Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BA4_Y4FDc9ppV4tQP5GdlUWuNy4.roa
File: BA4_Y4FDc9ppV4tQP5GdlUWuNy4.roa (raw, json)
Hash identifier: Hg+PhwAwgYKrcIB/9dpNAYpqprwuEUpGHWHM+Ktl4s0=
Subject key identifier: 04:0E:3F:63:81:43:73:DA:69:57:8B:50:3F:91:9D:95:45:AE:37:2E
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 045B8CF9
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BA4_Y4FDc9ppV4tQP5GdlUWuNy4.roa
Signing time: Wed 27 Apr 2022 03:05:35 +0000
ROA not before: Wed 27 Apr 2022 03:05:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73108729 (0x45b8cf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Apr 27 03:05:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=040e3f63814373da69578b503f919d9545ae372e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:08:e4:58:1d:4e:59:4e:38:dc:49:13:ca:
f5:36:73:6b:dc:71:e9:49:b0:85:e0:d7:5e:c1:a4:
a3:6d:63:96:d8:1f:25:eb:75:9b:0a:b5:9f:62:ae:
0d:8d:10:9b:f0:c2:1d:fb:ff:94:87:60:88:6c:19:
13:91:8b:85:38:f8:24:87:49:35:54:c7:fa:23:78:
b1:f8:0b:ff:8f:91:ba:fa:be:bb:ea:64:49:33:22:
9b:8d:26:44:82:69:f5:45:2a:60:d9:03:77:5e:9c:
b4:fd:f8:2e:da:63:39:ce:de:0a:a6:09:d6:81:f2:
f3:83:d5:5b:a4:45:79:6c:93:53:a6:df:9e:bf:6e:
f5:c4:2d:79:0e:c9:77:a9:1d:be:c9:0e:b2:ef:1d:
9a:53:95:5d:6d:26:ae:c3:03:26:f1:71:1e:aa:8f:
d8:c4:3e:e9:33:46:44:b8:bf:1f:f4:57:a0:1c:54:
53:87:84:0e:60:a7:bb:36:98:3c:b7:b7:89:f6:3a:
17:08:d8:cd:19:e5:8c:8e:70:e4:28:b3:f3:41:b7:
4b:eb:80:71:12:2d:49:20:e3:40:e6:01:32:c4:44:
cd:a9:44:9d:08:4f:91:2e:ea:aa:c1:12:3a:2d:c8:
98:53:b1:ed:fa:10:79:2d:60:e7:d5:2f:db:8a:60:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0E:3F:63:81:43:73:DA:69:57:8B:50:3F:91:9D:95:45:AE:37:2E
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BA4_Y4FDc9ppV4tQP5GdlUWuNy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:57:ab:2f:69:ca:3d:fe:bc:f9:53:90:8c:20:d0:93:4b:7c:
12:93:92:c0:aa:ac:05:1a:16:e2:31:5d:cf:e6:33:fa:26:f7:
be:66:c0:1f:f2:cd:f1:e1:8e:15:87:80:d4:8b:27:1b:7e:cf:
60:b2:d5:56:25:07:be:25:63:28:c9:b9:cf:ef:22:cd:41:e3:
2d:31:36:66:fb:7b:27:41:3c:ab:a1:e7:a4:f2:94:a8:f4:1a:
92:41:c6:d6:c5:34:18:f8:f1:8e:03:94:79:25:00:e2:c1:29:
f1:0d:40:18:19:1c:18:2b:1e:56:95:61:a2:03:e9:22:dc:40:
0e:79:3a:ce:a1:6e:5f:e0:99:0a:c8:ed:ba:2c:79:11:19:b1:
8b:76:67:04:da:6f:fe:06:44:1d:7e:e6:1d:ed:09:70:69:28:
a2:5d:72:8f:5f:09:3d:5b:37:c8:fb:52:5a:df:d1:83:75:2a:
44:74:5e:46:90:3c:8b:28:50:64:6a:bc:08:72:bb:ae:c9:58:
93:32:f3:bc:6e:ca:c7:93:16:3e:d4:3e:57:d5:9d:8c:8c:b3:
77:54:cb:ab:90:2d:87:85:db:8a:83:57:22:c7:9f:1e:ed:9f:
07:30:5c:1e:fa:86:3a:5c:8a:5f:b6:82:96:50:e5:e3:e2:e5:
f3:9a:6d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org