Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/nznwdv64NE12ziDW7yEP449Ofaw.roa
File: nznwdv64NE12ziDW7yEP449Ofaw.roa (raw, json)
Hash identifier: 8agQN5tajJ3KQd+/0MrtK39+oLf/wAUp38l9bMUlU+M=
Subject key identifier: 9F:39:F0:76:FE:B8:34:4D:76:CE:20:D6:EF:21:0F:E3:8F:4E:7D:AC
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0182FC9AA0E0DEFFA42E72E999F3FE4EC2C4
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/nznwdv64NE12ziDW7yEP449Ofaw.roa
Signing time: Fri 02 Sep 2022 05:09:28 +0000
ROA not before: Fri 02 Sep 2022 05:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 27323
IP address blocks: 194.62.166.0/24 maxlen: 24
193.42.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fc:9a:a0:e0:de:ff:a4:2e:72:e9:99:f3:fe:4e:c2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Sep 2 05:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f39f076feb8344d76ce20d6ef210fe38f4e7dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5c:34:29:8b:3a:38:dd:58:7e:68:04:ea:f0:
97:e8:a4:12:13:ae:62:f2:01:d9:9f:af:ca:53:54:
e0:9b:24:8e:5f:59:2a:8c:d5:81:a6:bd:bf:e9:62:
99:d3:b1:dc:b6:6d:c9:39:a7:aa:0a:36:00:41:10:
8b:72:39:8b:7c:fa:d9:ad:41:65:ae:84:f2:d7:85:
26:1a:84:8e:39:ae:c2:d4:09:28:5e:3c:11:59:b1:
0c:26:d3:65:50:25:db:a6:b7:1e:d9:24:a2:ac:9e:
b5:fe:f0:77:61:df:54:0f:10:e5:f0:0f:be:b9:f8:
31:42:59:16:62:ac:67:b7:f5:8b:06:98:ba:19:25:
0e:c6:e1:02:d1:9b:d4:c8:d9:bf:5f:cd:06:20:e5:
1d:d2:e1:32:20:a5:9f:78:5d:df:0d:e6:4e:41:53:
e4:4c:16:c8:f1:1c:ce:4c:8f:a3:65:46:be:f6:84:
ab:1d:5a:da:3c:c6:82:fe:fa:65:4a:4f:33:65:70:
07:98:2b:56:b4:15:54:79:0c:9d:24:bf:d6:5c:fd:
08:39:29:9e:c8:31:8c:20:8a:b4:6e:29:e6:4e:45:
98:aa:ba:ad:e1:7b:5e:0c:f2:ce:02:23:fa:ab:8a:
dc:50:31:9d:74:1f:9c:d1:7c:af:f7:0f:8a:7b:bf:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:39:F0:76:FE:B8:34:4D:76:CE:20:D6:EF:21:0F:E3:8F:4E:7D:AC
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/nznwdv64NE12ziDW7yEP449Ofaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.244.0/24
194.62.166.0/24
Signature Algorithm: sha256WithRSAEncryption
48:52:ed:b2:a2:87:e1:5b:04:e1:34:fa:84:1a:7d:53:b5:f2:
f2:3c:fc:cf:45:8e:98:89:73:a4:b1:d6:16:f0:ee:2c:b9:fa:
5a:f0:ff:cc:85:50:17:5c:ee:5e:d0:a2:68:57:74:e3:b7:2b:
25:e6:9b:d3:dd:1b:84:d2:2c:86:3b:94:bf:ee:87:ba:70:7f:
f9:20:32:c9:d2:e8:10:ba:46:dc:7a:05:1c:d3:3f:e3:fe:c3:
75:da:c4:1e:7a:90:6b:34:6e:ba:1d:5d:c8:dc:41:e4:f5:ce:
d5:4f:e2:29:02:59:e2:3d:2c:e4:4c:e6:a3:3e:8e:a2:2c:79:
18:69:ef:1e:b5:cf:37:56:8c:0c:16:0b:72:38:4c:ec:89:d2:
0d:80:4a:a2:12:9a:ea:b4:fa:12:8f:21:82:3b:d1:65:d1:58:
de:53:cd:2e:8b:42:18:bc:24:d1:bd:1e:42:32:3e:4f:f1:4c:
49:6c:76:4b:04:31:4f:0b:09:54:6c:5a:2a:7b:14:a4:0a:74:
f5:8c:e9:d3:8d:3c:12:f3:fb:b7:c1:e0:e6:c9:7e:0b:d9:e7:
46:8b:33:c8:71:96:74:68:bc:f7:91:67:0d:19:b1:5a:0b:09:
7f:af:30:88:3b:88:2c:90:c8:fb:ac:40:21:68:49:3b:6c:48:
dc:a7:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org