Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/q_wCAV3zMZw5f2LlCahS5KrMiyk.roa
File: q_wCAV3zMZw5f2LlCahS5KrMiyk.roa (raw, json)
Hash identifier: lFXviy1eFvcxG5INJZOq4scww8TkUAQKbbooJ8MfyGs=
Subject key identifier: AB:FC:02:01:5D:F3:31:9C:39:7F:62:E5:09:A8:52:E4:AA:CC:8B:29
Certificate issuer: /CN=9ebdf4eb6ff79123e17ddf3f5018133f41c1d1b4
Certificate serial: 013F73
Authority key identifier: 9E:BD:F4:EB:6F:F7:91:23:E1:7D:DF:3F:50:18:13:3F:41:C1:D1:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nr3062_3kSPhfd8_UBgTP0HB0bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/q_wCAV3zMZw5f2LlCahS5KrMiyk.roa
Signing time: Fri 28 Jan 2022 06:21:56 +0000
ROA not before: Fri 28 Jan 2022 06:21:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211183
IP address blocks: 94.154.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81779 (0x13f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebdf4eb6ff79123e17ddf3f5018133f41c1d1b4
Validity
Not Before: Jan 28 06:21:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abfc02015df3319c397f62e509a852e4aacc8b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:e4:fa:98:85:01:43:b0:c8:d7:78:ca:7a:
b2:66:3c:2d:0a:39:05:9f:47:3d:37:c0:af:b6:f4:
4f:9c:13:13:2f:f0:1e:09:4a:f5:9d:ab:4e:ba:46:
64:75:18:20:67:be:ca:f6:be:1a:d0:74:f7:fc:69:
f8:5d:b7:87:a1:7a:8e:28:f3:16:1d:5d:de:ef:11:
71:3f:c1:a4:a9:29:a6:86:0c:e3:ff:32:7e:a1:22:
e9:09:12:c2:d2:92:1e:75:e9:aa:22:15:75:8e:76:
85:4f:1a:06:33:07:dc:54:ea:98:da:52:2d:ef:81:
45:41:6b:c3:4b:ee:23:05:0c:a0:a4:d6:1c:63:95:
3b:e4:98:d8:5d:4a:2b:f6:0e:60:8a:f5:01:b0:52:
d9:0e:c3:6b:48:24:89:66:fa:cf:91:4c:be:a4:05:
ca:71:3f:77:19:a5:3e:4b:6b:f5:a1:87:08:bc:5f:
9d:e4:7b:fe:d8:0a:e4:a7:a6:eb:0d:3e:ef:f2:41:
c9:3f:93:34:c0:ec:dd:d0:6e:00:af:80:8a:00:6f:
dc:f3:fa:3b:94:08:5d:a7:4b:22:99:b8:b7:02:13:
d0:45:a9:d5:ea:30:4d:a0:f8:22:60:fc:1c:ce:f4:
28:05:60:ce:26:50:f7:da:ba:e0:6d:96:05:f1:eb:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FC:02:01:5D:F3:31:9C:39:7F:62:E5:09:A8:52:E4:AA:CC:8B:29
X509v3 Authority Key Identifier:
keyid:9E:BD:F4:EB:6F:F7:91:23:E1:7D:DF:3F:50:18:13:3F:41:C1:D1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nr3062_3kSPhfd8_UBgTP0HB0bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/q_wCAV3zMZw5f2LlCahS5KrMiyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/nr3062_3kSPhfd8_UBgTP0HB0bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:99:3f:f0:34:2b:4f:76:bb:3d:05:81:1a:20:e1:41:0b:d9:
e7:73:f7:94:87:26:ba:95:ae:d1:da:0f:42:71:a5:4e:5d:7c:
ed:de:38:8f:6b:03:68:56:03:ce:8c:2c:a3:30:52:13:c7:d4:
52:5d:d6:ee:fb:72:64:68:55:ed:f8:b0:c9:9e:b5:92:be:96:
d4:8a:92:1d:4e:a5:5b:cd:79:db:4c:97:1b:e7:d5:d2:c5:db:
e4:e3:26:05:5d:e6:b7:0d:0a:fa:53:d3:74:70:fc:93:8e:5d:
b8:2e:1b:71:ab:7a:82:d5:29:3a:7c:d8:aa:e8:61:52:21:f0:
24:61:7c:65:55:6c:01:6d:da:43:0a:f8:4c:66:89:75:7a:b7:
fa:29:45:25:48:f2:e3:60:fd:08:68:35:de:ce:be:48:1f:db:
df:7d:e9:48:5f:fe:0a:55:b2:57:55:b9:81:6e:1b:c4:23:82:
da:89:ea:bb:3b:8e:b7:30:e5:3a:68:d1:c6:9f:41:a0:65:8a:
cd:dc:e3:91:9f:8f:19:04:dc:8a:45:a1:52:f5:c3:df:9d:d0:
99:a6:66:67:27:4b:b6:96:55:80:21:7c:f4:b4:7f:2d:6e:c2:
ca:56:d9:b8:9f:22:e1:64:6b:bc:85:56:f5:ba:74:21:cc:04:
07:6b:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:38 2024 by rpki-client on console-fra.rpki-client.org