Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b60351-549d-4064-a63d-df1f62146fd6/1/K--VrmhfTZGnTrJQP-XOftQRSFs.roa
File: K--VrmhfTZGnTrJQP-XOftQRSFs.roa (raw, json)
Hash identifier: oUpY3Z9MIKsyd5QU9+cgO30NoQBNARCUCg+EAOBTcRc=
Subject key identifier: 2B:EF:95:AE:68:5F:4D:91:A7:4E:B2:50:3F:E5:CE:7E:D4:11:48:5B
Certificate issuer: /CN=39f8f4adfce04dc839acef595bed40bb7c3c8ba9
Certificate serial: DD7B39
Authority key identifier: 39:F8:F4:AD:FC:E0:4D:C8:39:AC:EF:59:5B:ED:40:BB:7C:3C:8B:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ofj0rfzgTcg5rO9ZW-1Au3w8i6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b60351-549d-4064-a63d-df1f62146fd6/1/K--VrmhfTZGnTrJQP-XOftQRSFs.roa
Signing time: Sat 01 Jan 2022 04:59:13 +0000
ROA not before: Sat 01 Jan 2022 04:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 194.104.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14515001 (0xdd7b39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f8f4adfce04dc839acef595bed40bb7c3c8ba9
Validity
Not Before: Jan 1 04:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bef95ae685f4d91a74eb2503fe5ce7ed411485b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:41:77:49:18:68:2c:c9:aa:1b:15:f7:82:
f4:39:53:2c:59:04:fa:b6:9a:4f:8a:95:2a:4e:bc:
c4:b4:e0:e9:c5:c5:74:86:e6:12:08:4c:a5:32:46:
ab:91:73:02:92:87:0c:00:e2:39:86:7b:dd:0a:83:
b6:03:78:dc:d0:e9:26:70:6c:58:06:52:a3:22:92:
db:32:63:22:de:f7:2a:96:1e:85:3c:d9:e0:7c:b4:
c4:72:f8:50:c9:9d:79:1f:7f:f0:05:c9:80:2f:d8:
77:9f:70:a0:aa:70:46:8a:bb:f4:60:ee:48:c6:3a:
65:f1:44:c0:36:4f:f5:f5:d8:38:eb:b8:ab:b1:99:
f2:08:a0:e6:ea:ca:be:f5:45:40:2b:54:47:d1:c6:
93:d2:26:e1:8f:6d:16:80:70:43:34:dd:8a:bc:15:
8b:fc:4e:34:22:ae:00:d5:2f:46:b3:bb:00:93:c2:
5d:01:b2:bc:57:4a:19:f5:20:f8:0c:66:4d:50:81:
e7:ac:93:a3:45:8d:e1:d9:12:3f:03:10:3d:ca:1e:
fa:05:40:e6:f8:09:e9:a4:d9:36:7c:84:a9:30:63:
7f:7d:40:88:2b:89:80:12:48:01:f6:57:5d:e1:44:
9a:6b:e8:db:60:43:e0:b0:a9:f0:4b:3c:e5:34:30:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:95:AE:68:5F:4D:91:A7:4E:B2:50:3F:E5:CE:7E:D4:11:48:5B
X509v3 Authority Key Identifier:
keyid:39:F8:F4:AD:FC:E0:4D:C8:39:AC:EF:59:5B:ED:40:BB:7C:3C:8B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ofj0rfzgTcg5rO9ZW-1Au3w8i6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b60351-549d-4064-a63d-df1f62146fd6/1/K--VrmhfTZGnTrJQP-XOftQRSFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b60351-549d-4064-a63d-df1f62146fd6/1/Ofj0rfzgTcg5rO9ZW-1Au3w8i6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.228.0/24
Signature Algorithm: sha256WithRSAEncryption
da:5c:86:6a:8b:af:92:b1:34:82:bf:2a:74:33:1e:b9:a9:74:
70:a8:d1:73:bd:1e:4a:92:82:10:a2:a4:cd:12:d0:91:e9:49:
5c:b6:06:c0:02:7e:6d:70:cd:c0:ec:2c:97:36:cf:42:1a:9d:
ef:44:fa:a3:0e:5f:3a:a5:35:fc:07:38:b8:6d:fd:3b:50:b1:
f3:07:4b:c3:96:ad:76:68:9e:bc:13:94:8d:a1:fb:e2:45:16:
a0:7a:07:8e:8a:67:b2:d1:53:42:d2:16:b0:db:2f:ff:ad:6a:
9b:c0:55:6d:95:92:71:84:37:f6:66:ea:0b:02:3a:98:90:6c:
0c:9d:dc:46:a8:36:ab:e0:ea:51:14:0d:06:44:9c:ea:11:b6:
62:d9:ef:13:0f:24:79:31:51:46:e5:5a:6c:73:dc:9f:6d:97:
95:f2:c2:ab:9d:b8:c1:5e:1e:8f:25:9b:35:0b:c0:06:7c:15:
8d:34:30:17:c5:14:ed:65:fd:db:96:52:5f:db:ff:20:a0:cc:
a9:c1:29:1d:04:66:51:d9:4d:06:23:7c:31:dc:94:52:12:22:
07:c1:27:0c:d0:db:ac:74:c0:66:ee:47:c7:e7:ac:a9:3e:19:
59:c5:75:3f:6e:58:81:ea:1e:2b:3a:10:e6:8c:ef:b2:0c:c7:
12:5e:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:16 2024 by rpki-client on console-fra.rpki-client.org