Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ee8dea-2d8c-4561-86bc-6fc2a5191165/1/ir9sy-JK3d5B5eu9to7kS9wszFo.roa
File: ir9sy-JK3d5B5eu9to7kS9wszFo.roa (raw, json)
Hash identifier: +MH0E9aq/RZ4HCxoFjDKDSG6hgtdo+FCu6ohyL6q9jg=
Subject key identifier: 8A:BF:6C:CB:E2:4A:DD:DE:41:E5:EB:BD:B6:8E:E4:4B:DC:2C:CC:5A
Certificate issuer: /CN=4a06ed9d17abf40e5ca53226c5cebf09076e274d
Certificate serial: 0186E9995B3E22684D14B4B724B1CAC64BCE
Authority key identifier: 4A:06:ED:9D:17:AB:F4:0E:5C:A5:32:26:C5:CE:BF:09:07:6E:27:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgbtnRer9A5cpTImxc6_CQduJ00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ee8dea-2d8c-4561-86bc-6fc2a5191165/1/ir9sy-JK3d5B5eu9to7kS9wszFo.roa
Signing time: Thu 16 Mar 2023 08:46:26 +0000
ROA not before: Thu 16 Mar 2023 08:46:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.145.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:99:5b:3e:22:68:4d:14:b4:b7:24:b1:ca:c6:4b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a06ed9d17abf40e5ca53226c5cebf09076e274d
Validity
Not Before: Mar 16 08:46:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8abf6ccbe24addde41e5ebbdb68ee44bdc2ccc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:c4:8d:54:82:5a:0c:78:62:96:27:d0:9b:
99:b1:c6:1d:56:d1:ba:23:8d:94:41:b5:c2:0a:be:
1b:c6:c4:01:4f:85:88:7a:5a:9b:bc:b9:c0:b0:eb:
da:48:7c:17:f8:95:84:72:a7:71:64:97:92:b4:c6:
be:ba:4a:ad:f6:91:aa:e7:10:43:1d:86:4f:b8:75:
24:43:80:f7:78:19:0d:fd:d0:d8:03:30:e6:a8:c7:
a0:b1:f5:d6:45:2e:bc:29:4c:63:3e:da:d5:56:de:
37:f9:b6:e5:fb:8b:db:53:9b:36:dc:96:8e:d8:de:
83:78:45:ca:3f:68:58:61:1d:5d:d5:bc:b0:fa:5f:
c5:60:ea:c6:fb:de:63:df:ab:e7:b1:fb:d7:b0:80:
52:b3:e3:7c:81:fe:8c:f1:ef:5d:2f:3f:88:9a:d5:
2a:f2:4a:c4:84:fd:11:c7:c8:d7:8d:aa:9d:f4:0c:
84:5e:cf:fc:3c:b1:1f:50:4f:d4:11:b6:3b:af:19:
84:60:09:1a:e2:f5:40:df:92:60:25:70:b1:b9:02:
21:64:3f:37:8c:b4:b7:88:b4:f7:ea:44:88:d7:60:
6f:29:06:99:bb:be:28:7d:30:b8:80:4a:ae:a2:07:
b9:cb:2d:be:d0:99:b5:a4:7c:bc:28:96:ea:61:09:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BF:6C:CB:E2:4A:DD:DE:41:E5:EB:BD:B6:8E:E4:4B:DC:2C:CC:5A
X509v3 Authority Key Identifier:
keyid:4A:06:ED:9D:17:AB:F4:0E:5C:A5:32:26:C5:CE:BF:09:07:6E:27:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgbtnRer9A5cpTImxc6_CQduJ00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ee8dea-2d8c-4561-86bc-6fc2a5191165/1/ir9sy-JK3d5B5eu9to7kS9wszFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ee8dea-2d8c-4561-86bc-6fc2a5191165/1/SgbtnRer9A5cpTImxc6_CQduJ00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
53:06:9e:32:a7:a7:1f:61:2e:48:c0:eb:66:41:b0:83:cf:ff:
9a:c9:52:b8:0d:3d:ba:fa:3c:e3:3a:1d:a2:87:7f:d7:38:ea:
ab:9a:e5:e2:ad:a1:b5:fa:f1:07:20:b5:76:44:ae:3e:8d:40:
1b:8e:63:52:6d:00:14:1a:4f:3c:88:2a:8b:e0:c2:b9:cd:01:
e2:0f:c3:84:9b:cb:5b:84:62:22:ab:cc:6f:3e:1e:6e:6a:b3:
af:bd:a4:75:9d:60:7b:bf:12:41:c1:ea:71:ca:90:ea:95:1c:
f5:d1:76:ea:6a:ff:8d:bf:9d:11:59:9b:68:95:49:94:2b:b9:
5f:e8:5d:19:84:c7:3d:b3:ff:f5:cf:78:b0:a3:91:11:38:ee:
78:62:e7:de:47:8f:71:b9:cd:bc:d4:f1:97:18:57:b1:c1:2b:
88:74:cf:36:83:4f:3d:9c:86:24:67:77:6b:c6:ab:ee:c1:1d:
2e:fb:1a:11:cd:0e:04:e2:4b:51:ec:77:88:08:b0:d0:f7:63:
98:ce:14:bc:20:99:bc:a8:8d:88:04:9c:f3:7b:a3:a1:d6:5e:
3b:b8:57:86:e4:48:4c:9a:82:a8:d3:d4:ec:d3:23:1c:25:87:
47:09:11:27:85:e2:8e:4a:fd:f5:24:e1:28:fc:1d:09:ff:d2:
bc:8d:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:54 2024 by rpki-client on console-ams.rpki-client.org