Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/6A009SOxqvRFlOr5d_5IWMK1Y6k.roa
File: 6A009SOxqvRFlOr5d_5IWMK1Y6k.roa (raw, json)
Hash identifier: lMo0mnzhDFTAr29I3kbQFZVwU5NxrUr4gb3LYptVBKI=
Subject key identifier: E8:0D:34:F5:23:B1:AA:F4:45:94:EA:F9:77:FE:48:58:C2:B5:63:A9
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0182FC9A9FEC70BD46960F6FF9B1799E2A38
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/6A009SOxqvRFlOr5d_5IWMK1Y6k.roa
Signing time: Fri 02 Sep 2022 05:09:28 +0000
ROA not before: Fri 02 Sep 2022 05:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23033
IP address blocks: 194.62.166.0/24 maxlen: 24
193.42.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fc:9a:9f:ec:70:bd:46:96:0f:6f:f9:b1:79:9e:2a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Sep 2 05:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e80d34f523b1aaf44594eaf977fe4858c2b563a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:37:c1:da:63:f9:94:51:d2:0b:33:e0:e3:
c4:8f:5a:23:dc:b3:8a:43:a9:3f:7c:0f:ec:4b:d6:
f0:3c:5e:f2:6f:3d:a9:24:a7:2d:a8:9c:d0:24:5e:
1e:26:e4:bd:9f:72:a3:81:fa:06:9c:e0:93:b4:41:
09:49:32:c2:51:d8:1d:e1:e7:3a:ab:fb:41:7d:f0:
68:49:1a:01:b3:8a:cc:ff:1d:17:4e:22:1d:b6:9b:
64:2b:96:cc:bb:e1:fc:5b:9a:06:30:60:8a:78:97:
01:9b:99:e4:02:01:51:96:53:46:a6:4f:b5:40:1b:
96:64:0f:d1:f5:a0:1a:01:4d:90:e2:45:39:03:5a:
fa:c1:33:69:37:1c:98:34:4b:9f:62:c5:00:02:6b:
79:5e:5a:71:c1:3c:31:01:1f:c5:0a:5c:5e:cd:ff:
94:14:fb:e0:b3:2d:1b:75:97:49:a7:4b:e5:0d:97:
1f:ea:f6:bc:41:8f:51:e9:6e:96:8d:15:e0:93:8e:
ea:e9:7d:86:bf:c7:e9:32:8b:c6:b4:0b:e1:a2:ae:
40:15:81:0c:28:60:cf:e6:19:88:3e:c5:15:9d:f7:
82:91:e2:d5:7a:7e:f5:db:f6:3d:a9:91:e4:90:7f:
81:9e:27:22:dc:3e:52:7c:12:2d:0a:e8:47:58:54:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0D:34:F5:23:B1:AA:F4:45:94:EA:F9:77:FE:48:58:C2:B5:63:A9
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/6A009SOxqvRFlOr5d_5IWMK1Y6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.244.0/24
194.62.166.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ec:6a:c0:61:4d:47:fe:18:a9:ed:dd:28:2a:23:4d:2d:f1:
1f:be:50:68:42:bd:7d:1d:92:9a:f8:87:e0:e2:27:ed:20:88:
10:1c:ba:4a:4d:9e:63:56:31:12:92:4f:cc:77:4a:65:3b:0c:
ef:1f:71:16:51:2a:22:e2:e0:24:6e:8f:33:95:ac:19:96:69:
57:e5:08:39:5f:04:09:71:a4:84:78:fd:d7:64:47:6c:ca:51:
d9:29:88:f4:e8:23:7f:6a:74:41:f2:f3:8c:a3:8e:1f:c7:be:
08:ae:8b:39:d3:0b:c9:59:9a:e1:ed:16:3d:22:b2:20:7c:41:
57:24:24:3a:8f:c8:3d:74:cf:f7:59:49:57:73:76:01:b9:0f:
a4:66:1a:e4:9e:ff:18:fb:32:ba:99:fa:a9:e9:1a:c0:9d:90:
1d:7e:d6:1f:82:38:a0:85:0f:b6:82:6b:88:09:e4:0e:fb:85:
40:a1:39:c4:a4:1d:1b:4f:41:ca:34:ab:1d:6c:17:2b:a4:ce:
64:54:b3:cd:b6:97:fe:3b:1a:1e:d4:70:24:bd:c9:c7:cf:fe:
13:58:58:9f:94:f0:3f:ee:bb:ed:89:88:ec:da:1b:54:e2:0e:
75:a6:10:50:4d:df:53:91:a5:4d:f8:bb:dc:f8:85:ad:91:6c:
60:a0:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:17 2024 by rpki-client on console-ams.rpki-client.org