Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/g9clt7VreTnhcGtn3W_ZeZK84Jk.roa
File: g9clt7VreTnhcGtn3W_ZeZK84Jk.roa (raw, json)
Hash identifier: Txd0NhGg27oh+AriMq8MgBfLM6ZZxZ88mtXUqwSEok8=
Subject key identifier: 83:D7:25:B7:B5:6B:79:39:E1:70:6B:67:DD:6F:D9:79:92:BC:E0:99
Certificate issuer: /CN=51dfa98887f456827a36f665657f550c425e38f9
Certificate serial: 024BB6F9
Authority key identifier: 51:DF:A9:88:87:F4:56:82:7A:36:F6:65:65:7F:55:0C:42:5E:38:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/g9clt7VreTnhcGtn3W_ZeZK84Jk.roa
Signing time: Sat 01 Jan 2022 15:58:51 +0000
ROA not before: Sat 01 Jan 2022 15:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.93.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38516473 (0x24bb6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51dfa98887f456827a36f665657f550c425e38f9
Validity
Not Before: Jan 1 15:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83d725b7b56b7939e1706b67dd6fd97992bce099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:ff:1f:18:b6:c6:20:b3:40:0f:71:63:f0:
2b:9b:e4:e8:46:15:41:31:3e:6b:2c:97:f1:dd:1c:
3b:cd:c8:a0:f4:a1:42:20:c4:85:e0:33:ab:8f:58:
64:d1:2b:d3:0f:83:86:6e:c6:cf:6b:c0:93:2b:de:
23:9c:d1:33:17:59:b6:b0:61:aa:34:e5:2e:c0:de:
c0:c7:4a:68:d0:ed:6a:fc:0a:78:49:35:01:ca:ce:
4d:14:94:fc:65:db:5d:21:66:fc:92:6d:ad:47:93:
c9:a6:25:bd:10:8e:bd:f1:49:f1:f8:bf:6e:05:68:
48:90:6a:ce:4f:9c:7f:ac:d5:b2:a0:54:3f:64:09:
21:c0:a5:cb:14:5b:3d:01:ca:0d:92:71:54:56:d9:
98:2f:70:95:f8:79:03:a0:f6:54:03:b5:72:db:f2:
f0:25:ee:e9:40:92:66:0b:95:82:cb:8e:fc:be:14:
97:98:e2:10:d7:a1:25:db:ac:d3:3c:b3:a0:b4:92:
97:a9:b3:e5:90:73:23:4d:6c:26:61:4a:ac:a5:eb:
92:74:fc:59:61:ea:d6:4a:18:e4:a5:25:01:83:f3:
6a:22:a7:25:c7:95:e4:76:2b:5b:eb:ba:f1:30:91:
06:1c:77:a3:ea:cf:6f:0b:67:f6:b0:ee:09:27:e6:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D7:25:B7:B5:6B:79:39:E1:70:6B:67:DD:6F:D9:79:92:BC:E0:99
X509v3 Authority Key Identifier:
keyid:51:DF:A9:88:87:F4:56:82:7A:36:F6:65:65:7F:55:0C:42:5E:38:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/g9clt7VreTnhcGtn3W_ZeZK84Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.60.0/22
Signature Algorithm: sha256WithRSAEncryption
93:18:61:af:f7:d7:02:60:40:81:d6:01:e3:b6:67:89:5f:9e:
09:29:2a:3e:cd:cc:79:e6:ba:59:6a:f9:d4:55:fe:a5:27:36:
63:8c:e5:8e:6f:3c:e1:c4:3a:06:0b:3e:27:5e:bb:0e:80:4e:
56:30:79:a5:ed:5c:eb:0c:e5:52:62:d2:13:3b:b8:6a:01:f5:
6c:65:88:55:12:f3:1e:fe:2c:7d:66:dd:de:e7:47:d7:6d:03:
62:58:50:70:5a:ce:e9:90:68:94:3c:7d:c7:73:3a:01:30:af:
31:ef:91:6d:8d:0d:34:f9:c2:f9:2e:1b:a4:15:17:97:e5:4b:
87:13:2c:4e:d4:15:54:c7:4c:6d:08:30:01:86:1a:e5:1b:6c:
97:6d:1f:b5:11:a0:3a:bd:f4:cf:02:e2:45:e5:fe:1f:e2:9e:
db:1b:96:43:07:d5:a4:ef:05:87:d6:cd:7b:33:d4:54:bf:8f:
f5:d5:37:df:0a:28:71:4d:25:a8:ea:1c:2c:df:81:bc:36:1e:
a8:3e:11:2b:d7:c5:f1:22:4e:26:de:0d:f6:7d:a6:65:59:57:
52:e6:cf:70:aa:c8:97:29:e5:4b:69:aa:e1:71:7c:58:0b:55:
ca:3a:8e:7f:50:46:e9:4a:f1:2b:02:6c:47:8f:84:11:c8:a2:
46:29:26:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:45 2024 by rpki-client on console-ams.rpki-client.org