Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/faVjT2bfGXvibZ9KGBnJmBdok7Y.roa
File: faVjT2bfGXvibZ9KGBnJmBdok7Y.roa (raw, json)
Hash identifier: RkinMIJfPxzXEN13+MuxpWx/rvRtWW7VnJzUdIXUwyc=
Subject key identifier: 7D:A5:63:4F:66:DF:19:7B:E2:6D:9F:4A:18:19:C9:98:17:68:93:B6
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0185708CA742C484BE5EFE92B08E61976B22
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/faVjT2bfGXvibZ9KGBnJmBdok7Y.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23033
IP address blocks: 194.62.166.0/24 maxlen: 24
193.42.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a7:42:c4:84:be:5e:fe:92:b0:8e:61:97:6b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7da5634f66df197be26d9f4a1819c998176893b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:d1:da:c2:7b:3b:f5:89:15:4b:3f:eb:76:
6e:cd:d7:b8:c4:ae:6b:da:01:8a:d9:22:a4:58:86:
40:57:68:01:25:04:39:98:6f:c5:42:70:cf:e4:f3:
fd:af:98:89:b0:1b:dd:8c:a1:f5:ac:05:d3:56:7e:
e6:5f:7c:5d:86:93:ac:6a:7c:5a:3f:6e:a5:31:3e:
e1:b1:26:a3:20:75:71:eb:f5:01:24:9d:58:f6:ab:
b7:68:bd:05:5d:ac:bf:8a:1c:30:27:33:9d:7e:30:
d4:27:e2:b5:2c:4b:cf:bc:95:d2:7d:ae:27:93:ab:
e0:40:26:e8:12:79:ef:14:65:53:d4:08:9c:8d:a9:
2a:3e:76:03:d0:22:e5:49:cf:5b:d3:27:68:83:ae:
11:25:5b:5d:85:94:67:1b:33:78:90:c2:0f:dd:c1:
cd:93:47:87:0b:b3:c3:f1:49:29:fa:5a:e8:3f:29:
53:dc:83:05:15:ea:10:b2:63:e3:a0:2f:75:4d:56:
aa:0e:50:1c:d0:b6:6a:5b:7b:89:5f:fb:0d:9a:76:
cc:7c:62:e2:c3:24:41:78:7d:82:15:e9:30:e2:a0:
a2:7c:3e:c4:dc:c8:2b:ce:18:9e:f0:5f:79:e5:5f:
d2:83:c3:b8:8d:61:7c:b7:ff:41:bd:ef:83:5b:f9:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:63:4F:66:DF:19:7B:E2:6D:9F:4A:18:19:C9:98:17:68:93:B6
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/faVjT2bfGXvibZ9KGBnJmBdok7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.244.0/24
194.62.166.0/24
Signature Algorithm: sha256WithRSAEncryption
58:0f:99:7a:1b:c4:8c:dd:8f:3f:09:34:bc:8b:18:fd:08:16:
95:e2:21:1a:15:f4:a0:53:e5:e5:93:34:cc:4a:1c:7c:8b:7f:
f2:38:ca:26:2d:96:de:34:4a:20:79:10:cf:df:15:73:d8:69:
e4:65:70:01:fd:a5:ad:aa:d7:20:f3:3a:f4:d1:45:91:44:9b:
f5:d5:93:fb:71:84:2d:c7:db:c4:30:85:da:7a:ea:9b:95:5d:
95:57:c4:d7:80:99:d0:03:93:9a:38:28:52:c1:9b:17:b3:53:
39:d8:8a:56:c1:d4:15:ac:97:47:f2:aa:e9:af:9b:73:c4:6a:
41:44:d6:d9:f7:d6:eb:44:1d:56:91:f9:ea:3c:cf:0c:5d:bf:
fe:5c:d3:a9:bb:4d:9e:89:76:61:e6:4f:52:3b:b3:db:8b:59:
d2:8f:6b:82:bd:cd:7e:de:26:b6:dd:24:1b:b7:ef:df:b9:5a:
c2:a0:7c:4b:bb:9b:25:62:b8:2b:34:d1:7b:95:70:74:99:c7:
35:0d:76:cd:a4:1b:f6:09:7a:ed:3b:32:dd:4a:a7:90:e3:a1:
4a:eb:13:e8:a9:94:e4:a5:ea:f4:61:a3:b7:5a:a8:8d:63:13:
20:30:ea:12:e9:d0:d6:15:be:d2:8c:0c:18:fc:c7:a0:3b:36:
8c:f3:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org