Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/nFn1BURrS2oCuVD4BaAUqXeUDNo.roa
File: nFn1BURrS2oCuVD4BaAUqXeUDNo.roa (raw, json)
Hash identifier: jzd4MSOOg4uu0iRlv+4GVQ3xRx0s5WeC9aHrF7Tq/k0=
Subject key identifier: 9C:59:F5:05:44:6B:4B:6A:02:B9:50:F8:05:A0:14:A9:77:94:0C:DA
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182100CCAB5FF9FDA2844372F7A61CAA6BA
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/nFn1BURrS2oCuVD4BaAUqXeUDNo.roa
Signing time: Mon 18 Jul 2022 06:44:09 +0000
ROA not before: Mon 18 Jul 2022 06:44:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 194.147.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:0c:ca:b5:ff:9f:da:28:44:37:2f:7a:61:ca:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 18 06:44:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c59f505446b4b6a02b950f805a014a977940cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:a1:20:ec:0b:3a:45:b5:6a:6b:35:27:bc:
20:34:fc:ea:10:fc:df:01:9e:79:17:24:ce:b7:87:
16:5c:f4:3c:5b:4f:e5:f4:a2:94:92:4f:8f:a4:be:
df:59:97:6b:b7:ee:0f:fd:d0:3f:2c:15:46:09:30:
40:5d:e4:3e:78:34:af:25:9e:03:db:6b:7d:2d:cb:
ae:7c:bd:96:a7:ed:64:84:4a:73:21:85:5a:7f:5d:
11:e9:1a:da:ea:2a:91:aa:ab:66:1f:0c:03:86:c4:
03:fe:16:52:b2:1b:b2:d2:2b:34:bd:d1:82:f3:f9:
37:19:34:cd:10:70:2b:99:66:31:7f:86:88:8e:60:
01:78:54:10:b9:b6:ca:09:80:a3:2e:86:4a:b8:87:
54:97:6d:03:a5:2f:a3:02:b2:a8:af:e5:8d:76:22:
43:74:3e:7c:df:e0:34:35:4b:71:e4:62:35:93:dc:
84:4f:0a:f1:a3:4a:07:7d:85:bb:89:ad:71:cb:42:
3d:d8:b8:af:a3:d4:3d:41:59:12:28:79:d2:ac:50:
98:0d:80:3d:20:57:08:83:a1:fd:32:51:17:f8:5e:
73:9d:af:b6:61:5f:40:15:d7:09:f0:28:a5:8d:d5:
16:46:2f:5b:9c:bc:42:f1:25:7c:e1:10:60:a1:01:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:F5:05:44:6B:4B:6A:02:B9:50:F8:05:A0:14:A9:77:94:0C:DA
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/nFn1BURrS2oCuVD4BaAUqXeUDNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
57:af:92:2d:1e:b1:54:b8:51:a5:e6:7d:5b:01:67:9d:49:86:
a9:a0:99:2e:2d:0f:0c:2b:00:03:3a:84:ba:41:bf:40:61:5f:
58:15:e7:51:f1:a2:f2:c7:b9:c3:8f:60:7e:89:47:61:81:fb:
06:58:6a:e2:c3:be:45:01:68:77:97:99:49:d8:f0:f3:e7:fd:
53:5b:bb:dc:54:82:e8:62:58:e5:30:89:7b:84:cb:91:f5:e5:
03:99:f1:99:b2:0b:a3:c2:22:e1:77:01:4a:18:f3:ce:3f:e7:
b4:f5:45:c9:52:31:51:fe:82:f5:36:76:a5:e3:78:5f:d7:d1:
6d:c7:9c:bf:1d:05:3f:af:66:75:a4:70:41:ff:ea:21:a0:93:
9f:ce:82:f0:98:e1:55:e2:c1:ee:20:a8:e4:d7:41:b2:50:71:
5c:d6:1f:f1:b9:0a:27:a9:e5:ef:84:dc:c7:73:7b:81:cf:98:
23:e6:1a:f8:37:9b:61:9f:75:14:f4:23:79:41:49:48:58:e8:
a2:4a:2d:bd:c7:be:a4:fd:94:ec:cc:d3:95:0e:be:a6:69:55:
7c:9a:89:45:b6:a4:87:88:0f:a7:73:3f:26:eb:6d:4c:26:46:
a5:d8:22:aa:63:b8:ad:f6:e9:2b:6c:92:63:0c:63:a5:15:2e:
22:e1:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org