2:0a:78:b5:40:81:a4:2d:
78:46:cc:d2:9f:09:52:67:e0:3e:c6:a7:bf:bb:b1:a0:0b:f1:
ac:6a:b8:d2:0c:86:4f:2b:84:84:ec:bd:bb:42:5e:2b:1a:21:
c3:de:15:69:15:96:c2:2b:50:6b:72:f1:a6:db:87:76:e7:27:
4b:74:6f:e0:73:74:92:45:9b:20:71:6f:aa:e4:c3:4a:11:29:
cb:a9:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 12:57:08 2023 by rpki-client on console-ams.rpki-client.org