Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/a8sC76PqZdLBiV0r0xPZeothzSU.roa
File: a8sC76PqZdLBiV0r0xPZeothzSU.roa (raw, json)
Hash identifier: J4euFR1wWuAgw4KAKB5xoRF4wUOMbZg62tNF8aakMrY=
Subject key identifier: 6B:CB:02:EF:A3:EA:65:D2:C1:89:5D:2B:D3:13:D9:7A:8B:61:CD:25
Certificate issuer: /CN=5e7e445904943e99830cb094988720fc977b1fbc
Certificate serial: 018CC64B78D8D0719AD0B129BC75606FF847
Authority key identifier: 5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/a8sC76PqZdLBiV0r0xPZeothzSU.roa
Signing time: Mon 01 Jan 2024 18:31:24 +0000
ROA not before: Mon 01 Jan 2024 18:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205473
IP address blocks: 194.113.196.0/24 maxlen: 24
194.113.197.0/24 maxlen: 24
194.113.198.0/23 maxlen: 23
194.113.198.0/24 maxlen: 24
194.113.196.0/22 maxlen: 22
194.113.199.0/24 maxlen: 24
194.113.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:78:d8:d0:71:9a:d0:b1:29:bc:75:60:6f:f8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7e445904943e99830cb094988720fc977b1fbc
Validity
Not Before: Jan 1 18:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bcb02efa3ea65d2c1895d2bd313d97a8b61cd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:5c:6f:eb:5f:55:48:79:57:d5:3d:f1:79:
01:56:4b:ad:df:eb:01:06:af:bd:c1:4f:7b:86:82:
2a:68:b3:ab:4a:95:08:5b:ee:eb:ec:e6:7c:d1:84:
47:b6:79:0f:ee:97:e5:e8:5a:49:9e:c9:6d:3f:25:
54:69:9a:fc:a2:88:0c:01:07:f1:b4:b0:ca:93:db:
3d:bc:a9:05:8d:65:59:6e:c3:ff:29:95:ff:be:65:
28:8c:7e:b2:de:56:37:0f:d5:38:a4:a4:7e:97:ad:
3c:2c:28:d0:59:9a:c2:f4:bc:e8:62:d6:94:5c:6b:
ac:7c:fb:4c:f8:43:fa:de:36:d0:15:b1:14:fb:29:
f2:90:16:bd:8d:4f:70:db:28:00:45:12:8b:0b:ac:
a3:30:5f:8a:cb:61:24:91:e6:0d:a9:9d:22:be:66:
a4:f9:b4:65:73:52:da:d8:50:0a:0c:34:10:90:9d:
49:8b:29:66:8d:8e:cc:8b:d8:f8:9d:39:00:ba:71:
52:f3:0d:54:3a:22:0c:4c:7b:83:8b:56:ed:ed:06:
09:ac:65:bc:0c:6a:9b:7d:89:64:71:59:a9:b0:33:
b5:02:fa:5a:45:e0:82:ff:00:ec:48:10:55:48:b3:
11:38:ae:88:72:fc:41:e5:c5:06:e5:8e:1c:80:6a:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CB:02:EF:A3:EA:65:D2:C1:89:5D:2B:D3:13:D9:7A:8B:61:CD:25
X509v3 Authority Key Identifier:
keyid:5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/a8sC76PqZdLBiV0r0xPZeothzSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.196.0/22
Signature Algorithm: sha256WithRSAEncryption
07:1d:62:b2:b8:55:e6:01:b7:ba:1e:42:5a:23:d6:cc:b2:7e:
ae:5e:a8:59:95:ea:19:28:a6:d4:8a:ca:01:aa:05:15:db:b4:
e9:e4:c5:cf:8e:3e:eb:1b:1d:47:1d:ac:c8:82:f3:16:3a:2c:
fe:c4:a5:d8:15:d1:d6:68:3f:59:da:05:38:12:ee:69:1f:6a:
be:84:9b:d3:e7:32:d6:4b:35:8c:2f:0a:b4:5b:fb:1f:2f:50:
c7:dc:66:19:07:6a:d3:61:ce:f6:35:3f:d9:08:45:05:5d:bc:
be:32:c7:98:82:16:ab:43:85:6d:d4:bd:cc:f5:83:02:e2:fc:
e7:d5:70:89:b2:93:f3:96:a7:e8:28:d3:47:4e:77:e8:6b:97:
0c:d9:e5:c5:6f:b3:63:60:a4:12:1e:69:bb:3b:8c:be:9c:84:
e6:3b:91:c1:b1:de:bc:73:72:28:8d:41:8f:ec:ce:84:1c:ff:
ba:ce:be:e8:69:c6:71:f0:02:f7:85:e5:bc:e6:e2:aa:6b:74:
71:95:c4:7a:7e:b6:e4:72:f7:dd:f2:0d:28:41:9c:a5:d0:0f:
c8:7f:51:91:9f:89:ac:13:fd:18:3b:89:b2:61:d9:5f:b6:43:
e8:d3:cc:c4:f5:20:18:50:b9:fb:a3:68:86:8e:cb:91:41:b0:
13:e0:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:14:13 2024 by rpki-client on console-fra.rpki-client.org