Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/lC_y1F65UdYdb1FoGYizrqMFNrk.roa
File: lC_y1F65UdYdb1FoGYizrqMFNrk.roa (raw, json)
Hash identifier: MqaO0YvU5yn1MREPHUDv8zvQ/DkEUnwmVMDDuTyG8bk=
Subject key identifier: 94:2F:F2:D4:5E:B9:51:D6:1D:6F:51:68:19:88:B3:AE:A3:05:36:B9
Certificate issuer: /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial: 0182E84E9A8893E6415E902BD3DFAA44A12A
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/lC_y1F65UdYdb1FoGYizrqMFNrk.roa
Signing time: Mon 29 Aug 2022 06:34:01 +0000
ROA not before: Mon 29 Aug 2022 06:34:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.49.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:4e:9a:88:93:e6:41:5e:90:2b:d3:df:aa:44:a1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Validity
Not Before: Aug 29 06:34:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=942ff2d45eb951d61d6f51681988b3aea30536b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:ce:75:7c:bc:f3:aa:76:db:4f:b7:21:05:
c9:f0:66:fd:ae:10:94:7b:20:da:db:86:34:82:21:
d1:ac:7b:4d:85:8e:2a:a2:0c:d7:13:4c:8c:5e:00:
39:03:59:71:50:85:d5:99:4a:06:9b:ab:01:5a:bf:
bb:2c:0f:9a:07:5b:eb:26:0e:68:92:83:fe:ba:9d:
f4:48:58:8f:e6:61:8c:08:46:2c:bc:12:75:43:9e:
85:2b:75:7d:16:79:2b:69:ce:cd:27:07:32:e0:f2:
5f:6b:3b:bb:9f:c9:9c:02:ab:08:e2:eb:47:d6:32:
8a:68:c0:43:71:ba:92:25:6c:63:e2:3d:0a:1a:f9:
3c:b1:dc:a3:1b:ca:22:1d:40:66:05:19:73:fc:6d:
f8:69:bf:7c:af:4a:68:61:9a:56:78:43:38:e5:97:
31:c9:b0:a9:0c:9d:67:e5:0a:d3:6b:59:39:a7:32:
8c:38:f8:30:da:e9:62:9c:79:49:3a:82:dd:76:43:
90:ed:28:17:00:12:7a:4e:24:8a:99:ef:e8:a2:7a:
66:66:87:c2:39:c4:89:c5:7c:ab:85:b0:4f:25:43:
5f:72:eb:ec:aa:75:9e:1d:1c:6f:4a:5b:fb:53:af:
3d:34:01:fa:bf:d0:1f:0d:c8:c5:1b:e4:17:12:3e:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2F:F2:D4:5E:B9:51:D6:1D:6F:51:68:19:88:B3:AE:A3:05:36:B9
X509v3 Authority Key Identifier:
keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/lC_y1F65UdYdb1FoGYizrqMFNrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.87.0/24
Signature Algorithm: sha256WithRSAEncryption
09:30:7a:94:3b:4d:09:8d:77:ce:26:cd:ea:92:4f:1d:a1:b6:
a8:6b:5f:95:06:6b:9a:42:2f:2d:77:10:ff:8a:ea:f2:da:ef:
b6:3d:81:e6:52:bc:74:2e:ce:a8:87:20:9a:96:13:b6:36:a1:
4d:39:3b:24:29:fd:20:95:a5:f4:5c:6b:32:59:96:98:bd:a0:
06:0b:b0:1a:90:cc:60:cd:b4:e7:9a:3d:8e:4d:85:14:c1:09:
ff:80:8b:0b:cf:bd:9f:3a:8d:dd:82:ed:b8:c7:5a:92:30:a4:
43:2b:cc:41:5c:21:2b:98:ed:7a:a7:c0:68:68:3f:de:72:66:
ba:81:c6:aa:23:7a:d1:87:ad:2e:13:68:e4:e2:89:d7:66:f7:
00:5f:03:da:bf:ab:20:1c:c4:93:bf:85:8d:0b:22:ef:dd:18:
94:10:09:f7:dc:27:58:30:28:13:f6:bd:56:c8:2c:f7:47:15:
77:c9:66:ea:60:ef:5b:32:29:a0:7b:65:49:aa:50:54:8b:42:
8f:73:be:75:41:16:1f:b7:94:cd:b9:f4:d9:1e:16:dd:27:fe:
3b:92:0d:16:45:48:8a:65:a0:39:08:88:e0:57:a7:1e:2c:1d:
af:bc:1b:b7:98:cf:31:16:3d:ce:3e:c7:4d:c9:ba:d9:5f:12:
57:f0:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:46 2024 by rpki-client on console-ams.rpki-client.org