Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5ce320-f75c-4f06-9a58-f84e8e499e62/1/C2VRE3mYbPQoOKJDqB_bopPV2zE.roa
File: C2VRE3mYbPQoOKJDqB_bopPV2zE.roa (raw, json)
Hash identifier: VY89WuwcfJhr8VgDA57QT56ZwLN8MaaOMe1FDVO9aZ4=
Subject key identifier: 0B:65:51:13:79:98:6C:F4:28:38:A2:43:A8:1F:DB:A2:93:D5:DB:31
Certificate issuer: /CN=c77f02780e440c069e065d4b69a91f76176ff954
Certificate serial: 4D4FDD
Authority key identifier: C7:7F:02:78:0E:44:0C:06:9E:06:5D:4B:69:A9:1F:76:17:6F:F9:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x38CeA5EDAaeBl1Laakfdhdv-VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5ce320-f75c-4f06-9a58-f84e8e499e62/1/C2VRE3mYbPQoOKJDqB_bopPV2zE.roa
Signing time: Fri 01 Jul 2022 12:59:20 +0000
ROA not before: Fri 01 Jul 2022 12:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42073
IP address blocks: 194.169.233.0/24 maxlen: 24
194.102.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5066717 (0x4d4fdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77f02780e440c069e065d4b69a91f76176ff954
Validity
Not Before: Jul 1 12:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b65511379986cf42838a243a81fdba293d5db31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:2f:d2:d9:9d:aa:54:4f:1c:39:0e:d1:14:
18:16:f4:b1:49:45:a2:9d:4f:4a:d3:ab:ca:e6:bc:
f2:9d:6c:3b:67:36:75:00:db:dd:42:76:2c:87:15:
2f:82:04:cf:43:30:16:72:31:e3:cd:e0:c1:0a:47:
f5:e1:d6:ac:af:f6:c1:00:fe:4e:e5:8f:00:d8:2c:
ed:cb:49:43:bb:80:1c:0e:8b:1e:0c:17:e7:f3:65:
76:67:e7:15:9d:c4:8e:e2:d5:11:e7:70:ad:82:13:
18:1f:28:7d:66:16:95:09:bd:dd:d4:30:8a:78:45:
9f:1e:ef:a0:0e:fb:6a:43:db:5a:f7:1e:cb:04:d5:
76:6f:98:00:7c:4c:7a:eb:3b:60:d7:77:2f:51:71:
15:d3:54:c9:44:bc:2b:8a:73:4e:6a:1c:f5:da:77:
db:66:1c:0d:0b:46:f7:b0:7c:f7:66:4a:77:2a:22:
40:fc:58:05:c2:60:8e:22:41:3c:d8:26:cf:df:98:
f3:42:a0:cb:fa:80:ce:16:e6:d9:29:84:53:26:fc:
dc:03:d7:b6:6a:79:c4:94:fe:9c:7f:24:67:f8:72:
99:2e:d0:f3:e1:f1:7d:eb:f1:ae:4b:d5:9b:0a:5e:
95:13:6f:21:55:ef:44:d2:37:34:ed:72:49:ea:8b:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:51:13:79:98:6C:F4:28:38:A2:43:A8:1F:DB:A2:93:D5:DB:31
X509v3 Authority Key Identifier:
keyid:C7:7F:02:78:0E:44:0C:06:9E:06:5D:4B:69:A9:1F:76:17:6F:F9:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x38CeA5EDAaeBl1Laakfdhdv-VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5ce320-f75c-4f06-9a58-f84e8e499e62/1/C2VRE3mYbPQoOKJDqB_bopPV2zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5ce320-f75c-4f06-9a58-f84e8e499e62/1/x38CeA5EDAaeBl1Laakfdhdv-VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.202.0/24
194.169.233.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a2:ad:47:8f:46:62:74:97:16:c4:78:6e:4d:cb:58:8f:d7:
bb:9e:1b:b2:e8:fc:aa:e6:1d:73:8c:11:cd:91:fa:09:7e:81:
2a:34:08:b7:79:f2:d0:f4:94:ba:2e:33:4e:8c:4f:ab:79:67:
4a:05:24:ae:77:f5:81:5f:57:75:1d:91:a4:dd:12:af:68:3b:
7d:9d:70:0e:d9:84:d3:44:4a:69:cb:68:51:04:60:f7:f0:79:
da:09:44:66:17:ff:f0:de:ed:c4:84:cc:13:10:c2:88:6f:78:
2c:c0:de:a5:03:af:f5:0d:f2:c8:fe:90:4f:f7:cd:ee:3d:75:
67:4e:10:7e:d4:23:a9:bb:85:4c:9c:d9:fc:b0:07:5c:f8:c5:
6e:a9:27:01:27:b2:65:68:86:ba:96:67:2c:5e:69:0d:c4:de:
20:ed:1e:82:43:7e:9a:31:47:57:2a:df:3b:4c:af:e5:1c:b0:
65:86:c7:6e:ff:7a:1f:0e:25:9d:71:85:65:9a:e7:3b:2f:86:
98:5d:09:8e:bc:30:4f:dd:00:b1:0b:f7:04:43:7f:4a:9b:b6:
f1:02:37:f3:da:4b:c1:19:02:b8:1c:dd:60:ba:2d:04:2b:3f:
2b:41:61:58:66:8c:23:92:65:7c:ac:ac:21:0c:9c:8e:3e:c5:
74:17:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:20 2024 by rpki-client on console-ams.rpki-client.org