Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/p_Rao7O6uYdg2Dsv1RFpKYz-dA0.roa
File: p_Rao7O6uYdg2Dsv1RFpKYz-dA0.roa (raw, json)
Hash identifier: hD2jURs1gKSOOu0mZXpARlgmzWpFN46HJU/QnRyT2Ws=
Subject key identifier: A7:F4:5A:A3:B3:BA:B9:87:60:D8:3B:2F:D5:11:69:29:8C:FE:74:0D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01849EB5AC4D9D91071AF6E1D68C025397AF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/p_Rao7O6uYdg2Dsv1RFpKYz-dA0.roa
Signing time: Tue 22 Nov 2022 09:40:16 +0000
ROA not before: Tue 22 Nov 2022 09:40:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29066
IP address blocks: 194.105.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:b5:ac:4d:9d:91:07:1a:f6:e1:d6:8c:02:53:97:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 22 09:40:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7f45aa3b3bab98760d83b2fd51169298cfe740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:97:b2:7a:24:10:91:b6:61:3d:b8:68:d5:
0f:93:80:7f:75:d6:b0:be:4c:dc:fe:88:66:2c:2a:
20:7d:7a:b2:e2:93:01:8f:ef:34:06:52:50:d3:38:
ec:ad:98:be:56:c3:62:53:93:fd:87:d0:4d:8b:13:
58:af:44:f1:8e:b7:87:d4:5d:e6:34:1a:ba:10:4f:
16:6a:a2:1e:f0:d4:8d:1a:ec:c6:e0:2a:25:a4:ea:
bb:1a:2c:87:77:04:de:b8:5f:84:e4:d8:eb:18:d3:
f3:a8:76:71:6e:3f:4d:4c:ec:3f:cd:e8:23:e8:f1:
ee:d7:36:70:a3:83:92:45:7a:e5:0a:73:bd:c9:e6:
9f:23:1c:8d:ac:f7:74:86:33:75:2b:e5:59:20:67:
ce:71:80:f2:85:97:f8:5f:b9:b1:6c:33:2d:f4:e3:
f5:26:98:f0:4e:9f:fb:0a:4e:75:a0:bb:99:53:04:
d7:cf:24:a2:61:ef:dd:3a:fc:06:48:cb:22:fc:e4:
15:24:35:d2:1e:e7:92:b9:51:f5:3b:da:95:a7:79:
3f:08:ea:d9:de:6c:5a:42:0a:36:5c:5d:71:c2:7a:
5b:09:02:d4:06:12:53:43:92:19:56:d8:eb:aa:97:
c4:c6:d7:2a:28:83:bb:90:16:f0:6a:e6:13:33:b7:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F4:5A:A3:B3:BA:B9:87:60:D8:3B:2F:D5:11:69:29:8C:FE:74:0D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/p_Rao7O6uYdg2Dsv1RFpKYz-dA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.21.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b1:1e:c8:c3:81:75:82:41:ac:1f:2c:78:bd:3c:7a:79:15:
2b:d8:26:98:2f:77:63:3b:24:0c:7b:b0:99:fa:c3:fc:57:a5:
e8:2f:a4:33:e8:6e:9e:9c:17:76:22:3b:5f:f9:48:ad:71:18:
93:de:84:d4:89:15:62:a0:00:34:d7:3b:aa:37:5c:65:3f:9f:
8b:46:96:96:45:51:f3:aa:6e:10:af:d7:74:8e:49:13:40:67:
ba:91:03:4f:ff:fb:72:18:bf:6e:10:f0:fc:f0:91:13:ec:a2:
7c:8f:77:e2:b4:75:01:8f:87:4a:db:52:d2:4d:61:9b:5e:bc:
27:ec:54:05:21:34:23:25:ee:6e:37:13:d1:03:a7:c4:f7:6b:
6d:74:20:4d:3d:74:9f:1d:e6:86:c3:df:92:7a:71:89:cf:0a:
ce:ae:92:28:a9:d1:38:77:22:bf:cc:36:aa:14:4d:4f:6d:49:
63:fe:92:7d:e1:65:aa:f1:2b:b1:54:b3:3c:e2:cb:c8:8e:85:
79:47:21:07:be:61:84:8e:73:6d:62:73:28:0f:53:b4:25:f1:
fc:9a:3f:df:9d:6c:7f:9e:61:48:57:bd:5a:3a:1c:90:47:97:
b9:12:e5:c4:00:ec:2b:55:7a:41:ff:10:b9:67:cb:55:c3:5d:
72:de:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org