Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/amw807vNgA99fhxbHxokk32dE8k.roa
File: amw807vNgA99fhxbHxokk32dE8k.roa (raw, json)
Hash identifier: Qh49tILyfeB1wkK9dPnh2LaxaUJ6JeZIoEbwCTgPoHo=
Subject key identifier: 6A:6C:3C:D3:BB:CD:80:0F:7D:7E:1C:5B:1F:1A:24:93:7D:9D:13:C9
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018CC2DB14FA6FC706DA8966EB08516FD2AA
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/amw807vNgA99fhxbHxokk32dE8k.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29177
IP address blocks: 194.20.142.0/23 maxlen: 24
194.20.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:14:fa:6f:c7:06:da:89:66:eb:08:51:6f:d2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a6c3cd3bbcd800f7d7e1c5b1f1a24937d9d13c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:d9:18:e1:17:80:99:a6:bc:16:11:72:d0:
4a:99:e3:21:f5:51:71:27:c4:9c:7b:45:d2:3f:f5:
35:fd:32:55:88:cd:51:34:8b:16:67:9b:c6:47:4a:
ed:4f:6b:a6:ba:07:ac:85:8e:30:47:f2:f6:7b:25:
63:22:12:8c:0e:9f:60:e2:8c:1f:b7:7a:4f:27:71:
7b:c3:88:b1:9f:9e:9d:57:e7:da:15:eb:bd:ba:8d:
33:27:06:db:b4:68:73:e1:46:6e:ca:15:95:7b:d6:
f2:6a:71:35:64:15:d0:14:85:e9:f3:51:18:71:ca:
9b:cd:d7:84:70:6f:24:7c:78:89:fc:df:f2:e1:88:
e7:01:db:bd:00:da:e4:82:35:68:91:8d:67:2c:05:
98:67:3f:cf:87:54:ff:fa:64:d0:23:5c:d0:95:74:
44:25:3e:21:56:cf:bd:75:e7:c7:90:36:90:7c:1b:
9d:77:4f:d2:df:08:e5:af:f1:51:1e:31:85:81:5c:
fe:0e:d6:c2:94:b7:59:b7:f0:d9:9b:59:1a:e1:88:
83:68:e0:55:1d:67:d8:64:98:df:34:fa:27:94:48:
46:0e:16:77:8f:7a:b8:54:cd:5c:a6:84:cf:fb:e5:
f7:ce:c7:1d:fe:cf:4e:32:d1:6a:85:41:dd:78:2b:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6C:3C:D3:BB:CD:80:0F:7D:7E:1C:5B:1F:1A:24:93:7D:9D:13:C9
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/amw807vNgA99fhxbHxokk32dE8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.142.0-194.20.145.255
Signature Algorithm: sha256WithRSAEncryption
7e:be:ac:4c:fe:37:29:b8:24:10:86:a9:cf:90:4f:5c:dd:2f:
3e:92:7b:29:98:e5:87:d8:91:88:a6:cf:79:33:61:62:11:0e:
25:8d:15:a5:45:35:fb:29:4c:a3:08:2c:32:92:7c:44:d0:b8:
e4:62:6e:d4:1c:f5:9a:e7:a8:57:2f:28:f2:8c:bf:64:5d:44:
46:32:d2:a4:7b:88:c0:df:87:45:2c:a5:13:7e:fc:77:17:f3:
b2:95:85:f2:87:14:a9:82:dd:18:ca:c2:51:52:bd:0f:0c:46:
c3:98:b6:01:eb:71:f2:ac:39:a4:9c:6d:19:f7:af:a1:8d:ce:
2d:bf:0b:ae:8a:22:3a:80:51:a6:74:49:d1:7a:21:4b:16:c6:
75:ac:81:0d:b0:51:46:3b:6a:90:f0:1a:2e:6b:ce:29:4a:52:
a5:f7:e1:c9:58:27:15:0f:e9:7a:e8:41:df:dc:10:7b:38:ab:
86:45:49:1c:d9:7f:9f:16:8b:19:c7:8a:f6:77:62:86:b3:42:
47:62:8d:b9:26:c8:5f:90:c2:46:76:9e:78:1c:06:57:ed:9f:
19:55:5a:2b:80:46:d0:27:ad:96:dc:62:c4:59:bd:10:cd:96:
f1:f1:b3:a7:0e:51:a5:d9:f2:db:2a:fd:49:7f:b9:dc:de:03:
37:ab:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net