Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/lk1943kjSKqmpVTc7_17qQd7rY4.roa
File: lk1943kjSKqmpVTc7_17qQd7rY4.roa (raw, json)
Hash identifier: xTqSa62BwwydIGmkKDyGyO9Sgq4vGxkTZDkk+xxC+6w=
Subject key identifier: 96:4D:7D:E3:79:23:48:AA:A6:A5:54:DC:EF:FD:7B:A9:07:7B:AD:8E
Certificate issuer: /CN=9ebdf4eb6ff79123e17ddf3f5018133f41c1d1b4
Certificate serial: 01856D0A7F80E537EEB033C293BCF2E175C1
Authority key identifier: 9E:BD:F4:EB:6F:F7:91:23:E1:7D:DF:3F:50:18:13:3F:41:C1:D1:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nr3062_3kSPhfd8_UBgTP0HB0bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/lk1943kjSKqmpVTc7_17qQd7rY4.roa
Signing time: Sun 01 Jan 2023 11:14:42 +0000
ROA not before: Sun 01 Jan 2023 11:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211183
IP address blocks: 94.154.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:7f:80:e5:37:ee:b0:33:c2:93:bc:f2:e1:75:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebdf4eb6ff79123e17ddf3f5018133f41c1d1b4
Validity
Not Before: Jan 1 11:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=964d7de3792348aaa6a554dceffd7ba9077bad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:fe:b2:cf:4c:c1:35:39:73:a4:1c:7a:9d:
00:88:ff:26:02:c2:be:e7:21:a4:0b:e6:75:25:88:
b6:fa:f0:f6:20:69:53:38:11:a3:17:c9:c1:ca:6a:
de:6f:2f:74:54:59:e7:f9:2a:0f:f6:96:9c:5d:e8:
90:cc:6c:a3:ca:a5:3f:5b:6a:88:19:5e:2e:f6:4c:
3f:ce:45:f6:31:ab:b3:e4:d1:f9:e0:c1:81:8e:83:
b2:22:7f:43:2c:85:6d:53:ba:1a:e6:ec:17:fe:d0:
4f:06:22:f3:65:12:bd:5f:d7:f9:8f:2f:9a:18:25:
3b:65:73:77:4b:b9:86:ce:9b:19:bc:e7:fc:2b:2f:
ac:7d:4b:53:96:8e:1e:19:e7:8e:3b:d3:08:12:7a:
6b:8e:1a:fa:9b:ae:fe:8b:97:47:d4:9c:18:a0:e9:
6a:af:fe:cc:ec:7a:56:61:77:34:2f:26:39:4e:24:
f1:f0:66:9f:82:4f:b8:86:10:bf:b4:8c:a2:37:22:
c1:20:15:8b:d4:7d:b5:4a:f7:66:f5:08:d6:a4:13:
e2:a5:0c:16:ff:33:ba:6d:f1:84:35:44:01:47:08:
33:63:1e:71:9b:41:df:4a:11:b9:0c:44:fd:9b:7c:
34:6c:bf:d3:fb:70:aa:80:bf:b4:bb:84:f3:83:49:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:7D:E3:79:23:48:AA:A6:A5:54:DC:EF:FD:7B:A9:07:7B:AD:8E
X509v3 Authority Key Identifier:
keyid:9E:BD:F4:EB:6F:F7:91:23:E1:7D:DF:3F:50:18:13:3F:41:C1:D1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nr3062_3kSPhfd8_UBgTP0HB0bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/lk1943kjSKqmpVTc7_17qQd7rY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/nr3062_3kSPhfd8_UBgTP0HB0bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.11.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f3:8e:f9:df:57:f8:d9:c0:3f:7c:85:e8:f9:0a:de:9a:3c:
fc:5b:48:0e:f8:7d:e3:c5:67:f0:cc:34:9d:86:e5:45:59:b7:
0b:ca:bf:50:e7:f7:d8:ba:e2:f9:67:d9:47:07:9c:08:77:52:
36:87:db:e2:10:47:29:fc:4e:08:82:7b:43:9b:dd:a1:ae:2c:
44:d9:b6:80:c0:9b:24:82:ad:80:cf:09:1a:9b:6d:b7:42:17:
34:57:2d:a5:c4:38:92:a9:03:d9:40:ad:bc:13:22:02:cf:60:
50:13:51:7f:b7:51:15:e1:91:16:ce:9a:5e:2a:e0:15:8b:ee:
28:6b:9b:51:d7:96:78:cb:b6:b7:eb:84:ea:b4:91:ce:cb:e4:
70:11:d2:76:ac:58:2c:79:ea:9c:45:7d:d1:fc:e7:d2:7b:01:
31:60:3a:2a:02:32:32:47:97:3d:35:13:d9:03:65:11:d4:d0:
74:19:2c:92:dc:78:aa:3a:6a:61:55:e4:f5:77:3f:e9:47:4f:
47:fe:cf:39:87:82:c4:10:db:05:da:c6:54:5f:1f:c7:df:ea:
40:82:d4:9c:73:6c:36:41:a0:e1:2b:3d:06:08:c0:d8:25:24:
27:0d:57:ca:34:da:16:96:e2:e0:f4:d1:f7:c4:a2:ab:91:0f:
77:dc:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:01 2024 by rpki-client on console-ams.rpki-client.org